KitHack

Kithack is a framework designed to automate the process of downloading and installing different tools for penetration testing, with a special option that allows generating cross-platform backdoors using Metasploit Framework.

KitHack Compatible Distributions:

Installation:

# Update your package list
$ sudo apt update

# Install python3 python3-pip
$ sudo apt install python3 python3-pip

# Clone the repository 
$ git clone https://github.com/AdrMXR/KitHack.git

# Enter the repository
$ cd KitHack

# Install KitHack
$ sudo bash install.sh

# Start KitHack
$ sudo python3 KitHack.py

# You can also run it from the shortcut
$ kithack

# When you want to update run
$ sudo bash update.sh

# To uninstall run
$ sudo bash uninstall.sh

Dependencies:

• sudo
• xterm
• postgresql
• Metasploit-Framework
• apktool
• aapt
• jarsigner
• zipalign
• requests
• pwgen
• py-getch
• python-tk
• pathlib
• python-zenity
• pgrep
• Ngrok authtoken

New features:

1) Debugging of obsolete tools.

• It is essential that our users report us any tool that is not being installed correctly, since that way we will be able to completely debug it from kithack.

2) Integration of new tools.

• As we debug tools we also integrate some new ones, if you have a personal project on github that you would like to appear in our toolkit, or if you are interested in being a kithack contributor, read our contribution policy.

3) Unification of types of Payloads (by stages and without stages).

• Kithack allows us to use payloads in stages and individual. If you want to know their differences, see here.

4) Incorporation of a new method that allows infecting legitimate Android applications.

• Kithack gives us the option to infect an original APK. It should be noted that not all applications are vulnerable.

5) Generation of TCP connections with ngrok.

• Now you can also work with ngrok to carry out attacks outside your network without the need to open ports. The configuration file ngrok.yml is stored in KitHack/.config by default. If for some reason you need kithack to request your authtoken again, write rm .config/ngrok.yml.

6) Metasploit Automation.

• You don't have to waste time re-setting your payload settings, kithack takes care of listening to metasploit quickly.

7) Custom payloads for android.

• Now you also have the possibility to customize your own payload for Android. With kithack you can change the default name of the apk generated by metasploit known as "MainActivity" and you can also modify the default Android icon. Click here to know the format.

8) Automated persistence application for any APK.

• Forget that your [metasploit] session (https://www.metasploit.com) expires very fast, with kithack you can now generate your persistence file for any APK. If you want to know how to start it in the meterpreter shell, click here.

9) Run tools.

• Now the user can run the tools directly from kithack even though they are already installed.

10) Creation of clean.sh.

• If you need to remove the content that kithack has generated in your tools and output folders, you can run the clean.sh file to do it quickly.

Some vulnerable APK:

Screenshots:

Main menu	Backdoor generator

Videos:

Demo 1	Demo 2

Menu:

• Android
• Windows
• Phishing
• Wifi Attacks
• Passwords Attacks
• Web Attacks
• Spoofing
• Information Gathering
• Others
• Backdoors with msfvenom

Bug?

If the tool fails, follow these steps:

1. Take a screenshot and see the error in detail
2. Contact me through the following email: [email protected]
3. Submit the screenshot and explain your problem with that error.

Contributors:

• Ironpuerquito
• C1b0rk

Licence:

MIT License

Copyright (c) 2019 Adrián Guillermo

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.