KitPloit - PenTest Tools!
Top 20 Most Popular Hacking Tools in 2021

https://blogger.googleusercontent.com/img/a/AVvXsEi1tfWMt97GFTwvK60i8Sqd18j116_HJIZ_SQ9GEewXI7S3O7TwrMVY-NlNO1fQiJU6m6J4oBArRY9aH98asooo3SCXKdr_EEn4vpN1Xb22mFy8_0v3-2qucK48PSqaa6lk_uIHANDYyNH8p8D0kfRIkjtb7KM10n7tFKXl2I-WKpW7qr5SNkDw1dqdqw=w640-h426 As last year, this year we made a ranking with the most popular tools between January and December 2021.
Topics of the tools focus on Phishing, Information Gathering, Automation Tools,, among others.
Without going into further details, we have prepared a useful list of the most popular tools in Kitploit 2021: * Zphisher - Automated Phishing Toolhttps://blogger.googleusercontent.com/img/a/AVvXsEiM9qBg00LJf2pmfhTcm1uD7HD198IijaLQdQJi9aQJO2R4xkOlShU6y9gfkbuOF2z1UqryRUx2tb5nIPSpGOvtAzwQnaYAmaKw0-191aZKGreJOgGGpfddmUD9YTf9jffVS2di28q8mg6-v6BQW8r5267lJO9et-tSQMHf4aqhP4D_GZFWr5l028iunw=s400 * Dockerized-Android - A Container-Based Framework To Enable The Integration Of Mobile Components In Security Training Platformshttps://blogger.googleusercontent.com/img/a/AVvXsEhkmsrW56PMBXLP5uKH0oNAxz_4kxZHpso2rWvSGDqwqZkXLMuJbfvFBTmQJbj2Ed-uxLYsOtTkfKhsFuzW5VfTqPFRSy3ofw2Rk7jORqxER45YAMrlpml_nxG8Y4TRHV7uePucFgWYaA_92K28CQ0YCmnnghp1_G0abjVg8Qx384AVDP29q9dsRXeNxg=s400 * Emp3R0R - Linux Post-Exploitation Framework Made By Linux Userhttps://blogger.googleusercontent.com/img/a/AVvXsEiEZi9xf0kX4M34jg2I8IqDDdg2rlacfmhBwdUdGn8j8MEy74E-VDwCdpxZL3mI70YbvCS0B5EqVl1l9A8H4Uv3jW-1Z96wOAXyyJJS6INoGXkHdWnfddDJbbz9N7OF0L7mZgiYDz6-dMvCLEl-hZnEukJXcWyBheWTmSOUCdTt3kc7fJvF8aU-aKPMYw=s400 * MurMurHash - Tool To Calculate A MurmurHash Value Of A Favicon To Hunt Phishing Websites On The Shodan Platformhttps://blogger.googleusercontent.com/img/a/AVvXsEgMxWNlCfEvXJPahpZnGFIuSHBfKw3wG6hMhYNrPC0jzJhS9pBjcKSPq93Oj1Iwur6PepgJUrvlhqzx1qju_3jeCfKLn-wvWh4cdU3y1kPl1DWdzgyMyJYIXR7bI53gTFXLQyexaZg_68oMgEG8myG0RDq8l3yct4w-IWJmAMC4Uic1oS2C2kaNWsrTYA=s400 * CiLocks - Android LockScreen Bypasshttps://blogger.googleusercontent.com/img/a/AVvXsEjlKDePT7QrdidJi75I-s6fhYkKz2K8gmZ3e_TAZZ7eK2RjTOADY61UdtZklyx4NvWBroW0lM4HXv3_Z0o5EyLwicq-6gBgJBJBgCSlOJxAfFLR4_76BHrowxMK_lTVTglh1gbop9UDg8-CHQhO2OExMHCdSE641WCo7sQq4sOtvRwtIBYdTWu7CXxi1g=s400 * Viper - Intranet Pentesting Tool With Webuihttps://blogger.googleusercontent.com/img/a/AVvXsEg6o36ba5VB74-26eLi9-w_QElh0ck1DOsdciojRPnB07GbjNqYL0UxjjSjPi4-r9w7Z1KggnzxtdKlVJI_KIYgnf_orN48nNA4S2QflQ49pd8c9hTszDOnPNWYCOWSnMWHU7F-qcjlNWAXxyaQs1LXng91YKaFx8rNi967dNEkzLXZ-aGz1KTc5LKLmA=s400 * Forbidden - Bypass 4Xx HTTP Response Status Codeshttps://blogger.googleusercontent.com/img/a/AVvXsEijpTNoXpjab2V9MC7eWUhmbQnLV8tvcA7sea6mlguq3Ecwc32Emxf7RqklIRgFDC6aecEL_8LGn_baGCFfNm2WCJ1N6br8LrJYeZAxAe5qMyVm7hSJwCjf8TXpuBnimAviWjLjiVLidaoKQbv3_B5k8R6wrWRLG8K2DLlk0rbsviHdFOyLGntOrPeVJg=s400 * AzureHunter - A Cloud Forensics Powershell Module To Run Threat Hunting Playbooks On Data From Azure And O365https://blogger.googleusercontent.com/img/a/AVvXsEgBTOwTX5fmPrhfdfuQu0B7zqkafXmCCvSC0xU3kXIHgA6EfgA_nVtV2BbonIeLQWg2NDc59vwPGh3TMJg-6YXZTImWVAO03TIH3QV8sl9lrg7LZW0xsdPVQYmooYkQrCriRfHL7HkMNRm-7P2rSp6nwCV64ipmI0M6i0DKvrS-v7dn4mqe-rVjx4vUoA=s400 * 403Bypasser - Automates The Techniques Used To Circumvent Access Control Restrictions On Target Pageshttps://blogger.googleusercontent.com/img/a/AVvXsEiT014in2ADKOj3XlHRWnUKwZcXT3z2IodVuFw1jzbRqTuRNTAsz9JLC052LvVq0M6PSPiBOiXJZzosye9gexPAYOCaJftoOGtWVCNa3P4FpcdfTFvO1uabiykWtgh6q2zd9wKi8v6ce9paXn5NikX63w795ok6DldneKifmc5SccRY06K_mKpcx3NVYA=s400 * Smuggler - An HTTP Request Smuggling / Desync Testing Toolhttps://blogger.googleusercontent.com/img/a/AVvXsEg76SrvyXeeqAgubs3kCkNWUPtzUX1Xq4eQ2O_XyzOmETwKpGRM3gLIfcbLSZyqrGsihuVIkuAghoshNC4RixbrW3VI8hMTCrneL3taDeSmuGauT5f7giX_-G84mO1WKdMqkpVhQUIXEK-SGjJULfMHpwp5IaV2TMGuYcyG339OSmpr1Uh6RSe[...]

