byp4xx

root@kitploit: / / / // / / / / / / / // /| |// |// / // / // / // / / Algumas opções do cURL que pode usar como exemplo: -L seguir redirecionamentos respostas 30X -x : para definir um proxy -m para definir um timeout -H para novos cabeçalhos. Escape nas aspas duplas. -d para dados no corpo das...

smbee

smbee जाँच करें कि सिस्टम CVE-2020-0796 SMB v3 के लिए असुरक्षित है या नहीं स्क्रिप्ट golang में लिखी गई है, अस्थिर है उपयोग ./smbee ip...

f-for-java

f-for-java um projeto escrito em go e java que abandonei por causa do CVE-2021-44228 tente corrigi-lo se puder XD O MÓDULO EM JAVA NÃO É MEU...

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

dirsearch

DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...

acheron

About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

CVE-2026-45404

OpenTelemetry-Go versions 0.11.0 through 1.44.0 contain an unsynchronized extraBaggageItems map in the OpenTracing bridge's bridgeSpan. Because Go maps are not safe for concurrent read/write access, concurrent SetBaggageItem and correlation.MapFromContext calls on the same hooked bridgeSpan can t...

urlhunter

root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

cve-2023-36845-scanner

जुनिपर CVE-2023-36845 के लिए भेद्यता स्कैनर यह भेद्यता स्कैनर जुनिपर फ़ायरवॉल को स्कैन करने के लिए उपयोग किया जा सकता है ताकि यह निर्धारित किया जा सके कि वे CVE-2023-36845 के प्रति संवेदनशील हैं या नहीं। चूंकि यह go-exploit के ऊपर बनाया गया है, इस स्कैनर के दो चरण हैं: लक्ष्य सत्यापन यह सुनिश्चित...

cPanelScanner

🔍 Сканер cPanel Быстрый многопоточный инструмент для обнаружения cPanel, написанный на Go. Он сканирует IP-адреса, CIDR-диапазоны или списки целей из файла для выявления служб cPanel, работающих на портах 2082, 2083 и 2087. ✨ Возможности Многопоточное сканирование — настраиваемый параллелизм...

CVE-2022-0847-Container-Escape

CVE-2022-0847-Container-Escape CVE-2022-0847 का उपयोग कंटेनर एस्केप प्राप्त करने के लिए किया जाता है। CVE-2022-0847 Dirty Pipe का उपयोग करके कंटेनर एस्केप प्राप्त करना Go भाषा में कार्यान्वित...

test-certs-site

test-certs-site مقدمة هذا خادم ويب مبني خصيصًا لاستضافة صفحات الاختبار المطلوبة من قبل متطلبات الأساسيات لمنتدى CA/Browser. تحتوي على المتطلب التالي: يجب على المرجع المصدق CA استضافة صفحات ويب اختبارية تسمح لموردي برامج التطبيقات باختبار برامجهم باستخدام شهادات المشتركين التي تتسلسل حتى كل شهادة...

sigmalite

github.com/runreveal/sigmalite O pacote sigmalite fornece um analisador e um motor de execução para o formato de detecção Sigma. root@kitploit: rule, err := sigmalite.ParseRulebyte title: My example rule detection: keywords: - foo - bar selection: EventId: 1234 condition: keywords and selection i...

poc-cve-next

PoC لثغرة Next.js. إشادة بالمصادر. هذا الكود مكتوب بلغة go لكنني استوحيت الفكرة من: github.com/namest504/CVE-2025-66478 لمزيد من المعلومات، قم بزيارة هذا المستودع. تحياتي! إخلاء مسؤولية هذا الكود مُقدَّم لأغراض البحث الأمني والتعليم فقط. استخدام هذه الأداة ضد الأنظمة أو الشبكات دون إذن مسبق غير...

tusk-cli

...

dexfinder

dexfinder अंग्रेज़ी | चीनी | वेबसाइट वेबसाइट : junelegency.github.io/dexfinder क्रॉस-प्लेटफ़ॉर्म APK/DEX विधि और फ़ील्ड संदर्भ खोजकर्ता, जिसमें कॉल चेन ट्रेसिंग, ProGuard/R8 डीऑब्फस्केशन और Android छिपे API का पता लगाना शामिल है। Android के veridex टूल से प्रेरित, Go में बढ़ी हुई क्षमताओं के साथ...