BloodHound_CustomQueries_Toolset

BloodHoundCustomQueriesToolset Tool to import your customqueries for BloodHound "Legacy" to BloodHound "Community". note: on linux/kali, your customqueries.json file for BloodHound Legacy is located at /.config/bloodhound/customqueries.json Installation 1. Clone this repository. 2. Copy the...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

fprobe

FProbe FProbe - 高速HTTPプローブ インストール root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe 特徴 ドメイン/サブドメインのリストを受け取り、動作しているhttp/httpsサーバーをプローブします。 実行時にRAMとCPUを最適化します。 各ドメインに特別なポートをサポートします。 Status Code、Content Type、Locationなどの追加ヘッダーを含むJSON形式の詳細出力。 使い方 root@kitploit: Usage of fprobe:...

Freeko

How to install: needed 1. Computer 2. SD card 3. Miko 3 1. Download the apks from here 2. copy them to the sd card 3. Startup miko and hit the three dots 4. Go to settings and then Privacy policy 5. Hold on the text in the policy until you see a menu with the option "Share" 6. Tap share and then...

naabu-action

Naabu Action makes it easy to orchestrate naabu with GitHub Action. Example Usage GitHub Action running naabu on list of hosts root@kitploit: - name: 💥 Naabu - Port Scanner uses: projectdiscovery/naabu-action@main with: host: example.com GitHub Action running naabu with custom port scan...

SpringVulScan

SpringVulScan If you like it, give the author a star SpringVulScan -- Burp Suite Plugin Updates 1.1 1. Added custom root path scanning. 2. Right-click to send to SpringVulScan, custom dictionaries, etc. 3. Optimized detection logic. 4. Custom selection can be used not only for detecting route...

CVE-2026-82399

CoreDNS versions prior to 1.14.7 are vulnerable to unauthenticated memory exhaustion via the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC request paths. The root cause is that dns.Msg.Unpack is called on attacker-controlled DNS section counts before dns.DefaultMsgAcceptFunc v...

CVE-2020-14179

CVE-2020-14179 Sensitive data exposure via /secure/QueryComponent!Default.jspa endpoint Priority: High Affects Version/s: 8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names a...

Pymap-Scanner

Pymap-Scanner Features root@kitploit: 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. Installation Modules root@kitploit: $ Pyqt4 $ Nmap RequirementsThird root@kitploit: +xsltproc...

CVE-2024-4577

Fastest CVE-2024-4577 Exploitation Tool Description: PHP CGI Remote Code Execution The CVE-2024-4577 Exploit Tool exploit.py is a Python script designed to exploit web servers' specific vulnerability CVE-2024-4577. Based on the response content, it sends POST requests to a list of provided hosts ...

CVE-2026-87028

Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board instance the requesting user was authorized to edit, and did not enforce page-view permission before generating page-backed summary content. As a result, an...

bxss

Bxss - Blind XSS Scanner 🚀 Description...

nmap

Nmap Nmap 根据自定义许可证发布，该许可证基于 GPLv2（但与其不兼容）。Nmap 许可证允许最终用户免费使用，同时我们也为希望在其产品中重新分发 Nmap 技术的公司提供商业许可证。有关完整详情，请参阅 Nmap 版权与许可。 本软件的最新版本以及 Windows、macOS 和 Linux（RPM）的二进制安装程序可从 Nmap.org 获取。 完整文档也可在 Nmap.org 网站 上获取。 问题和建议可发送至 Nmap-dev 邮件列表。 安装 理想情况下，您只需输入： root@kitploit: ./configure make make install...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2026-87028

CVE-2026-87028 is a cross-board Insecure Direct Object Reference (IDOR) in the Board Custom Slot Preview endpoint of Concrete CMS 9.0.0 through 9.5.3 . The endpoint failed to verify that a submitted InstanceItem belonged to the board instance the requesting user was authorized to edit, and did no...

EUVD-2026-80881

Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board instance the requesting user was authorized to edit, and did not enforce page-view permission before generating page-backed summary content. As a result, an...

ranger

ranger A tool to support security professionals access and interact with remote Microsoft Windows based systems. This project was conceptualized with the thought process, we did not invent the bow or the arrow, just a more efficient way of using it. Ranger is a command-line driven attack and...

maskprocessor

maskprocessor High-Performance word generator with a per-position configurable charset Mask attack Try all combinations from a given keyspace just like in Brute-Force attack, but more specific. Advantage over Brute-Force The reason for doing this and not to stick to the traditional Brute-Force is...

ghostlock-custom

GhostLock Custom — CVE-2026-43499 Adaptation A GhostLock CVE-2026-43499 privilege escalation exploit targeting non-Android Linux 6.x ARM64 kernels. Kernel Characteristics Item| Value ---|--- Architecture| ARM64 AArch64 VABITS| 39 KIMAGETEXTBASE| 0xffffffc008000000 Kernel version| 6.x SELinux| Non...