bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

exrex

EXREX 正则表达式的非正则方法。 Exrex 是一个命令行工具和 Python 模块，能够生成给定正则表达式的所有或随机匹配字符串，以及更多功能。 它纯 Python 实现，无外部依赖。 有些正则表达式具有无限匹配字符串（例如：a-z+），在这种情况下，exrex 会限制无限部分的最大长度。 Exrex 使用生成器，因此内存使用量不依赖于匹配字符串的数量。 功能 生成所有匹配字符串 生成随机匹配字符串 计算匹配字符串的数量 简化正则表达式 安装 要安装 exrex，只需： root@kitploit: $ pip install exrex 或 root@kitploit: $...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

GiveMeSecrets

GiveMeSecrets Usa expresiones regulares para obtener información sensible de un repositorio dado GitHub, pip o npm. Dependencias Solo necesitas tener python 3.6 o superior instalado para ejecutar este script. Además, debes tener instalado en el sistema git, pip y npm. Cómo usar Es muy fácil de...

WifiPass

WifiPass Dump the saved wifi passwords for windows using regular expressions and python 3...

hashID

hashID | hash-identifier Identifica los diferentes tipos de hashes utilizados para cifrar datos y, especialmente, contraseñas. Esto reemplaza a hash-identifier , ¡que está desactualizado! hashID es una herramienta escrita en Python 3 que permite identificar más de 220 tipos de hash únicos mediant...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

CVE-2019-1476

CVE-2019-1476 DoS por sobrescritura arbitraria de archivos en AppXSvc Informé de esta vulnerabilidad de forma independiente a MSRC como parte de mi investigación inspirada en CVE-2019-0841, reportada originalmente por Nabeel Ahmed. Esta vulnerabilidad permite a un usuario normal sobrescribir...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

url-regex-safe

url-regex-safe Expresión regular para coincidir con URLs. Versión mantenida, segura y compatible con navegadores de url-regex. Resuelve CVE-2020-7661 para servidores Node.js. Funciona en Node v14+ y navegadores. Mantenido paraSpam Scanner y Forward Email. Tabla de Contenidos...

LinkFinder

关于 LinkFinder LinkFinder 是一个用 Python 编写的脚本，用于发现 JavaScript 文件中的端点及其参数。这样，渗透测试人员和漏洞赏金猎人就能够收集他们正在测试的网站上的新隐藏端点。从而获得新的测试领域，可能包含新的漏洞。它通过结合使用 Python 版本的 jsbeautifier 和一个相当大的正则表达式来实现。该正则表达式由四个小正则表达式组成，它们负责查找： 完整 URL（https://example.com/） 绝对 URL 或带点号的 URL（/\ 或 ../） 至少包含一个斜杠的相对 URL（text/test.php） 不含斜杠的相对...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

apkvuln

ApkVuln root@kitploit: \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| 使用 ApkVuln，你将获得一个 APK 的 .java 文件，并通过正则表达式分析代码中可能存在的漏洞。 注意 ：结果的准确性取决于正则表达式。它们是可定制的。 依赖 要运行此应用程序，你需要安装 Python 3.6+ 和 apkx。 要完整运行（检查签名版本和...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

CVE-2019-19204

CVE-2019-19204 Se descubrió un problema en Oniguruma 6.x anterior a 6.9.4rc2. En la función fetchintervalquantifier anteriormente conocida como fetchrangequantifier en regparse.c, se llama a PFETCH sin comprobar PEND. Esto conduce a una sobrelectura de búfer basada en heap. Investigador: ManhND d...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

CVE-2026-31816

CVE-2026-31816 - Bypass de autenticación a RCE en Budibase CVE-2026-31816 es una vulnerabilidad crítica de bypass de autenticación y autorización que afecta a Budibase. La vulnerabilidad se encuentra en el middleware de autorización del lado del servidor responsable de proteger los endpoints de l...