0l4bs

0l4bs Laboratórios de cross-site scripting para entusiastas de segurança de aplicações web Lista de Desafios : root@kitploit: Desafio 1 | URL Desafio 2 | Formulário Desafio 3 | User-Agent Desafio 4 | Referrer Desafio 5 | Cookie Desafio 6 | LocalStorage Desafio 7 | Página de Login Desafio 8 | Uplo...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

certstreamcatcher

Certstreamcatcher फिशिंग को पकड़ना प्रमाणपत्र पारदर्शिता लॉग को देखकर। यह उपकरण वास्तविक समय में फिशिंग साइटों का पता लगाने के लिए प्रभावी मानकों के साथ रेगेक्स पर आधारित है, certstream का उपयोग करते हुए, और punycode IDNA हमलों जैसे https://www.ṁyetḣerwallet.com का भी पता लगा सकता है। Phishing...

git-wild-hunt

git-wild-hunt Ein Tool zur Jagd nach Anmeldeinformationen in der GitHub-Wildnis, auch bekannt als githunt Erste Schritte 1. Installieren Sie das Tool 2. Konfigurieren Sie Ihren GitHub-Token 3. Suchen Sie nach Anmeldeinformationen 4. Ergebnisse anzeigen: cat results.json | jq 📺 Demo Installation...

pydictor

pydictor README.mdChinesische Version pydictor —— Ein leistungsstarker und nützlicher Hacker-Wörterbuch-Builder für Brute-Force-Angriffe root@kitploit: | | | | ' | | | |/ | |/ | / | '| | | | || | | | | | || | | | ./ , |,|||\/|| || |/ E-Mail: [email protected] Vorwort： root@kitploit: Q:...

Cuteit

Cuteit Obfuscateur d'IP conçu pour rendre une IP malveillante un peu plus mignonne 😄 Un outil Python simple pour vous aider à faire de l'ingénierie sociale, contourner les pare-feu de liste blanche, potentiellement casser les règles regex pour la journalisation de ligne de commande recherchant de...

EKFiddle

EKFiddle v.1.2.6 Eine Erweiterung/Regeln für den Fiddler Classic Web-Debugger zur Analyse von bösartigem Webverkehr. Fiddler Classic Installation Fiddler von hier herunterladen und installieren: https://www.telerik.com/fiddler EKFiddleExtension.exe herunterladen und ausführen Alternativ...

ARTLAS

ARTLAS Sistema di Analisi dei Log di Apache in Tempo Reale Analizzatore di log Apache in tempo reale, basato sulle prime 10 vulnerabilità OWASP, identifica tentativi di esplorazione nella tua applicazione web e notifica te o il tuo team di incidenti su Telegram, Zabbix e Syslog/SIEM. ARTLAS...

CVE-2026-55620

eml_parser is a Python module for parsing EML files. Prior to 3.0.2 , the eml_parser.routing.noparenthesis function in eml_parser/routing.py removes parenthesized CFWS comments from Received: headers using a regex-based fix-point loop with quadratic running time in nesting depth. A single Receive...

CVE-2026-55620 eml_parser: DoS via deeply nested parens in Received headers

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, emlparser.routing.noparenthesis in emlparser/routing.py removes parenthesized CFWS comments from Received: headers with a regex-based...

webshell-analyzer

Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...

FiddleZAP

FiddleZAP FiddleZAP è una versione semplificata di EKFiddle per OWASP ZAP. Con ZAP come proxy web, puoi segnalare traffico dannoso basato su espressioni regolari predefinite. Esempio: Avviso, evidenziazione e marcatura quando una regex corrisponde a una stringa all'interno del codice sorgente HTM...

log4shell-rex

Log4Shell-Rex La seguente espressione regolare è stata scritta nel tentativo di individuare gli indicatori di uno sfruttamento di Log4Shell CVE-2021-44228 e CVE-2021-45046. Se esegui una versione precedente al 21/12/2021, è fortemente consigliato testare e aggiornare. Ho rimosso alcune stranezze ...

credcheck

Caratteristiche Verifica le credenziali del target indicato. Verifica le credenziali in modo passivo usando regex. Script da riga di comando. Utilizzabile come libreria Da fare Pubblicare su PyPI Inclusione della documentazione API Regex mirate per le credenziali Casi di test Più subparser Regex...

CVE-2026-79770

Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...

git-secrets

============= git-secrets Impedisce di committare password e altre informazioni sensibili in un repository git. .. contents:: :depth: 2 Sinossi :: root@kitploit: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git...

url-regex-safe

url-regex-safe Espressione regolare per il matching degli URL. Versione mantenuta, sicura e compatibile con i browser di url-regex. Risolve CVE-2020-7661 per i server Node.js. Funziona in Node v14+ e nei browser. Mantenuta perSpam Scanner e Forward Email...

EUVD-2026-65545

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, Browser Server handleconnection checks Chrome extension origins with re.match and the unanchored expression chrome-extension://a-z0-932. Extra trailing characters pass before websocket.accept, allowing startsession commands and...

CVE-2026-55536

PraisonAI , a multi-agent teams system, contains a patch bypass (of CVE-2026-40289) in its Browser Server _handle_connection() method. The origin validation uses re.match() with the unanchored pattern chrome-extension://[a-z0-9]{32}, so extra trailing characters are ignored, allowing an attacker ...

EUVD-2026-65528

Nokogiri versions before 1.19.3 contain regular expression denial of service vulnerabilities in the CSS selector tokenizer affecting string-literal and identifier tokenization. Attackers can inject adversarial CSS selectors into methods like Nodecss, Nodeatcss, and Searchablesearch to cause...