CMSeeK

¿Qué es un CMS? Un sistema de gestión de contenidos CMS administra la creación y modificación de contenido digital. Normalmente admite múltiples usuarios en un entorno colaborativo. Algunos ejemplos notables son: WordPress, Joomla, Drupal, etc. Historial de versiones...

CMSsc4n

CMSsc4n Tool to identify if a domain has got a CMS and determine his version. At the moment, CMS's supported by CMSsc4n are WordPress,Moodle,Joomla,Drupal and Prestashop. Instalation You can download the latest version of CMSsc4n by cloning the GitHub repository: root@kitploit: git clone...

Spartan

Spartan Reconocimiento como un profesional Wiki • Uso • Galería Características Escaneo de subdominios usando Aquatone y Sublist3r Httprob solo para sitios activos Masscan para puertos abiertos Identificar CMS usando CMSeeK Obtener URLs de Wayback Machine Captura de pantalla usando Aquatone Fuerz...

XAttacker

XAttacker V2.5 Tool FREE XATTACKER A Massive Exploiting Tool capable of scanning and auto-exploiting vulnerabilities in web applications, By providing a target website to the tool, it auto detects its’ architecture if using a Content Management Service CMS and tries to find vulnerabilities based ...

inforfinder

Inforfinder =========== Inforfinder is a tool made to collect information of any domain pointing at a server ip,domain,range,file. Requires python libs: pyRequests, lxml and py3DNS You can do the installation, with pip or you can install the inforfinder app as a package using python setup.py...

inforfinder

Inforfinder =========== Inforfinder は、サーバー（IP、ドメイン、範囲、ファイル）を指す任意のドメインの情報を収集するために作られたツールです。 Python ライブラリが必要です: pyRequests、lxml、py3DNS インストールは、pip を使用するか、python setup.py install または pip install inforfinder.zip で inforfinder アプリをパッケージとしてインストールできます。 setup.py を使わない依存関係のインストール まず、補完ライブラリをインストールする必要がありま...

WhatCMS

WhatCMS.sh Kit de Detección y Explotación de CMS basado en la API de Whatcms.org. Introducción Whatcms.sh puede detectar actualmente el uso de más de 330 diferentes aplicaciones y servicios CMS para luego indicar una lista de herramientas de auditoría de seguridad válidas para el CMS detectado...

pywhatcms

PyWhatCMS Paquete Python para la API de whatcms.com El paquete proporciona una forma sencilla de usar la API de whatcms.org para detectar 467 sistemas de gestión de contenido CMS diferentes Instalación root@kitploit: pip install pywhatcms Uso Primero, importa pywhatcms: root@kitploit: from...

CMS_Detector

CMSDetector Python2 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

ReconDog

ReconDog Reconnaissance Swiss Army Knife Main Features Wizard + CLA interface Can extracts targets from STDIN piped input and act upon them All the information is extracted with APIs, no direct contact is made to the target Utilities Censys: Uses censys.io to gather massive amount of information...

Ashok

Ashok 驚異的な高速偵察スイスアーミーナイフ 📌 はじめに 偵察（Reconnaissance） はペネトレーションテストの第一段階であり、実際の攻撃を計画する前に情報収集を行うことを意味します。Ashokは、偵察フェーズのために特別に設計された、ペネトレーションテスター向けの驚異的な高速偵察ツールです。Ashok-v1.1では、高度なGoogle DorkerとWaybackクローリングマシンを利用できます。 💥 主な機能 root@kitploit: - Wayback Crawler Machine - Google Dorking without limits - Githu...

webkiller

WebKiller V2 Pythonで書かれた情報収集ツール。 プレビュー root@kitploit: ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗...

InfoLeak-Scanner

InfoLeak-Scanner Docker Primero ejecuta docker run --rm -p 8000:80 siwecos/infoleak-scanner. Abre tu navegador y usa el escáner: http://localhost/?url= Instalación Obtén php5, curl y un servidor web: root@kitploit: sudo apt-get install apache2 php5 php5-curl Copia la aplicación al servidor web:...

joomlavs

joomlavs A black box, Ruby powered, Joomla vulnerability scanner What is it? JoomlaVS is a Ruby application that can help automate assessing how vulnerable a Joomla installation is to exploitation. It supports basic finger printing and can scan for vulnerabilities in components, modules and...

FoolishScan

Foolish Scan v2.3 Gold Master Context-Aware CTF & Lab Re...

FoolishScan-

Foolish Scan v2.3 Gold Master Context-Aware CTF & Lab Re...

pathbrute

This is an exploit module/toolkit targeting web servers, specifically designed to brute force directories and files names. The tool, named "pathbrute," uses wordlists from Exploit databases and Metasploit to identify interesting content on servers, including potentially vulnerable websites. It ca...

HawkScan - Security Tool For Reconnaissance And Information Gathering On A Website

Security Tool for Reconnaissance and Information Gathering on a website. python 2.x & 3.x This script use "WafW00f" to detect the WAF in the first step https://github.com/EnableSecurity/wafw00f This script use "Sublist3r" to scan subdomains https://github.com/aboul3la/Sublist3r This script use...

WAES - Auto Enums Websites And Dumps Files As Result

Doing HTB or other CTFs enumeration against targets with HTTPS can become trivial. It can get tiresome to always run the same script/tests on every box eg. nmap, nikto, dirb and so on. A one-click on target with automatic reports coming solves the issue. Furthermore, with a script the enum proces...

VulnX v1.7 - An Intelligent Bot Auto Shell Injector That Detect Vulnerabilities In Multiple Types Of CMS

VulnX Wiki • How To Use • Compatibility • Library • Vulnx is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms, fast cms detection, information gathering and vulnerability Scanning of the target like subdomains, IP addresses, country, org, timezone,...