unfurl

unfurl Estrai le parti degli URL forniti su stdin Installazione Se hai Go installato e configurato: root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest Altrimenti scarica l'ultimo binario per la tua piattaforma, estrailo e spostalo da qualche parte nel tuo $PATH es. /usr/bin/:...

awsScrape

AWSScrape AWSScrape è uno strumento progettato per estrarre certificati SSL da tutti gli intervalli IP AWS, cercando parole chiave specifiche nei campi Common Name CN, Organization O e Organizational Unit OU dei certificati. Installazione 1. Clona questo repository: root@kitploit: git clone...

subzy

Subzy सबडोमेन टेकओवर टूल जो can-i-take-over-xyz से रिस्पॉन्स फ़िंगरप्रिंट्स के मिलान के आधार पर काम करता है इंस्टॉलेशन root@kitploit: go install -v github.com/PentestPad/subzy@latest यदि $GOBIN और $GOPATH सही तरीके से सेट हैं, तो प्रोग्राम को इस प्रकार चलाएँ: root@kitploit: $ subzy --help Subdoma...

S3-from-csp

S3-from-csp Estrae tutti i bucket S3 dagli header dei report CSP e poi testa le vulnerabilità di upload dei file Installazione root@kitploit: go install github.com/RandomRobbieBF/S3-from-csp@latest Esecuzione root@kitploit: s3fromcsp file.txt...

csp-log4j

csp-log4j Trova gli URL di report CSP e verifica se sono vulnerabili a log4j Installazione root@kitploit: go install github.com/randomrobbiebf/csp-log4j/ Esecuzione root@kitploit: csp-log4j -input file.txt -collab something.oastify.com...

chart-down

chart-down Scarica e analizza i chart Helm alla ricerca di segreti usando TruffleHog. Data l'URL di un repository Helm, chart-down recupera l'indice del repository, scarica ogni archivio chart, lo estrae ed esegue TruffleHog sul contenuto. Requisiti Go 1.19+ TruffleHog nel PATH brew install...

jsleak

jsleak jsleak ist ein Werkzeug zur Identifizierung sensibler Daten in JS-Dateien mittels Regex-Mustern. Obwohl es dafür entwickelt wurde, kannst du es verwenden, um alles zu identifizieren, solange du ein passendes Regex-Muster hast. Installation Direkt: root@kitploit: your package manager instal...

goldig

Progetto spostato su github.com/rtfmkiesel/goldig goldig Esegue comandi su Windows tramite record DNS. Questa utility crea un server DNS e serve un record TXT malevolo. Basta copiare e incollare il comando dall'output della console nella shell Windows. Utilizzo root@kitploit: usage: goldig OPTION...

PwnedPasswordsChecker

PwnedPasswordsChecker PwnedPasswordsChecker è uno strumento che verifica se l'hash di una password nota in formato SHA1 o NTLM è presente nella lista delle fughe di dati di I Have Been Pwned e il numero di occorrenze. Puoi scaricare la versione con hash codificato per SHA1 qui o quella per NTLM q...

Git-Secret

Git-Secret रिपॉजिटरी में API कुंजी / कुछ कीवर्ड खोजने के लिए Go स्क्रिप्ट्स अपडेट V1.0.2 🚀 कुछ चेकर्स हटाना गिटहब डॉर्क्स वाली उदाहरण फ़ाइल जोड़ना go install कमांड के लिए समर्थन जोड़ना issue 5 स्क्रीनशॉट 📷 कैसे इंस्टॉल करें नवीनतम संस्करण स्थापित करने के लिए: root@kitploit: go install...

jsluice

jsluice jsluice ist ein Go-Paket und ein Kommandozeilen-Tool zum Extrahieren von URLs, Pfaden, Secrets und anderen interessanten Daten aus JavaScript-Quellcode. Wenn du diese Dinge sofort tun möchtest: schau dir das Kommandozeilen-Tool an. Wenn du die Fähigkeiten von jsluice in dein eigenes Proje...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

ROS-20260622-73-0034

The vulnerability of the Go tool pack command language is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary files...

The vulnerability of the Go tool pack command language allows a perpetrator to gain access to read and write arbitrary files.

The vulnerability of the Go tool pack command language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary files...

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 - cPanel/WHM Authentication Bypass This reposi...

CVE-2026-39817

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...

cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction

A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem,...