jzr78gQ=s400 * Nginxpwner - Tool to look for common Nginx misconfigurations and vulnerabilitieshttps://blogger.googleusercontent.com/img/a/AVvXsEh0sUkfqezX2iSn1c5vU74_CXhwSktSxgBPyeV1xs8B-m9z8rVSomlUbGe2QPqPTojhPV01Bsm-jjmIMUi70rYJcgPpgZsQIO-nle86_eGtJ7Aq54GvRdHBlxuQZ-bWmz7DYvAkeH8lEUc9jcUjYEBS2zu4PgpY8v8VV9XHAHLiWAPW_5HZmIPy2k5WKg=s400 * SharpML - Machine Learning Network Share Password Hunting Toolkithttps://blogger.googleusercontent.com/img/a/AVvXsEgQcrrr-X2ISrQs6IhbPDoZqOjDXaip2s7cXUknflUkCwg9rjjeOEvP-DPGkOjDrQU-KKMffd_6RQtCd0wxjvz4N01nYtChv5GAvC0nAu54tbfEVgSQoabV5JDhhIUNqJaDE4nThyPdhVwdZVcEXARMMYTykAl8GY9dGEbhYmfJgMkGAhw0rcj5Uz3dOw=s400 * PeTeReport - An Open-Source Application Vulnerability Reporting Toolhttps://blogger.googleusercontent.com/img/a/AVvXsEjK067qpx9dllm2cqkw27KriApSPVvCiQMpSaKoAYYs-S_eIQYLEqYUVW_eIYISk6fT_TW0JwQBmfVxcoPHWSEnwwyzWrsDAPLutnUO9uoWxr3UHDCP7-kaRxID0cqswk20y7txyUUWKdY9lDUabppl_Y5LteEPY5Q6GZdD3b-RR6slEYj1sre_CDQoNQ=s400 * Byp4Xx - Simple Bash Script To Bypass "403 Forbidden" Messages With Well-Known Methods Discussed In #Bugbountytipshttps://blogger.googleusercontent.com/img/a/AVvXsEiE3XfCkho-GPgGYOmIj4gE-Vk4usZLM4jsQQROuJt81P3KQSNRB6swqjd45OKnHRfy0pqpfSNjp5PY5IeW_KwHxTZ13UwaFrJE7SY9gRD60efK5UAH1W7yL5QV71svFHe8VHMtaTUNoryA50bnZxkMFhu11t4l9nJH_0ai9l5Oj1JvX_HRmgRcfjxqrg=s400 * SillyRAT - A Cross Platform Multifunctional (Windows/Linux/Mac) RAThttps://blogger.googleusercontent.com/img/a/AVvXsEjMTvtA6nqYpDWcSK9WbUQFQQp6IO296YB4Zfc0lMhUPNQX-TqT57E_SmhTLAIrVuBc1J_5HLYBI_QuAr7tSvumDzxIeyro_2TmjZRiA4o32vxE61rcXEuKEgZeMRTsob1eG6N9TaNSZJJItgLF4qsxTXBvpmJq4W1yfClZRXYsLLiPFsyE4omDKawXvA=s400 * Qu1cksc0pe - All-in-One Static Malware Analysis Tool https://blogger.googleusercontent.com/img/a/AVvXsEjXMcibvLr1hmsXVzSos-VN7chDu7q91DhpsQc9FUiiOej4oPiwO-SzoF3_3_FzHxlsCe2FAQszWAwkS3_vWxsW4JTkMWE1X5TOGlvER8TAa19VqhV7tsiT7Ju90lcTc8CdMnGM_700_v-N0BKt4ZCBAhEXqarH2kx4jyEAI7CwGhl_edCH9HHpqReJnQ=s400 * Android-PIN-Bruteforce - Unlock An Android Phone (Or Device) By Bruteforcing The Lockscreen PINhttps://blogger.googleusercontent.com/img/a/AVvXsEhlr5C9puqCUbbPaTIHfKkXJlq2y5V4njJPE1uZzvurHL5kKxM4qboFErXpKmH0eG6ujEqE9ZHRlYRN3XYm_Tx1NIqz8M02cNMfF8agNE0PpmMrRERwtx819QyHAk7np_l889vS_r0KwLh4kmKt1bSwyFyTsSzpWiBerPptMIk6FykuIQPvlEPbN5UHSg=s400 * Arbitrium-RAT - A Cross-Platform, Fully Undetectable Remote Access Trojan, To Control Android, Windows And Linuxthttps://blogger.googleusercontent.com/img/a/AVvXsEiq1NtF8-ot3rHLJ8HW9F2JG6PaX4ebre2ILzofKFnm0LGs1IOwps3YqAMqbjASv8ijc1AEMn8agVZGruBO-I6YWOIELNj2-nNSEcdUTTQzxP2Ja3k2JHylvg58KpG2xTOs135TrdBgavqUoC6xXgo-fXhBlWJaECfHn6s48e8-biAzd4Ygzi0_w-DSow=s400 * AdvPhishing - This Is Advance Phishing Tool! OTP PHISHINGhttps://blogger.googleusercontent.com/img/a/AVvXsEguYy5w7e9IztLQOa5H8V53QWYsLEWQCr4SlPQ3OC6DWJOJm_RQiHOaWKa2ksPMtyYkC8V73F2e-vBQ7THi3RHi515Nzv_yD3Z9iE6hCaN6f9UzFYwV_VOfyuVkMVvBJNmWBtaq84FL0QAlNYfjjNLsaCdnCJnG5JYohiu1oSybX7ffqye-ek2b-cONYg=s400 * MOSINT - OSINT Tool For Emailshttps://blogger.googleusercontent.com/img/a/AVvXsEipACMFyuSokogC0vEde5AidqACfvEJocUj7rm9XrCrNUk5jXJ7KmOyuoGagLE3nIb7QIER3J4yxewPEq0M1uuwu8_R8FG-FwLe4wAcdnaMd3-XjSbSW4tWbKqiZXhHEkECYe1GlMF42E0MLyQFG_9VKXgdwJFabamWidabept2uAhyh-uBr-B66wLVWw=s320 Happy New Year wishes the KitPloit team!

Dark Reading: Attacks/Breaches
A Year in Microsoft Bugs: The Most Critical, Overlooked & Hard to Patch

Severe flaws in Microsoft Exchange and Windows Print Spooler stood out amid a wide range of vulnerabilities security teams were forced to prioritize in 2021.

Dark Reading: Attacks/Breaches
An Adaptive Security Strategy Is Critical for Stopping Advanced Attacks

Ransomware demands a new approach to incident response.

Top 20 Most Popular Hacking Tools in 2021

As last year, this year we made a ranking with the most popular tools between January and December 2021. Topics of the tools focus on Phishing, Information Gathering, Automation Tools,, among others. Without going into further details, we have prepared a useful list of the most popular tools in Kitploit 2021: Zphisher - Automated Phishing Tool Dockerized-Android - A Container-Based Framework To Enable The Integration Of Mobile Components In Security Training Platforms Emp3R0R - Linux Post-Exploitation Framework Made By Linux User MurMurHash - Tool To Calculate A MurmurHash Value Of A Favicon To Hunt Phishing Websites On The Shodan Platform CiLocks - Android LockScreen Bypass Viper - Intranet Pentesting Tool With Webui Forbidden - Bypass 4Xx HTTP Response Status Codes AzureHunter - A Cloud Forensics Powershell Module To Run Threat Hunting Playbooks On Data From Azure And O365 403Bypasser - Automates The Techniques Used To Circumvent Access Control Restrictions On Target Pages Smuggler - An HTTP Request Smuggling / Desync Testing Tool Nginxpwner - Tool to look for common Nginx misconfigurations and vulnerabilities SharpML - Machine Learning Network Share Password Hunting Toolkit PeTeReport - An Open-Source Application Vulnerability Reporting Tool Byp4Xx - Simple Bash Script To Bypass "403 Forbidden" Messages With Well-Known Methods Discussed In #Bugbountytips SillyRAT - A Cross Platform Multifunctional (Windows/Linux/Mac) RAT Qu1cksc0pe - All-in-One Static Malware Analysis Tool Android-PIN-Bruteforce - Unlock An Android Phone (Or Device) By Bruteforcing The Lockscreen PIN Arbitrium-RAT - A Cross-Platform, Fully Undetectable Remote Access Trojan, To Control Android, Windows And Linuxt AdvPhishing - This Is Advance Phishing Tool! OTP PHISHING MOSINT - OSINT Tool For Emails Happy New Year wishes the KitPloit team!
Read more...

[Campaign] — HappyLand testnet invitation!
https://medium.com/@happyland_finance/campaign-happyland-testnet-invitation-d8956063f5e0?source=rss------bug_bounty-5

HappyLand Testnet will arrive at the end of December and we are super thrilled to welcome you. This is an opportunity to let you imagine…Continue reading on Medium » (https://medium.com/@happyland_finance/campaign-happyland-testnet-invitation-d8956063f5e0?source=rss------bug_bounty-5)

CVE-2021–38314 Leads to Sensitive Information Disclosure

Hello Hackers!Continue reading on Medium »
Read more...

Bypassing HttpOnly with phpinfo file

While doing Web Application assessment with Higgsx, We found stored Cross-Site Scripting(XSS) which was a nice finding but we could not…Continue reading on Medium »
Read more...

[Campaign] — HappyLand testnet invitation!

HappyLand Testnet will arrive at the end of December and we are super thrilled to welcome you. This is an opportunity to let you imagine…Continue reading on Medium »
Read more...

Hacking on Medium
Neovim for Beginners — Key Mappings and WhichKey

https://cdn-images-1.medium.com/max/1866/1*bJai-3P_pM7JVqqXxn6o-Q.png
Configure key mappings and the WhichKey plugin.

Continue reading on Medium »

Hacking on Medium
Focusing on Security: Lovelace World Partners with Lossless

https://cdn-images-1.medium.com/max/2600/1*5c2ieDAIXiwLMcz3yyvDZA.jpeg
Lovelace World is proud to announce its partnership with Lossless, the first DeFi fraud and hack prevention protocol aiming to create a…

Continue reading on Medium »

Hacking on Medium
Reverse Shell Generator

https://cdn-images-1.medium.com/max/628/0*h9PfoUF-IHVU3QGD.png
Através de uma plataforma Web você consegue utilizar um gerador de conexão reversa de diversos tipos de conexões para Windows, Linux e MAC.

Continue reading on 100security »

Hacking on Medium
Bounty Hacker — TryHackMe Writeups (Resolução)

https://cdn-images-1.medium.com/max/780/1*TTR5WaocSa3OmldKWJHCcA.png
Para quem está iniciando na área de segurança essa máquina é um excelente começo pois aborda todas as etapas como scanning, brute-force…

Continue reading on Medium »

SSRF in Align Technology, Inc.
https://medium.com/@amnotacat/ssrf-in-align-technology-inc-52df0d3e3c0a?source=rss------bug_bounty-5