CoAP Resource Enum

Enumerate CoAP resources from .well-known/core and optionally GET discovered paths. Uses a CoAP session or rhost. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate CoAP resources via .well-known/core and optional path probes.""" from kittysploit import from lib.protocols.coap.client import...

Matter discover

Browse Matter commissionable/operational DNS-SD records and summarize vendor, device type, and commissioning mode session preferred. !/usr/bin/env python3 -- coding: utf-8 -- """Matter mDNS discovery via session or target.""" from kittysploit import from lib.protocols.matter.client import...

UPnP Device Inventory

Dump UPnP device identity and service list from an SSDP session or direct LOCATION/rhost discover. !/usr/bin/env python3 -- coding: utf-8 -- """Inventory UPnP device description and services.""" from kittysploit import from lib.protocols.upnp.client import SSDPPORT from lib.protocols.upnp.session...

UPnP IGD Port Map Dump

Call IGD GetExternalIPAddress / GetStatusInfo / GetGenericPortMappingEntry to inventory NAT port forwards exposed by the gateway. !/usr/bin/env python3 -- coding: utf-8 -- """Dump IGD external IP and port mappings via UPnP WANIP/WANPPP actions.""" from kittysploit import from...

MQTT Topic Dump

Subscribe to broker topics default and $SYS/ for a short window and dump messages seen — including retained. Works on MQTT sessions or with rhost/rport. !/usr/bin/env python3 -- coding: utf-8 -- """Dump MQTT topics / retained messages from a broker session or direct connect.""" from kittysploit...

ONVIF Device Information

Query an IP camera ONVIF device service for manufacturer/model/firmware and Media service XAddr. Prefers an ONVIF session when set. !/usr/bin/env python3 -- coding: utf-8 -- """ONVIF device information gather HTTP SOAP.""" from kittysploit import from lib.protocols.onvif.session import...

OpenDoor v5.18.0

OpenDoor — OWASP Web Recon & Directory Discovery Platform OpenDoor is an open-source CLI Recon Platform for authorized web reconnaissance, directory discovery, subdomain enumeration, fingerprints, WAF detection, bypass probing, response filtering, reporting, open-redirect checks, bounded crawl an...

nerva v1.57.0

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

ctf-toolkit

CTF Cheatsheets Collection !CTFhttps://img.shields.io/badg...

redamon v6.2.5

Unmask the hidden before the world does An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merge...

Fingerprint-Driven Automation: Coupling Reconnaissance with POC Verification

In the field of network security confrontation, reconnaissance is the first and most critical step. Accurate, efficient, and comprehensive reconnaissance can help network security workers more fully understand the target's current state, identify potential weaknesses, and formulate a targeted...

Malicious code in tidal-embed-player (npm)

Source: amazon-inspector 005d40bc86aa5e012bfb9a0cd23cf5de5c4d93b1f65880b2273b8708891fa7e5 package.json declares a preinstall hook that runs index.js on npm install. index.js collects host identifiers os.hostname, os.userInfo.username, homedir, DNS servers, cwd, reads the package.json, and reads...

Malicious code in jobber-app-template-react (npm)

Source: amazon-inspector 844a2ac73b588b6c0c7c370dd647685768992ff3e6b5ef492e6fc6dc6be240ce The package's preinstall hook runs index.js which fires automatically on npm install. The script collects host reconnaissance os.hostname, os.userInfo.username, home directory, DNS servers, dirname and reads...

MAL-2026-11134 Malicious code in color-convert-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ede9e30312b6e32aeb2a3ed39042fed67db7f1cee50591f906a228f61673ef9 The package's postinstall.js runs automatically on npm install and executes a shell pipeline that collects host identity hostname, whoami, id, sudo -...

MAL-2026-11152 Malicious code in tidal-embed-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005d40bc86aa5e012bfb9a0cd23cf5de5c4d93b1f65880b2273b8708891fa7e5 package.json declares a preinstall hook that runs index.js on npm install. index.js collects host identifiers os.hostname, os.userInfo.username,...

Keycloak Admin Console Configuration Disclosure Detection

Detected Keycloak admin console configuration was exposing realm name, client ID, SSL requirements, and authentication server URL enabling reconnaissance and targeted authentication attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Detected Keycloak admin console configuration was exposing...

Laravel Pulse - Unauthenticated Dashboard Access Detection

Laravel Pulse monitoring dashboard is accessible without authentication. Pulse displays server performance metrics, slow queries, user activity, cache hit rates, and exception logs that could aid attackers in reconnaissance. !/usr/bin/env python3 -- coding: utf-8 -- """Laravel Pulse monitoring...

nerva v1.53.1

Nerva Nerva: Fast Service Fingerprinting CLI Features • Installation • Quick Start • Usage • Protocols • Library • Use Cases • Troubleshooting High-performance service fingerprinting written in Go. Identify 170+ network protocols across TCP, UDP, and SCTP transports with rich metadata extraction...

RedAmon 6.2.5

An autonomous AI framework that chains reconnaissance, exploitation, and post-exploitation into a single pipeline, then goes further by triaging every finding, implementing code fixes, and opening pull requests on your repository. From first packet to merged patch, with human oversight at every...

Malicious code in stripe-internal-utils (npm)

Source: amazon-inspector b6add7fd3034c5b0d00e39e2cbfeb7c664085ef412612b53ebe9fd81767449be package.json declares a postinstall hook that auto-fires on npm install and performs reconnaissance + exfiltration against the installer. The inline node -e payload fetches the installer's public IP from...