WifiPass

WifiPass रेगुलर एक्सप्रेशन और पायथन 3 का उपयोग करके विंडोज़ के लिए सहेजे गए वाई-फाई पासवर्ड डंप करें...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

GiveMeSecrets

GiveMeSecrets गोपनीय जानकारी प्राप्त करने के लिए रेगुलर एक्सप्रेशन का उपयोग करें किसी दिए गए रिपॉजिटरी GitHub, pip या npm से। निर्भरताएँ इस स्क्रिप्ट को चलाने के लिए आपको केवल python 3.6 या उच्चतर स्थापित होना चाहिए। इसके अलावा सिस्टम पर git, pip और npm स्थापित होना अनिवार्य है। उपयोग कैसे करें...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

hashID

hashID | hash-identifier Identifiziert die verschiedenen Hash-Typen, die zur Verschlüsselung von Daten und insbesondere von Passwörtern verwendet werden. Dies ersetzt hash-identifier , der veraltet ist! hashID ist ein in Python 3 geschriebenes Tool, das die Identifizierung von über 220 eindeutige...

url-regex-safe

url-regex-safe Regulärer Ausdruck zum Abgleich von URLs. Gepflegte, sichere und browserfreundliche Version von url-regex. Löst CVE-2020-7661 für Node.js-Server. Funktioniert in Node v14+ und Browsern. Gepflegt fürSpam Scanner und Forward Email. Inhaltsverzeichnis...

LinkFinder

Über LinkFinder LinkFinder ist ein Python-Skript, das entwickelt wurde, um Endpunkte und deren Parameter in JavaScript-Dateien zu entdecken. Auf diese Weise können Pentester und Bug-Hunter neue, versteckte Endpunkte auf den von ihnen getesteten Websites sammeln. Dies führt zu neuen...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

regexploit

Regexploit Trova regex vulnerabili a Regular Expression Denial of Service ReDoS. Maggiori informazioni sulblog di Doyensec Molti parser di espressioni regolari predefiniti hanno una complessità del caso peggiore illimitata. Il matching delle regex può essere rapido quando viene presentata una...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

CVE-2019-19204

CVE-2019-19204 In Oniguruma 6.x vor 6.9.4rc2 wurde ein Problem entdeckt. In der Funktion fetchintervalquantifier früher bekannt als fetchrangequantifier in regparse.c wird PFETCH aufgerufen, ohne PEND zu prüfen. Dies führt zu einem heap-basierten Pufferüberlesen. Forscher: ManhND des The Tarantul...

CVE-2026-31816

CVE-2026-31816 - Budibase-Authentifizierungsumgehung bis hin zu RCE CVE-2026-31816 ist eine kritische Schwachstelle zur Umgehung von Authentifizierung und Autorisierung, die Budibase betrifft. Die Schwachstelle befindet sich in der serverseitigen Autorisierungs-Middleware, die für den Schutz von...

apkvuln

ApkVuln root@kitploit: \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| Con ApkVuln otterrai i file .java di un APK e verranno analizzati alla ricerca di possibili vulnerabilità nel codice, utilizzando espressioni regolari...

CVE-2019-1476

CVE-2019-1476 AppXSvc – DoS durch Überschreiben beliebiger Dateien Ich habe diese Sicherheitslücke unabhängig gegenüber MSRC gemeldet, im Rahmen meiner Forschung inspiriert von CVE-2019-0841, ursprünglich gemeldet von Nabeel Ahmed. Diese Sicherheitslücke ermöglicht einem normalen Benutzer,...

cyberchef-recipes

CyberChef è il cosiddetto 'Cyber Swiss-Army Knife' creato dal GCHQ. È uno strumento fantastico per la trasformazione, l'estrazione e la manipolazione dei dati nel tuo browser web. Tutto il merito a @GCHQ per aver creato lo strumento. Vedi: https://gchq.github.io/CyberChef/ Consigli Generali Scari...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...