multiplier

Multiplier finds more bugs faster Multiplier provides precise and comprehensive code understanding capabilities. It does so by saving build artifacts into a database, and then making them persistently accessible using a C++ or Python API. Multiplier emphasizes the ability to uniquely identify all...

Aurora-Incident-Response

Aurora Respuesta a Incidentes Documentación de respuesta a incidentes hecha fácil. Desarrollado por respondedores de incidentes para respondedores de incidentes. Aurora lleva la 'Hoja de Cálculo del Apocalipsis' utilizada en la clase SANS FOR508 al siguiente nivel. Habiendo liderado muchos casos ...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install root@kitploit: GO111MODULE=on go install...

litefuzz

litefuzz Un fuzzer multiplataforma para probar binarios en espacio de usuario, clientes y servidores. Ha encontrado errores en más de 50 aplicaciones y bibliotecas de empresas importantes y código abierto. Configuración simple para comenzar a fuzzear en Linux, Mac y Windows. litefuzz intro why ho...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

dorkscout

dorkscout dokrscout è uno strumento per automatizzare la ricerca di applicazioni vulnerabili o file segreti su internet attraverso ricerche Google. dorkscout inizia recuperando le liste di dork da https://www.exploit-db.com/google-hacking-database e poi esegue la scansione di un target specifico ...

lava

LAVA: Großflächige automatisierte Hinzufügung von Schwachstellen Die Bewertung und Verbesserung von Fehlerfindungswerkzeugen ist derzeit schwierig aufgrund eines Mangels an Ground-Truth-Korpora d.h. Software mit bekannten Fehlern und auslösenden Eingaben. LAVA versucht, dieses Problem zu lösen,...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

CVE-2026-70419

creationtimestamp| type| source ---|---|--- 2026-08-26 20:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtz4pern6f22 2026-08-26 20:07:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtz54ufstr25 2026-08-27 02:21:53+00:00| seen|...

xnLinkFinder

Über - v8.2 Dieses Tool wird verwendet, um Endpunkte zu entdecken, potenzielle Parameter zu entdecken, eine zielspezifische Wortliste zu generieren und Geheimnisse für ein bestimmtes Ziel zu finden. Es kann sie finden durch: Crawlen eines Ziels eine Domain/URL übergeben Crawlen mehrerer Ziele ein...

aes-finder

AES Finder Utility to find AES keys in running process memory. Works for 128, 192 and 256-bit keys. Usage Open aes-finder.sln solution in Visual Studio 2013 to compile source. Alternatively use gcc/clang: root@kitploit: g++ -O3 -march=native -fomit-frame-pointer aes-finder.cpp -o aes-finder To...

CVE-2026-57171

creationtimestamp| type| source ---|---|--- 2026-08-26 00:34:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ar4qbv6h6ay2d...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

llm-council-vapt

LLM Council — Validazione delle evidenze VAPT Una pipeline di peer-review cieca che convalida un'evidenza di penetration test prima che arrivi al cliente. Lenti esperte indipendenti valutano l'evidenza, si sottopongono a revisione cieca l'una con l'altra, e un Presidente sintetizza un verdetto...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

ConcoLLMic

ConcoLLMic: Agentische konkolische Ausführung Veröffentlichung : IEEE S&P 2026 ConcoLLMic ist der erste sprach- und theorieunabhängige konkolische Ausführer, der von LLM-Agenten betrieben wird. Im Gegensatz zu traditionellen symbolischen Ausführungswerkzeugen, die sprachspezifische...