cloud

Cloud Monitoraggio del panorama cloud La nostra missione con questo progetto è fornire una mappa sempre aggiornata e liberamente accessibile del panorama cloud per ogni grande fornitore di servizi cloud. Abbiamo deciso di iniziare raccogliendo i dati dei certificati SSL delle macchine AWS EC2 e...

shodan

Shodan Dorks von twitter.com/lothos612 Fühle dich frei, Vorschläge zu machen Shodan Dorks Grundlegende Shodan-Filter city: Finde Geräte in einer bestimmten Stadt. city:"Bangalore" country: Finde Geräte in einem bestimmten Land. country:"IN" geo: Finde Geräte durch Angabe geografischer Koordinaten...

sublert

root@kitploit: / / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Autore: Yassine Aboukir Versione: 1.4.7 Di cosa si tratta? Sublert è uno strumento di sicurezza e ricognizione scritto in Python per sfruttare la trasparenza dei certificati con il solo scopo di monitorare...

phishing_catcher

Phishing Catcher Catch possible phishing domains in near real time by looking for suspicious TLS certificate issuances reported to the Certificate Transparency Log CTL via the CertStream API. "Suspicious" issuances are those whose domain name scores beyond a certain threshold based on a...

getaltname

GSAN - الحصول على أسماء البديل للموضوع GSAN هي أداة يمكنها استخراج أسماء البديل للموضوع SAN الموجودة في شهادات SSL مباشرة من خوادم https، مما يوفر لك أسماء DNS نطاقات فرعية أو خوادم افتراضية. لا تعتمد على سجلات شفافية الشهادة، بل تتصل مباشرة بالخادم وتستخرج أسماء SAN من الشهادة، وهو أمر مفيد بشكل...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

CloudPulse

CloudPulse - Motore di Ricerca per il Panorama AWS Cloud Durante la fase di ricognizione, un attaccante cerca qualsiasi informazione sul suo bersaglio per creare un profilo che lo aiuterà successivamente a identificare possibili vie d'accesso a un'organizzazione. CloudPulse è un potente strumento...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

CertCrunchy

root@kitploit: / \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ बस एक मूर्खतापूर्ण recon उपकरण जो SSL प्रमाणपत्रों से डेटा का उपयोग करके संभावित होस्टनाम खोजता है यह क्या है? यह...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

awsScrape

AWSScrape AWSScrape è uno strumento progettato per estrarre certificati SSL da tutti gli intervalli IP AWS, cercando parole chiave specifiche nei campi Common Name CN, Organization O e Organizational Unit OU dei certificati. Installazione 1. Clona questo repository: root@kitploit: git clone...

CVE-2025-68721

CVE-2025-68721: Controllo degli accessi non corretto in Axigen WebAdmin Riepilogo della vulnerabilità Un difetto nella logica delle autorizzazioni consente a un account amministratore con zero permessi di accedere alla pagina "Sicurezza e Filtraggio", in particolare all'endpoint dei Certificati...

CVE-2026-43820

A flaw was found in swift-nio-ssl. This vulnerability arises from the improper handling of Subject Alternative Names SANs within SSL certificates. When processing SANs that are not backed by an ASN1STRING, the system attempts to access memory outside of its allocated buffer, leading to an...

[SECURITY] Fedora 44 Update: curl-8.18.0-8.fc44

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2026-32644

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

Websites with an undefined trust level: avoiding the trap

Executive summary A suspicious website is a web resource that cannot be definitively classified as phishing, but whose activities are unsafe. Such sites manipulate users, tricking them into voluntarily transferring money for non-existent services, signing up for hidden subscriptions, or disclosin...

CVE-2026-32644

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - January 2026 CPU affects IBM OpenPages

Summary IBM® SDK, Java™ Technology Edition is shipped as a supporting program of IBM OpenPages. Information about a security vulnerability affecting IBM SDK, Java Technology Edition Quarterly CPU - January 2026 has been published in multiple security bulletins. These products have addressed the...

CVE-2025-68723

Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting XSS vulnerabilities in the WebAdmin interface. Three instances exist: 1 the log file name parameter in the Local Services Log page, 2 certificate file content in the SSL Certificates View Usage feature, and 3 the...