Lucene search
+L

1037 matches found

Kitploit
Kitploit
added 2026/09/10 5:56 p.m.11 views

save-telegram-chat-history

Save Telegram Chat History Why this extension? Perhaps, many of us like Telegram messenger and use it for conversations with friends. However, we were a bit disappointed by the absence of any sort of easy-accessible "Save Conversation" feature in the messenger. Therefore, we've written a Chrome...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 2:04 p.m.8 views

PenScope

root@kitploit: ██████╗ ███████╗███╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██╔══██╗██╔════╝████╗ ██║██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔════╝ ██████╔╝█████╗ ██╔██╗ ██║███████╗██║ ██║ ██║██████╔╝█████╗ ██╔═══╝ ██╔══╝ ██║╚██╗██║╚════██║██║ ██║ ██║██╔═══╝ ██╔══╝ ██║ ███████╗██║...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 12:58 p.m.6 views

hyperhives-macos-infostealer-analysis

HyperHives macOS Infostealer — Full Technical Analysis Threat intelligence: Rust-based macOS universal binary infostealer delivered through a fake job interview pipeline on Wellfound formerly AngelList. The operator persona "Felix" from "HyperHive" lured targets into running a malicious installer...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/10 11:44 a.m.30 views

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 11:10 a.m.4 views

whatsfoto

WhatsFoto Simple tool to download multiple profile pictures from whatsapp. Its an extensions for Chrome Install Download the zip or folder and drag it into your extension. Make sure you enable developer mode. Or use a zip file. Howto Login to web.whatsapp.com Click on the icon, enter phone number...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 10:49 a.m.5 views

neo

Neo Turn any web app into an API. No official API needed. No browser automation. Neo is a Chrome extension that passively captures every API call your browser makes, learns the patterns, and lets AI or you replay them directly. The Problem AI agents operating web apps today have two options, both...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 10:12 a.m.9 views

debugHunter

debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 9:58 a.m.9 views

DahuaLoginBypass

DahuaLoginBypass Chrome extension that uses vulnerability CVE-2021-33044 to log in to Dahua IP cameras and VTH/VTO video intercom devices without authentication. For other device types NVR/DVR/XVR, etc, there exists CVE-2021-33045 which cannot be exploited with an ordinary web browser. These...

10CVSS7.7AI score0.99871EPSS
SaveExploits13References2
Kitploit
Kitploit
added 2026/09/10 9:13 a.m.10 views

Needle

Needle Chrome extension for Instant access to your bug bounty submission dashboard of various platforms + publicly disclosed reports + bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across various platforms. No need to create any...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:14 a.m.5 views

WPintel

Features • Installation • Use • License • Download Video Demonstration Features Detect WordPress version Detect version vulnerabilities Enumerate Users Detect Themes Detect Plugins Find full path disclosure Check user registration status Installation Google chrome users can download WPintel from...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 5:55 a.m.6 views

rep-chrome

rep+ rep+ is a lightweight Chrome DevTools extension inspired by Burp Suite's Repeater, now supercharged with AI. I often need to poke at a few requests without spinning up the full Burp stack, so I built this extension to keep my workflow fast, focused, and intelligent with integrated LLM suppor...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 5:44 a.m.27 views

ssct

ShadowSocks ConnecTion A wrapper tool for shadowsocks to consistently bypass firewalls. Quick start Automatically connect The easiest way to run this tool is just type ssct in terminal, and ssct will acquire available shadowsocks servers from ishadowsocks and connect to it automatically. Connect ...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 4:01 a.m.5 views

GetBlocked

GetBlocked! Cleaner pages. Fewer trackers. Local-only. GetBlocked! is a lightweight, local-only Chrome extension that helps reduce common third-party website tracking by blocking known tracker requests, cleaning tracking links, and explaining tracking attempts. It is built as a small, inspectable...

5.9AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/10 3:08 a.m.4 views

RSC_Detector

RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ⚠️ Important Notice This extension is designed for educational and security research purposes only. It includes functionality that could be used to test for...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 2:54 a.m.12 views

CSS-Keylogging

CSS Keylogger Chrome extension and Express server that exploits keylogging abilities of CSS. To use Setup Chrome extension 1. Download repository git clone https://github.com/maxchehab/CSS-Keylogging 2. Visit chrome://extensions in your browser or open up the Chrome menu by clicking the icon to t...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 2:38 a.m.22 views

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 2:19 a.m.5 views

on-device-browser-agent

Local Browser - On-Device AI Web Automation Launching support for runanywhere-web-sdk soon in our main repo: please go check it out: https://github.com/RunanywhereAI/runanywhere-sdks A Chrome extension that uses WebLLM to run AI-powered web automation entirely on-device. No cloud APIs, no API key...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 1:02 a.m.8 views

CVE-2026-0628-POC

CVE-2026-0628-POC Proof of Concept PoC for CVE-2026-0628, demonstrating script injection into privileged pages through the use of the tag in Google Chrome. This vulnerability, classified as CWE-862 Missing Authorization, allows a malicious extension to bypass security policies in versions prior t...

8.8CVSS8.1AI score0.0663EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 12:17 a.m.117 views

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 11:25 p.m.7 views

CVE-2025-55182

RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension CVE-2025-55182 & CVE-2025-66478 This repository contains a security research toolkit designed to detect and demonstrate PoC the recently disclosed RCE vulnerabilities affecting React Server Components RSC / Next.js. The toolkit include...

10CVSS7.4AI score0.99802EPSS
SaveExploits390
Rows per page
Query Builder