Lucene search
+L

24506 matches found

OSV
OSV
added 2026/09/14 4:34 p.m.9 views

OESA-2026-3830 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated...

7.5CVSS0.01481EPSS
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/14 10:51 a.m.41 views

ligolo-ng

Ligolo-ng : Tunneling like a VPN An advanced, yet simple, tunneling tool that uses TUN interfaces. 📑 Ligolo-ng Documentation Setup/Quickstart !TIP Ligolo-ng 0.8 added a lot of new features, including: 🌐 API and a beautiful Web Interface thanks to L'ami du Raisin, allowing multiplayer! ⚙️ Simple...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 10:16 a.m.8 views

ecapture

汉字 | English eCapture旁观者: capture SSL/TLS text content without a CA certificate using eBPF. !IMPORTANT Supports Linux/Android on x8664 kernel 4.18+ and aarch64 kernel 5.5+. Kernel version requirements apply per CPU architecture for both Linux and Android. Need ROOT permission or specific Linux...

6AI score
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/14 9:55 a.m.10 views

testssl.sh

Intro...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 9:51 a.m.57 views

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 9:34 a.m.11 views

Platypus

Platypus A host management hub for fleets of Linux machines. Install the Platypus agent on every host you own; the agent dials back to your Platypus server over TLS + protobuf; from the server you get an interactive shell, file management, and network tunnelling on every managed host — through on...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/14 9:26 a.m.7 views

mitm-proxy

Go MITM Proxy A lightweight, developer-friendly Man‑in‑the‑Middle MITM HTTP/HTTPS proxy written in Go. It supports HTTP/1.1 and HTTP/2, CONNECT tunneling, WebSocket tunneling ws/wss, on‑disk response caching with flexible filters, and live config reloading. Badges Admin Dashboard Preview Overview...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 9:22 a.m.118 views

knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend KnockPy is a modular Python 3 tool to enumerate subdomains via passive reconnaissance and bruteforce, now with async/await support , enhanced performance, and modern HTTP/TLS handling. 🚀 Features v9 ✅ Async scanning...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/09/14 8:42 a.m.2 views

CVE-2026-25832

A flaw was found in Mbed TLS. The Transport Layer Security TLS 1.3 client accepts a HelloRetryRequest that selects a cryptographic group not advertised by the client. This vulnerability could allow a remote attacker to cause a low integrity impact. Mitigation Mitigation for this issue is either n...

3.7CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 7:56 a.m.25 views

sslsplit

SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/09/14 7:17 a.m.4 views

CVE-2026-25832

In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group...

3.7CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 7:15 a.m.10 views

VPNPivot

VPN Pivot: Sometime we do external penetration testing and when we compromise the remote target we would like to explore the internal network behind and getting such compromise like owning Active directory, accessing shared files, conducting MITM attacks ... etc. There are many techniques around...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 7:01 a.m.7 views

veilgate

VeilGate VeilGate is an open-source deception proxy for teams that want to raise the cost of automated security probing without putting fragile block rules in front of real users. It sits in front of a web application, scores each request, and chooses one of three outcomes: Real : forward clean...

6AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/14 6:51 a.m.71 views

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 6:47 a.m.36 views

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

5.6AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/14 6:35 a.m.3 views

openssl: RPK server signature algorithm selection can dereference a missing certificate

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

7.5CVSS0.00984EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 6:28 a.m.304 views

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 6:05 a.m.11 views

kubeshark

Network Observability for SREs & AI Agents Live Demo · Docs Kubeshark indexes cluster-wide network traffic at the kernel level using eBPF — delivering instant answers to any query using network, API, and Kubernetes semantics. What you can do: Download Retrospective PCAPs — cluster-wide packet...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 5:49 a.m.293 views

mole

Mole A framework for identifying and exploiting out-of-band OOB vulnerabilities. Installation & Setup Mole Install Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Set an API key in...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 5:45 a.m.176 views

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder