qsreplace

qsreplace 从标准输入接受URL，将所有查询字符串值替换为用户提供的值，每个主机和路径的每个查询字符串参数组合只输出一次。 用法 示例输入文件： root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1 https://example.com/pathtwo?two=2&one=1 https://example.net/a/path?two=2&one=1 替换查询字符串值 root@kitploit: ▶ cat urls.tx...

duplicut

Duplicut :scissors: 快速去重海量字典文件，同时保持原有顺序 由 nil0x42 与 贡献者 共同创建 📖 概述 如今，创建密码字典通常需要将多个数据源拼接在一起。 理想情况下，最可能的密码应位于字典的开头，这样最常见的密码就能被瞬间破解。 借助现有的 去重工具 ，你不得不做出选择： 是 保留顺序OR 处理海量字典。 不幸的是，字典创建这两者都需要 因此我用高度优化的 C 语言编写了 duplicut，以满足这个非常特定的需求 🤓 💻 💡 快速上手 root@kitploit: git clone https://github.com/nil0x42/duplicut ...

anew

anew Añade líneas desde stdin a un archivo, pero solo si no aparecen ya en el archivo. También envía las líneas nuevas a stdout, lo que lo hace similar a un tee -a que elimina duplicados. Ejemplo de uso Aquí, un archivo llamado things.txt contiene una lista de números. newthings.txt contiene una...

naabu

Features • Installation • Usage • Running naabu • Config • NMAP integration • CDN/WAF Exclusion • Discord Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT/UDP scans o...

unimap

Unimap 仅按 IP 地址扫描一次，并在处理大量数据时使用 Nmap 缩短扫描时间。Unimap 是“Unique Nmap Scan ”的缩写。该工具可在 Linux、OSX、Windows 或 Android（Termux）上无问题运行。 为什么？ 如果你计划对整个组织运行 Nmap，你需要考虑到，肯定会有数十个、数百个甚至数千个子域名指向同一个 IP 地址，到那时继续扫描将变得几乎不可能。此外，由于对同一远程主机地址进行多次扫描，你的 IP 最终可能会被屏蔽，还有其他类似问题。 如何实现？ Unimap 使用其自身技术来初步解析所有子域名的 IP...

uddup

UDdup - URL 去重工具 该工具接收一个 URL 列表，并移除那些可能重复且指向同一网页模板的“重复”页面。 例如： root@kitploit: https://www.example.com/product/123 https://www.example.com/product/456 https://www.example.com/product/123?isprod=false https://www.example.com/product/222?isdebug=true 以上所有 URL 可能都指向同一个产品“模板”。 因此，我们的各种扫描器只需要扫描其中部分 URL...

AFLTriage

AFLTriage AFLTriage 是一个使用调试器对崩溃输入文件进行分类的工具。它被设计为可移植，除了 libc 和外部调试器外，不需要任何运行时依赖。它支持对任何程序产生的崩溃进行分类，而不仅仅是 AFL，但特别识别 AFL 目录，因此得名。 一些值得注意的功能包括： 多种报告格式：文本、JSON 和 原始调试器 JSON 并行崩溃分类 崩溃去重 侦察器报告解析 支持带有或不带符号/调试信息的二进制目标 源代码和变量将在报告中标注以提供上下文 目前 AFLTriage 仅支持 GDB，并且仅在 Linux C/C++ 目标上测试过。请注意，AFLTriage...

FOFA-API-Threaded-Searcher

Buscador Multi‑hilo de la API de FOFA Una potente herramienta Python multi‑hilo para consultar la API de FOFA Fofa.so, extraer campos seleccionados y guardar resultados únicos con un formateo inteligente. ✨ Características Multi‑hilo – Obtiene varias páginas de forma concurrente hilos configurabl...

CVE-2025-55182-burpscanner

CVE-2025-55182-burpscanner Plugin de escaneo pasivo de burpsuite basado en la detección de la vulnerabilidad CVE-2025-55182, usando JDK 17 Uso del plugin: Escaneo predeterminado del historial / escaneo activo con clic derecho, al detectar una vulnerabilidad se dirige automáticamente al módulo...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: erofs: Fixed a memory leak caused by LZMA global compressed deduplication. When testing microLZMA EROFS images with the new global compressed deduplication feature enabled -Ededupe, I discovered that some short-lived temporary...

NPM: xmldom: Quadratic-time attribute deduplication

NPM: xmldom: Quadratic-time attribute deduplication vulnerability discovered by ? in WordPress Npm xmldom versions = 0.6.0...

GHSA-8344-3JMQ-59R6 xmldom: Quadratic-time attribute deduplication

Summary xmldom builds the attribute collection of every parsed element by inserting attributes one at a time into a DOM NamedNodeMap. Each insertion first performs a linear scan of all already-inserted attributes to enforce the DOM uniqueness rule no two attributes with the same qualified name /...

xmldom: Quadratic-time attribute deduplication

Summary xmldom builds the attribute collection of every parsed element by inserting attributes one at a time into a DOM NamedNodeMap. Each insertion first performs a linear scan of all already-inserted attributes to enforce the DOM uniqueness rule no two attributes with the same qualified name /...

CVE-2026-83999

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73362

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83999

Windows Resilient File System (ReFS) Deduplication Service is affected by an improper link resolution before file access (link following) flaw that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, hig...

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

PT-2026-88144

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83999: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

CVE-2026-81638

Improper Handling of Alternate Encoding vulnerability in ash-project ashdoubleentry allows an attacker to submit several distinct string spellings of the same identifier. AshDoubleEntry.ULID renders a 128-bit ULID as 26 Crockford base-32 characters, but the first character encodes only 3 bits, so...