PowerMeta

PowerMeta PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them c...

angryFuzzer

AngryFuzz3r Status: Development About the AngryFuzz3r project AngryFuzz3r is a collection of tools for pentesting to gather information and discover vulnerabilities of the targets based on Fuzzedb https://github.com/fuzzdb-project/fuzzdb project UrlFuzz3r-AngryFuzz3r1 Discover hidden files and...

davscan

DAVScan DAVScan is a quick and lightweight webdav scanner designed to discover hidden files and folders on DAV enabled webservers. The scanner works by taking advantage of overly privileged/misconfigured WebDAV servers or servers vulnerable to various disclosure or authentication bypass...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

scavenger

scavenger scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information. Problem Definition: Scavenger confronts a challenging issue typically faced by...

diskwalker

Diskwalker un script sencillo para recorrer tu disco y realizar un seguimiento de conjuntos interesantes de archivos Después de obtener acceso a una máquina remota durante una prueba de penetración, es posible que quieras encontrar archivos de configuración o binarios interesantes para intentar u...

HackerInfo

HackerInfo install : root@kitploit: sudo apt install python3 python3-pip pip3 install termcolor pip3 install google pip3 install optioncomplete pip3 install bs4 pip3 install prettytable git clone https://github.com/Matrix07ksa/HackerInfo/ cd HackerInfo chmod +x HackerInfo ./HackerInfo -h...

tachyon

Tachyon Tachyon 是一个快速的 Web 应用程序安全侦察工具。 它专门用于爬取 Web 应用程序，寻找遗留或未索引的文件，并报告泄漏内部数据的页面或脚本。 用户要求 Linux Python 3.6+ 用户安装 安装： root@kitploit: $ mkdir tachyon $ python3 -m venv tachyon/ $ cd tachyon $ source bin/activate $ pip install tachyon3 $ tachyon -h 升级： root@kitploit: $ cd tachyon $ source bin/activa...

ohmybackup

ohmybackup ohmybackup - Escanea Directorios de Backup de la Víctima y Archivos de Backup ohmybackup Escanea carpetas de backup en sitios objetivo. Busca archivos archivados en las carpetas que encuentra. Con el sistema de escaneo de 2 archivos, añade extensiones y nombres de archivo de diferentes...

Combined-Wordlists

Listas de palabras combinadas Una lista de palabras combinada para el descubrimiento de archivos y directorios recuento actual TBE: 4,510,964 Esta es una lista de palabras combinada de: nullenc0de Jason Haddix Seclists Web Content web-fuzz-wordlist Predrag Cujanović Nahamsec lista de palabras de...

CVE-2026-48855

A flaw was found in Erlang OTP ssh, specifically within the sshsftpd module. An authenticated SFTP client can exploit this vulnerability by creating a symbolic link symlink inside a restricted directory chroot that points to the root directory. When the client reads this symlink, the sshsftpd...

AZL-90129 CVE-2026-48855 affecting package erlang for versions less than 26.2.5.21-2

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh sshsftpd module allows File Discovery. The SSHFXPREADLINK handler in sshsftpd sends the raw result of file:readlink/2 to the client without calling chrootfilename/2 to strip the backend root prefix. An...

PT-2026-48463

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 17.0 through 29.0.1 Erlang OTP versions prior to 28.5.0.2 Erlang OTP versions prior to 27.3.4.13 Description An issue in the ssh sftpd module allows for file discovery through the exposure of sensitive information. The SSH...

CVE-2025-55265

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks...

EUVD-2025-209053

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks...

CVE-2025-55265

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks...

CVE-2025-55265 HCL Aftermarket DPC is affected by File Discovery

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks...

CVE-2025-55265 HCL Aftermarket DPC is affected by File Discovery

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks...

CVE-2025-55265

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks...

CVE-2025-55265

CVE-2025-55265 concerns HCL Aftermarket DPC. Connected documents describe a File Discovery issue that could allow reading sensitive files and enable further attacks. No concrete vendor/version details, root cause, exploit steps, or a published fix are provided in the available sources; monitor fo...