Karkinos – Beginner Friendly Penetration Testing Tool

Karkinos is a light-weight Beginner Friendly Penetration Testing Tool, which is basically a ‘Swiss Army Knife’ for pen-testing and/or hacking CTF’s.

Karkinos Beginner Friendly Penetration Testing Tool Features

• Encoding/Decoding characters
• Encrypting/Decrypting text or files
• Reverse shell handling
• Cracking and generating hashes

How to Install Karkinos Beginner Friendly Penetration Testing Tool

Dependencies are:

• Any server capable of hosting PHP
• Tested with PHP 7.4.9
• Tested with Python 3.8
• Make sure it is in your path as:
• Windows: python
• Linux: python3
• If it is not, please change the commands in includes/pid.php
• Raspberry Pi Zero friendly :) (crack hashes at your own risk)

Then:

1. git clone https://github.com/helich0pper/Karkinos.git
2. cd Karkinos
3. pip3 install -r requirements.txt
4. cd wordlists && unzip passlist.zip You can also unzip it manually using file explorer. Just make sure passlist.txt is in wordlists directory.
5. Make sure you have write privilages for db/main.db
6. Enable extension=mysqli in your php.ini file.
7. If you don’t know where to find this, refer to the PHP docs. Note: MySQLi is only used to store statistics.
8. Thats it! Now just host it using your preferred web server or run: php -S 127.0.0.1:8888 in the Karkinos directory.

Important: using port 5555, 5556, or 5557 will conflict with the Modules
If you insist on using these ports, change the PORT value in:

• /bin/Server/app.py Line 87
• /bin/Busting/app.py Line 155
• /bin/PortScan/app.py Line 128

You can download Karkinos here:

Karkinos-main.zip

Or read more here.

Posted in: Hacking Tools

Latest Posts:

CFRipper – CloudFormation Security Scanning & Audit Tool
CFRipper is a Python-based Library and CLI security analyzer that functions as an AWS CloudFormation security scanning and audit tool

CredNinja – Test Credential Validity of Dumped Credentials or Hashes
CredNinja is a tool to quickly test credential validity of dumped credentials (or hashes) across an entire network or domain very efficiently.

assetfinder – Find Related Domains and Subdomains
assetfinder is a Go-based tool to find related domains and subdomains that are related to a given domain from a variety of sources including Facebook and more.

Karkinos – Beginner Friendly Penetration Testing Tool
Karkinos is a light-weight Beginner Friendly Penetration Testing Tool, which is basically a 'Swiss Army Knife' for pen-testing and/or hacking CTF's.

Aclpwn.Py – Exploit ACL Based Privilege Escalation Paths in Active Directory
Aclpwn.py is a tool that interacts with BloodHound< to identify and exploit ACL based privilege escalation paths.

Vulhub – Pre-Built Vulnerable Docker Environments For Learning To Hack
Vulhub is an open-source collection of pre-built vulnerable docker environments for learning to hack. No pre-existing knowledge of docker is required, just execute two simple commands.