gitleaks

Gitleaks root@kitploit: ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks...

xerosploit

Xerosploit Xerosploit is a penetration testing toolkit whose goal is to perform man in the middle attacks for testing purposes. It brings various modules that allow to realise efficient attacks, and also allows to carry out denial of service attacks and port scanning. Powered by bettercap and nma...

Lepus

Lepus Lepus is a tool for enumerating subdomains, checking for subdomain takeovers and perform port scans - and boy, is it fast! Basic Usage root@kitploit: lepus.py yahoo.com Summary Enumeration modes Subdomain Takeover Port Scan Installation Arguments Full command example Enumeration modes The...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

network-attack-detection

Network Attack Detection using Machine Learning Description This project leverages machine learning techniques to classify network attacks such as Port Scanning, Denial of Service DoS, and malware. The input data is in the Netflow V9 format, which is a standard format used by Cisco. The...

Keycloak-12.0.1-CVE-2020-10770

Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi ' Blind Server-Side Request Forgery SSRF Unauthenticated Exploit-DB-50405 Expected outcome: Port scan of localhost or internally accessible hosts. Intended only for educational and testing in corporate environments. This Exploit was...

ReconPi

Recon Pi root@kitploit: . \ \ \ | | // / / \ / | / | | | \ /\ \ | \ | | | || /\ \ /|| /| || / / / / v2.2 - @x1mmartijn ReconPi - A lightweight recon tool that performs extensive reconnaissance with the latest tools using a Raspberry Pi. Start using that Raspberry Pi -- I know you all have...

asnap

Asnap Description Asnap aims to render recon phase easier by providing regularly updated data about which companies owns which ipv4 or ipv6 addresses and allows the user to automate initial port and service scanning. root@kitploit: █████╗ ███████╗███╗ ██╗ █████╗ ██████╗ ██╔══██╗██╔════╝████╗...

Findomain

Findomain The complete solution for domain recognition. Supports screenshotting, port scanning, importing data from other tools, subdomain monitoring, and more. Be alerted on your findings through services such as Discord, Slack, and Telegram. Multiple API Keys for sources and much more. Chat wit...

autoscan

autoscan.sh Overview autoscan.sh is fully automated penetration test tool linked with Metasploit, nmap and other free avialable tools and report all of this in faraday faraday is one tool, you can use it for other open source reporting tools, an example is to export it in jira. Autoscan identifie...

naabu-action

Naabu Action makes it easy to orchestrate naabu with GitHub Action. Example Usage GitHub Action running naabu on list of hosts root@kitploit: - name: 💥 Naabu - Port Scanner uses: projectdiscovery/naabu-action@main with: host: example.com GitHub Action running naabu with custom port scan...

CVE-2020-6308-PoC

CVE-2020-6308 SAP POC SAP BusinessObjects Business Intelligence Platform Web Services versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. Follow me on...

naabu

Features • Installation • Usage • Running naabu • Config • NMAP integration • CDN/WAF Exclusion • Discord Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT/UDP scans o...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

vhostawesome

FunWithVhosts A tool designed to efficiently check for virtual hosts across multiple IP addresses. Description FunWithVhosts automates the process of identifying virtual hosts on given IP addresses. The script checks for open ports, specifically web server ports, and then tries to retrieve conten...

OsTicket < 1.14.3 - Server Side Request Forgery

SSRF vulnerability exists in osTicket before 1.14.3, allowing an attacker to add malicious files to the server or perform port scanning. id: CVE-2020-24881 info: name: OsTicket 1.14.3 - Server Side Request Forgery author: hnd3884 severity: critical description: | SSRF vulnerability exists in...

PCWT

PCWT A web application that makes it easy to run your pentest and bug bounty projects. Description The app provides a convenient web interface for working with various types of files that are used during the pentest, automate port scan and subdomain search. Main page Project settings Domains...

flan

Flan Scan هو أداة مسح ضوئي خفيفة الوزن لشبكاتك. باستخدام Flan Scan يمكنك بسهولة العثور على المنافذ المفتوحة في شبكتك، وتحديد الخدمات وإصداراتها، والحصول على قائمة من الثغرات الأمنية ذات الصلة CVEs التي تؤثر على شبكتك. Flan Scan هو غلاف لـ Nmap والنص البرمجي vulners الذي يحول Nmap إلى أداة مسح ضوئ...

flumberboozle

flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...

Pentest-Cheat-Sheet

Pentest Cheat Sheet There are many cheat sheets out there, but this is mine. It's a work in progress right now, and lives as a rought draft that's updated a lot , at times. I started this while I was studying for my OSCP, but it's now evolving to include more practical things that I need as a red...