SearchOrg

SearchOrg Inserendo il dominio di posta elettronica di un'azienda si ottengono informazioni usando DNS, NMAP e Shodan Da tenere presente Sulla macchina deve essere installato NMAP affinché si possa usare il comando È necessario avere un account su Shodan e caricare l'APIKey dove indicato dallo...

SharpSniper

SharpSniper Häufig geht es bei einem Red Team Engagement um mehr als nur die Erlangung von Domain Admin. Manche Kunden möchten sehen, ob bestimmte Benutzer in der Domäne kompromittiert werden können, zum Beispiel der CEO. SharpSniper ist ein einfaches Tool, um die IP-Adresse dieser Benutzer zu...

CVE-2026-62861

TypeBot (chatbot builder) is vulnerable to cross-tenant custom-domain removal prior to 3.18.0 . The root cause is in the custom-domain delete handler (handleDeleteCustomDomain.ts): it authorizes a caller against a client-supplied workspaceId but forwards the client-supplied domain name to the sha...

CVE-2026-65183

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

CVE-2026-65183

Apache Tomcat is affected by a TOCTOU race condition when creating Unix Domain Sockets, allowing an unauthorised local user to access the socket. The Tomcat security team rates this as Low severity, though the CNA-assigned CVSS 3.1 score is 8.1 (HIGH) . Affected versions: 11.0.0-M1 through 11.0.2...

Set-ZerologonMitigation

Set-ZerologonMitigation Schützen Sie Ihre Domänencontroller vor Zerologon CVE-2020-1472. Verwendung Nach der Installation des August-2020-Sicherheitsupdates oder einer späteren kumulativen Version führen Sie das Skript einfach auf jedem von Ihren Domänencontrollern aus. root@kitploit:...

should-i-trust

should-i-trust Zusammenfassung should-i-trust ist ein Tool zur Bewertung von OSINT-Signalen für eine Domain. Anforderungen should-i-trust benötigt API-Schlüssel von den folgenden Quellen: Censys.io - Kostenlos für die ersten 250 Abfragen pro Monat VirusTotal - Kostenlos GrayHatWarFare -...

Reverse_ip_Multithreading1

ReverseipMultithreading1 Doação : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614...

RED_HAWK

Versione 2.0.0 Di R3D@0R2H1N A.K.A Tuhinshubhra Strumento tutto in uno per Information Gathering e Vulnerability Scanning Scansioni che puoi eseguire con RED HAWK : Scansione di base Titolo del sito NUOVO Indirizzo IP Rilevamento del server web MIGLIORATO Rilevamento CMS Rilevamento Cloudflare...

wifi-agent

wifi-agent wifi-agent रोग एक्सेस पॉइंट Rogue access point यह प्रोग्राम केवल शैक्षिक उद्देश्यों के लिए बनाया गया है ताकि यह देखा जा सके कि रोग एक्सेस पॉइंट विधि कैसे काम करती है। प्रोग्राम का कोई भी अनावश्यक उपयोग निषिद्ध है और निर्माता किसी भी व्यक्ति द्वारा अवैध उपयोग के लिए कोई जिम्मेदारी नहीं...

moniorg

moniorg Beschreibung Durch die Durchsicht von CT-Logs kann ein Angreifer auf vollständig passive Weise eine Menge Informationen über die Infrastruktur einer Organisation sammeln, z. B. interne Domains, E-Mail-Adressen. moniorg nutzt Certificate-Transparency-Logs, um neu ausgestellte Domains...

ADSpider

root@kitploit: d8888 8888888b. .d8888b. d8b 888 d88888 888 "Y88b d88P Y88b Y8P 888 d88P888 888 888 Y88b. 888 /\ .-"""-. /\ d88P 888 888 888 "Y888b. 88888b. 888 .d88888 .d88b. 888d888 //\/ ,,, //\ d88P 888 888 888 "Y88b. 888 "88b 888 d88" 888 d8P Y8b 888P" |/| ,;;;;;, |/| d88P 888 888 888 "888...

iptodomain

iptodomain V2 Update V2: Es wurde von Python 2.7 auf 3.8.10 migriert. Jetzt unterstützt es eine Eingabedatei und CSV-Ausgabedatei. Beschreibung: Dieses Tool ermöglicht es Ihnen, Domains aus einem IP-Bereich zu extrahieren, indem es die historischen Informationen verwendet, die in Virustotal...

mscache

mscache uno strumento per manipolare le credenziali della cache di dominio DCC nel registro di Windows, basato principalmente sul lavoro di mimikatz e impacket requisiti python2 pycrypto passlib impacket esempio root@kitploit: python mscache.py --security security --system system dumping domain...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

Olyx

Olyx Un'applicazione Android moderna per l'analisi completa della sicurezza degli URL, che combina più API di rilevamento delle minacce con un rilevamento avanzato dello spoofing dei domini per proteggere gli utenti da siti web dannosi. Schermate Caratteristiche Analisi di Sicurezza Multi-API...

Recheck

Recheck Recheck Domain tief scannen und alle möglichen Domains für eine Übernahme finden Schnelllinks Demo Installation Funktionen Beispiel Ausführung / Installation Wie ausführen? root@kitploit: git clone https://github.com/tegal1337/Recheck cd Recheck npm install npm start Funktionen Funktion|...

ALYCON-Threat-Landscape

ALYCON: Analisi Avanzata del Panorama delle Minacce Rilevamento di Minacce Multi-Dominio tramite Analisi dello Spazio delle Fasi Information-Theoretic Panoramica Visualizzazione dello spazio delle fasi di ALYCON che mostra il rilevamento di minacce multi-dominio e la classificazione delle anomali...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...