462 matches found
RatRace
RatRace A lightweight CLI tool for systematically detecting and exploiting race conditions in web applications, APIs, and modern services. What Problem It Solves Race conditions represent one of the highest-impact security vulnerabilities in modern applications, yet they remain poorly covered by...
cve-lite-cli
Most tools tell you what's wrong. CVE Lite CLI tells you what to run...
githubFind3r
githubFind3r githubFind3r is a very fast command line repo/user/commit search tool enter image description here Installation root@kitploit: git clone https://github.com/atmoner/githubFind3r.git cd githubFind3r npm install Run it root@kitploit: node githubFind3r.js...
ttyd
ttyd - Share your terminal over the web ttyd is a simple command-line tool for sharing terminal over the web. Features Built on top of libuv and WebGL2 for speed Fully-featured terminal with CJK and IME support ZMODEM lrzsz / trzsz file transfer support Sixel image output support img2sixel / lsix...
ranger
ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...
TLS-Scanner
TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...
gtfobins-cli
🚀 GTFOBins CLI Overview GTFOBins CLI is a command-line interface for GTFOBins, providing instant access to Unix binary exploitation techniques. This tool helps security professionals and system administrators identify and understand how legitimate Unix binaries can be misused to bypass security...
browser-xpi-malware-scanner
XPI Analyzer — Firefox Extension Security Scanner A command-line tool that analyzes Firefox extension files .xpi for signs of malware, obfuscation, hidden payloads, steganography, and other techniques used to sneak malicious code past extension review teams. What It Does extension-scanner.py tear...
murphysec
中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...
titus
Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...
wsvuls
WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers...
cpufetch
Simple yet fancy CPU architecture fetching tool cpufetch is a command-line tool written in C that displays the CPU information in a clean and beautiful way Table of contents 1. Support...
shed
Shed - .NET runtime inspector Shed is an application that allow to inspect the .NET runtime of a program in order to extract useful information. It can be used to inspect malicious applications in order to have a first general overview of which information are stored once that the malware is...
GitHunt
BHEU Demos This repository contains three demos for Black Hat Europe 2025's The Forensic Trail On GitHub: Hunting For Supply Chain Activity 1. potentialattacksdemo : A Flask web application that shows a demo of identifying and investigating an attack based off the public GH firehose. 2. ghdig : A...
PoisonApple
PoisonApple This is a command-line tool to perform various persistence mechanism techniques on macOS. This tool was designed to be used by threat hunters for cyber threat emulation purposes. Install Do it up: root@kitploit: $ pip3 install poisonapple --user Note: PoisonApple was written & tested...
sx
sx 是一款遵循 UNIX 哲学的命令行网络扫描器。 该项目的目标是创建一款拥有整洁简单代码的最快网络扫描器。 📖 目录 功能特性 安装 从源码构建 快速入门 参考 贡献 致谢 许可证 ✨ 功能特性 ⚡ 比 nmap 快 30 倍 ARP 扫描 ：扫描本地网络以检测活跃设备 ICMP 扫描 ：使用高级 ICMP 扫描技术检测活跃主机和防火墙规则 TCP SYN 扫描 ：传统的半开扫描以发现开放的 TCP 端口 TCP FIN / NULL / Xmas 扫描 ：绕过某些防火墙规则的扫描技术 带有任意 TCP 标志的自定义 TCP 扫描 ：发送任意奇特的报文，并从回复报文中获取所有 TCP...
insect
insect - Descubrimiento de rutas web Versión actual: v1.4 20222.09.03 Una herramienta avanzada de línea de comandos diseñada para realizar fuerza bruta en directorios y archivos de servidores web, también conocida como escáner de rutas web. Idea por @maurosoria y @shelld3v Developement-2022 está...
sshpass-win32
sshpass-win32 Like https://linux.die.net/man/1/sshpass Pre-Requirements To run sshpass, you must install: Windows 10 Insider build 17733 or later Install Winget root@kitploit: winget install xhcoding.sshpass-win32 Scoop root@kitploit: scoop install sshpass Usage root@kitploit: Usage: sshpass...
xsubfind3r
xsubfind3r xsubfind3r 是一个命令行工具，旨在以简单高效的方式发现给定域名的子域名。它通过收集来自多种被动数据源的信息来工作（即不直接与目标交互，而是收集已公开可用的数据）。这使得 xsubfind3r 成为安全研究人员、IT 专业人士以及任何希望深入了解域名关联子域名的用户的强大工具。 目录 功能特性 安装 安装预编译二进制（无需 Go 环境） 从源码安装（需 Go 环境） go install ... go build ... 开发版 通过 Docker 安装（需 Docker 环境） 安装后配置 使用方法 贡献 许可证 功能特性...