scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

sonar v0.4.1

root@kitploit: ███████╗ ██████╗ ███╗ ██╗ █████╗ ██████╗ ██╔════╝██╔═══██╗████╗ ██║██╔══██╗██╔══██╗ ███████╗██║ ██║██╔██╗ ██║███████║██████╔╝ ╚════██║██║ ██║██║╚██╗██║██╔══██║██╔══██╗ ███████║╚██████╔╝██║ ╚████║██║ ██║██║ ██║ ╚══════╝ ╚═════╝ ╚═╝ ╚═══╝╚═╝ ╚═╝╚═╝ ╚═╝ Know what's running on your...

rabid

RABID RA pid B ig I P D ecoder What it is A CLI tool and library allowing to simply decode all kind of BigIP cookies. Features Support all 4 cookie formats CLI tool & library Hackable References Homepage / Documentation: https://orange-cyberdefense.github.io/rabid/ Author Made by Alexandre ZANNI...

NashaVM

NashaVM - Native Sharp Virtual Machine Nasha is a Virtual Machine for .NET files and its runtime was made in C++/CLI Installation root@kitploit: git clone https://github.com/Mrakovic-ORG/NashaVM --recurse cd NashaVM\NashaVM nuget restore msbuild Dependencies dnlib .NET Framework Visual C++...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

LAZYPARIAH

LAZYPARIAH A low-dependency command-line tool for generating reverse shell payloads on the fly. Description LAZYPARIAH is a simple and easily installable command-line tool written in pure Ruby that can be used during penetration tests and capture-the-flag CTF competitions to generate a range of...

whispers

Whispers "My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or...

skf-cli

SKF-CLI Discontinued About SKF Lab is a project from @blabla1337, Powered by OWASP, SKF-CLI is not a official release from OWASP, it's a personal project from myself. No longer Supporting the project cause demo.skflabs changed it's domain and added authnication root@kitploit: $ python3 skf.py...

noseyparker

Nosey Parker 现已由 Titus 取代。Nosey Parker 正式退役 请参见我们的公告文章 https://www.praetorian.com/blog/titus-open-source-secret-scanner/。Titus 仓库可在 https://github.com/praetorian-inc/titus 找到 概述 Nosey Parker 是一个 CLI 工具，用于在文本数据中查找密钥和敏感信息。它本质上是一个专门用于检测密钥的特殊 grep 类工具。 它专为攻击性安全设计（例如，在红队中实现横向移动），但也可以用于防御性安全测试。它在...

nodesub

NODESUB Nodesubは、バグバウンティプログラムでサブドメインを発見するためのコマンドラインツールです。さまざまなサブドメイン列挙手法をサポートし、カスタマイズのための柔軟なオプションを提供します。 機能 CIDR表記を使用したサブドメイン列挙（入力リストをサポート）。 ASNを使用したサブドメイン列挙（入力リストをサポート）。 ドメインリストを使用したサブドメイン列挙。 インストール Nodesubをインストールするには、次のコマンドを使用します。 npm install -g nodesub 注意: ファイル /.config/nodesub/config.ini...

phantomrecon

PhantomRecon PhantomRecon 是一个基于 CLI 的模块化、代理驱动的红队自动化工具，旨在演示由 AI（通过 Agent Development Kit - ADK 使用 Google Gemini）驱动的自主进攻性安全工作流。 快速开始（CLI） 运行交互式控制台（metasploit 风格）： root@kitploit: python -m phantomrecon 一次性非交互式运行： root@kitploit: python -m phantomrecon --target example.com --auto \ --nmap-timeout 30...

CVE-2026-56855 vulnerabilities

Vulnerabilities for packages: gitea-fips, flux-notification-controller-fips, argocd-image-updater, teleport-operator-fips, cg, seaweedfs, external-secrets-operator, kots, bento, frankenphp-8.4, zitadel, docker-fips, bento-fips, gitea, kubevela-fips, cert-manager, grafana-alloy-fips, kaf,...

pyFlipper

PyFlipper Flipper Zero Python CLI Wrapper Articles How to hack a restaurant Functions and characteristics: Flipper serial CLI wrapper Websocket client interface Plain TCP interface What's new firmware 1.x compatibility This release brings the wrapper in line with the current Flipper Zero CLI...

SECURITY-3314-3315

= SECURITY-3314/SECURITY-3315 Mitigation This repository documents mitigations preventing exploitation of SECURITY-3314 and SECURITY-3315 on affected instances. == Overview Access to the CLI needs to be disabled. Both of the following steps must be taken: Remove the CLI HTTP endpoint Disable the...

attackmapper

AttackMapper Attack Path Visualization & Threat Intelligence Platform Features • Installation • Usage • Threat Intel • Contributing Overview AttackMapper is a CLI tool for red team operations that generates attack paths, maps techniques to the MITRE ATT&CK framework, and integrates real-time thre...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

shouganaiyo-loader

shouganaiyo-loader: Forced Entry for Java Agents shouganaiyo-loader is a cross-platform Frida-based Node.js command-line tool that forces Java processes to load a Java/JVMTI agent regardless of whether or not the JVM has disabled the agent attach API. Install root@kitploit: $ sudo npm install -g...

laravel-ignition-Rxss

Insignias Licencia MIT Instalación 1. Instala Python3 y pip Instrucciones aquí Si no puedes resolver esto, realmente no deberías estar usando esto Instala vía pip root@kitploit: pip install laravel-ignition-rxss Ejecuta el siguiente comando para comprobar laravel-ignition-rxss -h Configuraciones ...

passgen

🔐 passgen — Generate passwords from the terminal A small Go CLI that generates secure random passwords with flexible character sets and exclusions. Uses crypto/rand for cryptographically secure randomness. If no charset flags are provided, all sets are enabled by default. Installation Go...

@testurio/cli (>=0.6.3, <=0.7.3) potentially affected by CVE-2026-62681 via orval (8.5.3)

orval NPM version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on orval and may be impacted: - @testurio/cli =0.6.3, =0.7.3 Source cves: CVE-2026-62681 Source advisory: OSV:GHSA-FG9P-MRXR-HVQ7...