Lucene search
+L

13236 matches found

Kitploit
Kitploit
added 2026/09/18 4:36 a.m.10 views

CVE-2025-65945-poc

CVE-2025-65945: node-jws Signature Bypass This is a proof of concept for a signature verification bypass in the node-jws library. The bug lets attackers forge valid JWTs when the server derives HMAC secrets from user-controlled data. What's the bug? The jws.createVerify function doesn't validate...

7.5CVSS5.9AI score0.00215EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/18 4:34 a.m.36 views

envy

Quick Start • Configuration • Commands • Keybindings • FAQ • Documentation A secure encrypted vault for managing API keys, secrets, and environment variables. Built for developers who live in the terminal. What is Envy? I built Envy because I was tired of juggling .env files and keeping secrets...

6AI score
SaveExploits0References19
Kitploit
Kitploit
added 2026/09/18 4:15 a.m.8 views

nat-tunnel

NAT Tunnel v0.01 If you have access to a server with public IP and unfiltered ports you can run NAT Tunnel NT server on the server, and NT client on your box behind NAT. the server requires 2 open ports: one for communication with the NT client --admin, the other for regular clients to connect to...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:12 a.m.9 views

DumpsterDiver

DumpsterDiver by @Rzepsky DumpsterDiver is a tool, which can analyze big volumes of data in search of hardcoded secrets like keys e.g. AWS Access Key, Azure Share Key or SSH keys or passwords. Additionally, it allows creating a simple search rules with basic conditions e.g. report only csv files...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:07 a.m.9 views

SecretFinder

about SecretFinder SecretFinder is a python script based on LinkFinder, written to discover sensitive data like apikeys, accesstoken, authorizations, jwt,..etc in JavaScript files. It does so by using jsbeautifier for python in combination with a fairly large regular expression. The regular...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 3:59 a.m.84 views

git-alerts

GitAlerts What problem does it solve? GitHub repositories created under any organization can be controlled by the GitHub administrators. However any repository created under an organization's user account is not controllable unless the organisation has adopted the GitHub enterprise-managed user E...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 3:50 a.m.10 views

sharemylogin

ShareMyLogin Open Source This is the public source code for ShareMyLogin.com. What is ShareMyLogin? ShareMyLogin is a secure tool for sharing sensitive information like passwords, API keys, or config secrets. The Problem Sending a password over Slack, Email, or WhatsApp creates a permanent record...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 3:27 a.m.10 views

reposcanner

Reposcanner Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. Installation The python Git module is required python3-git on Debian. Docker root@kitploit: docker build -t reposcanner...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 3:17 a.m.9 views

CESS

CESS — Cryptologically Enchanted Shamir's Secret Is this AI bullshit or slop? A cryptographer or serious implementer reviewing CESS will typically open vectors/ and testdata/ before reading prose. The test suite is the proof of work: it encodes domain knowledge that cannot be substituted with...

5.6AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/18 3:06 a.m.9 views

Git-Secret

Git-Secret Go scripts for finding an API key / some keywords in repository Update V1.0.2 🚀 Removing some checkers Adding example file contains github dorks Add support to go install command issue 5 Screenshoot 📷 How to Install To install the latest version: root@kitploit: go install...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 2:58 a.m.14 views

vault-conductor

🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features...

5.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/18 2:47 a.m.9 views

aigate

aigate Secret hygiene for AI-generated code. Catches hardcoded credentials in prompts, tool inputs, generated code, and existing files. Quick start root@kitploit: pip install aigate && aigate setup-all That's it. This installs a background proxy redact mode, a PostToolUse hook for file scanning,...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 2:19 a.m.10 views

layerleak

layerleak the OCI Image Secret Scanner Check CONTRIBUTING.md for contribution guidelines. OCI image secret scanner that works against any public OCI-compliant registry Docker Hub, GHCR, Quay, GCR, MCR, Amazon ECR Public, self-hosted. It analyzes image layers, config metadata, and image history,...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 2:17 a.m.9 views

huskyCI

This article can also be read inBrazilian Portuguese. Introduction huskyCI is an open source tool that orchestrates security tests and centralizes all results into a database for further analysis and metrics. It can perform static security analysis in Python Bandit and Safety, Ruby Brakeman,...

6AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/18 2:16 a.m.5 views

GiveMeSecrets

GiveMeSecrets Use regular expressions to get sensitive information from a given repository GitHub, pip or npm. Dependencies You only need to have python 3.6 or higher installed to launch this script. In addition you must have installed in the system git, pip and npm. How to use It's very easy to...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 1:13 a.m.10 views

grafanaExp

grafanaExp Exploit Grafana CVE-2021-43798 arbitrary file read vulnerability to automatically detect vulnerability, existing plugins, extract secret key, decrypt server database file, and output datasourrce info. Usage Provides exp and decode functionality. root@kitploit: ➜ ./grafanaExp -h NAME:...

7.5CVSS8.4AI score0.88503EPSS
SaveExploits47
Kitploit
Kitploit
added 2026/09/18 1:09 a.m.12 views

dufflebag

Dufflebag Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 12:51 a.m.11 views

Pinkerton

🕵️ Pinkerton Investigating JavaScript files since 1850 Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded passwords, or related data. ⚡ Getting started A quick guide on how to install and use Pinkerton. 1. Clone the repository with:...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 11:48 p.m.11 views

BucketLoot

BucketLoot An Automated S3-compatible Bucket Inspector Description • Installation • Features • Documentation • Acknowledgements Description BucketLoot is an automated S3-compatible Bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as we...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 11:48 p.m.9 views

keepass-password-dumper

KeePass 2.X Master Password Dumper CVE-2023-32784 Update The vulnerability was assigned CVE-2023-32784 and fixed in KeePass 2.54. Thanks again to Dominik Reichl for his fast response and creative fix! Clarification: the password has to be typed on a keyboard, not copied from a clipboard see the H...

7.5CVSS5.8AI score0.04397EPSS
SaveExploits5References7
Rows per page
Query Builder