git-wild-hunt

git-wild-hunt A tool to hunt for credentials in the GitHub wild AKA githunt Getting started 1. Install the tool 2. Configure your GitHub token 3. Search for credentials 4. See results cat results.json | jq 📺 Demo Installation requirements: virtualenv, python3 1. git clone...

SQLiDetector

SQLiDetector Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases. root@kitploit:...

mXtract

mXtract mXtract is an opensource linux based tool that analyzes and dumps memory. It is developed as a pentration testing tool, its primary purpose is to scan memory for private keys, ips, and passwords using regexes. Remember, your results are only as good as your regexes. Screenshots Scan with...

PhishingKitHunter

PhishingKitHunter Find phishing kits which use your brand/organization's files and image. PhishingKitHunter or PKHunter is a tool made for identifying phishing kits URLs used in phishing campains targeting your customers and using some of your own website files as CSS, JS, .... This tool - write ...

yaralyzer

YARALYZER 工具 直观地检查二进制数据和/或文本中所有正则表达式（以及它更性感、更具谍战风格的远亲 YARA 匹配）的匹配结果。看看当你对这些匹配字节强制应用各种字符编码时会怎样。带颜色显示。 快速开始 root@kitploit: pipx install yaralyzer 使用文件中定义的 YARA 规则进行扫描： yaralyze --yara-rules /secret/vault/sigmundsmalwarerules.yara lacanbuysthedip.pdf 使用任意正则表达式进行扫描： yaralyze --regex-pattern 'good and...

FiddleZAP

FiddleZAP FiddleZAP is a simplified version of EKFiddle for OWASP ZAP. With ZAP as your web proxy, you are able to flag malicious traffic based on predefined regular expressions. Example: Alert, highlighting and tagging when a regex matches on a string within the HTML source code of a compromised...

FakeDns

FakeDns 2020年4月14日更新 - 已移除Python 2支持，代码已切换至Python3 现已支持轮询（round-robin）与改进的选项！ 问题反馈： @crypt0s - Twitter [email protected] - 邮箱 一个基于Python正则表达式的DNS服务器！ root@kitploit: USAGE: ./fakedns.py -h -c Config path -i interface IP address --rebind dns.conf应按以下方式进行配置： root@kitploit: RECORD TYPE CODE...

EKFiddle

EKFiddle v.1.2.6 An extension/rules for the Fiddler Classic web debugger to analyze malicious web traffic. Fiddler Classic Installation Download and install Fiddler from here: https://www.telerik.com/fiddler Download and run EKFiddleExtension.exe Alternatively, download EKFiddle.dll and put it in...

httpgrep

描述 一个快速、异步的 Python 工具，可扫描 HTTPS 服务器，并在 HTTP 响应体 和响应头中 grep 字符串或正则表达式模式。 它接受单个主机、URL、CIDR 范围、IP 范围或文件；可对每个目标扫描多个 端口（单个端口、逗号分隔列表或范围，并逐端口自动检测 TLS 与明文）； 可直接从 TLS 证书中提取并扫描基于名称的 vhost；将匹配结果实时 流式输出到终端；并可将结果写入文本、CSV 或 JSONL 日志文件。 它专为大规模扫描而构建：异步核心驱动数千个并发连接，TCP 预检可低成本 跳过无响应的端口，每主机与全局超时确保其不会在缓慢/失效目标上挂起，...

CVE-2022-22978-PoC

CVE 2022-22978：RegexRequestMatcher授权绕过 🥶 概述 据我了解，此漏洞与Spring Security框架中的RegexRequestMatcher 类有关。具体而言，使用RegexRequestMatcher且正则表达式中包含点.的应用程序，可以通过字符\r%0a、 \n%0d被绕过；从而攻击者无需认证即可访问不允许的路径。 受影响的Spring Security框架版本： 5.5.x 低于 5.5.7 5.6.x 低于 5.6.4 以及更早的不受支持的版本。 分析 我们需要访问Spring...

nginx: NGINX: Arbitrary code execution via crafted HTTP requests

A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...

anteater

Anteater - CI/CD 门禁检查框架 描述 Anteater 是一个开放框架，用于防止将指定的字符串、文件名、二进制文件、已弃用的函数、staging 环境代码/凭证等不合意的内容合并。任何可以用正则表达式语法指定的内容，都可以被 Anteater 嗅探出来。 你告诉 Anteater 你确切不想合并什么，剩下的由 Anteater 处理。 如果 Anteater 发现了什么，它会以非零码退出，从而使你的 CI 工具构建失败，从而防止拉取请求合并。任何误报都可以通过使用相同的 RegExp 框架来取消错误匹配，从而轻松解决。 整个项目也可以通过递归目录遍历进行扫描。...

mnemosyne

Mnemosyne es una herramienta genérica de scraping de memoria basada en Windows. Escanea el espacio de memoria de un proceso en busca de una cadena de búsqueda o expresión regular regex unicode y ascii y, si la encuentra, la envía ya sea a stdout, a un archivo o a un socket hacia un listener remot...

GitMiner3

Autor: UnkL4b Sitio: bravul.com Blog: unkl4b.github.io Github: UnkL4b X: @UnkL4b ADVERTENCIA root@kitploit: +---------------------------------------------------+ | LOS DESARROLLADORES NO ASUMEN NINGUNA | | RESPONSABILIDAD Y NO SON RESPONSABLES DE CUALQUIER | | USO INDEBIDO O DAÑO CAUSADO POR ESTE...

NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`

Summary XMLCorpusView.readxmlfragment reads a corpus file in 1 KiB blocks, appending each block to a growing fragment string, then calls VALIDXMLRE.matchfragment on the full accumulated buffer every iteration. Because each iteration rescans the entire accumulated fragment, the total amount of wor...

CVE-2026-70656 Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.5.1 until 3.9.2, an authenticated admin or superadmin can set matchMethod to regex and place a malicious expression...

CVE-2026-70656 Checkmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.5.1 until 3.9.2, an authenticated admin or superadmin can set matchMethod to regex and place a malicious expression...

SUSE CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch

...

openSUSE 16 Security Update : nginx (openSUSE-SU-2026:21524-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21524-1 advisory. This update for nginx fixes the following issue - CVE-2026-42533: map directive and regex matching vulnerability bsc1271514. Tenable has extracted the...