RatRace

RatRace A lightweight CLI tool for systematically detecting and exploiting race conditions in web applications, APIs, and modern services. What Problem It Solves Race conditions represent one of the highest-impact security vulnerabilities in modern applications, yet they remain poorly covered by...

pwdgenerator

pwdgenerator Customized password dictionary generator Based on bit4woo's passmaker project～ 🙏 Usage, download release Command line: ./pwdgenerator -h Simple usage ./pwdgenerator -d baidu.com -min 6 -max 10 Customized password dictionary generator How to use download release command line:...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

ofp_sniffer

OFPSniffer is an OpenFlow sniffer to be used for troubleshooting and learning purposes. Currently on version 1.2, it dissects all OpenFlow 1.0 messages, works with InfluxDB, Grafana, and Slack. OpenFlow 1.3 will be available on OFPSniffer version 1.3 to be released soon. It works directly on Linu...

preflight

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

gtfobins-cli

🚀 GTFOBins CLI Overview GTFOBins CLI is a command-line interface for GTFOBins, providing instant access to Unix binary exploitation techniques. This tool helps security professionals and system administrators identify and understand how legitimate Unix binaries can be misused to bypass security...

sshpass-win32

sshpass-win32 Like https://linux.die.net/man/1/sshpass Pre-Requirements To run sshpass, you must install: Windows 10 Insider build 17733 or later Install Winget root@kitploit: winget install xhcoding.sshpass-win32 Scoop root@kitploit: scoop install sshpass Usage root@kitploit: Usage: sshpass...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 python CVE-2022-46169.py tageturl...

twifo-cli

T W I F O - C L I Get user information of a Twitter user! Install root@kitploit: $ npm install --global twifo-cli OR root@kitploit: $ sudo npm install --global twifo-cli Usage root@kitploit: $ Usage: twifo Example: $ twifo 9gag Related twifo : API for this tool. quorafy: Get user information of a...

TLS-Scanner

TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...

wappalyzer-next

Wappalyzer Next This project is a command line tool and python library that uses the Wappalyzer browser extension and its fingerprints to detect technologies. Other projects that emerged after the discontinuation of the official open-source project are using outdated fingerprints and lack accurac...

wappalyzer-next

Wappalyzer Next 该项目是一个命令行工具和 Python 库，利用 Wappalyzer 浏览器扩展及其指纹来检测技术。在官方开源项目停止维护后出现的其他项目使用了过时的指纹，并且对动态 Web 应用的检测准确性不足。本项目通过在 Chromium 中运行该扩展（通过 Playwright）来绕过这些限制。 安装 面向用户 面向开发者 常见问题 安装 安装 Python 包后，安装 Playwright 的 Chromium 浏览器： root@kitploit: python -m playwright install chromium 在最小化的 Linux...

exrex

EXREX 正则表达式的非正则方法。 Exrex 是一个命令行工具和 Python 模块，能够生成给定正则表达式的所有或随机匹配字符串，以及更多功能。 它纯 Python 实现，无外部依赖。 有些正则表达式具有无限匹配字符串（例如：a-z+），在这种情况下，exrex 会限制无限部分的最大长度。 Exrex 使用生成器，因此内存使用量不依赖于匹配字符串的数量。 功能 生成所有匹配字符串 生成随机匹配字符串 计算匹配字符串的数量 简化正则表达式 安装 要安装 exrex，只需： root@kitploit: $ pip install exrex 或 root@kitploit: $...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

nomore403

NoMore403 nomore403 是一个命令行工具，用于测试 HTTP 访问控制绕过以及 401、403 及相关响应中的解析器不一致性。 该工具专为实际 Web 安全工作设计：漏洞赏金、渗透测试、安全审查以及访问控制规则的回归测试。它自动化执行一组广泛的请求变异，捕获基线，过滤常见误报，并突出显示最可能表示有意义绕过的响应。 工具功能 给定一个目标 URL，nomore403 会： 1. 发送一个基线请求以捕获被阻止的响应。 2. 可选地自动校准不存在的路径，以了解目标的默认错误行为。 3. 运行一组绕过技术，这些技术会变异请求路径、方法、标头或线路格式。 4...

URS

root@kitploit: /\ /\ /'/',\ \ \ \ \ \ //, \ \ /\ \// // // // U niversal R eddit S craper - A comprehensive Reddit scraping command-line tool written in Python. Sponsors If this project has saved you time, consider sponsoring its development. --- Table of Contents Contact Introduction...

cpufetch

Simple yet fancy CPU architecture fetching tool cpufetch is a command-line tool written in C that displays the CPU information in a clean and beautiful way Table of contents 1. Support...

cve-lite-cli

Most tools tell you what's wrong. CVE Lite CLI tells you what to run...

murphysec

中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...