waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

spyse.py

spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...

urlhunter

o Utku Sen's /\o Oo |/ =- .===O-UR L -O- / /U' hunter /| || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter — это инструмент разведки, который позволяет искать URL-адреса, раскрытые через сервисы сокращения ссылок, такие как bit.ly и goo.gl. Проект написан на Go. Как? Группа под название...

ChatGPT个人专用版 - Server Side Request Forgery

A Server-Side Request Forgery SSRF in pictureproxy.php of ChatGPT commit f9f4bbc allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the urlparameter. id: CVE-2024-27564 info: name: ChatGPT个人专用版 - Server Side Request Forgery author: DhiyaneshDK...

Mlflow < 2.11.0 - Path Traversal

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

Hitachi Pentaho Business Analytics Server - Bypass Authorization

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented. id: CVE-2022-43939 info: name: Hitachi Pentaho Business Analytics Server - Bypass Authorization author: daffainf...

CVE-2023-0099-exploit

CVE-2023-0099-эксплойт Название эксплойта: simple urls 115 - Reflected XSS Google Dork: Автор эксплойта: AmirZargham Домашняя страница вендора: https://getlasso.co/ Ссылка на ПО: https://wordpress.org/plugins/simple-urls/ Версия: 115...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

TheTimeMachine

🚀 TheTimeMachine v3.0 - Вооружаем Wayback для разведки, багбаунти, OSINT и не только! Вы слышали о путешествиях во времени в фильмах и комиксах, верно? Что ж, это больше не фантастика 😎. TheTimeMachine позволяет вам копаться в прошлом любого веб-приложения, извлекая архивные URL из Wayback Machin...

protections-artifacts

Protections Artifacts Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint. Protections-Artifacts is the home of our detection logic rules, yara, etc for Elastic Security for endpoint. At...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: root@kitploit: https://www.example.com/product/123 https://www.example.com/product/456...

5MMISSI-CVE-2017-1000499

5MMISSI-CVE-2017-1000499 PoC для CVE-2017-1000499 Версии phpMyAdmin 4.7.x до 4.7.6.1/4.7.7 уязвимы к CSRF-слабости. Обманом заставляя пользователя нажать на специально созданный URL, можно выполнить вредоносные операции с базой данных, такие как удаление записей, удаление/очистка таблиц и т.д...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

authkeysync

AuthKeySync Автоматическая синхронизация открытых SSH-ключей с удалённых URL-адресов на ваши серверы 📖 Полная документация Проблема Управление SSH-доступом на нескольких серверах — это боль: Участники команды приходят и уходят, и вам нужно обновлять authorizedkeys на каждом сервере Разработчики...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

tirith

tirith Ваш браузер это поймал бы. Ваш терминал — нет. Website | Docs | SKILL.md | Changelog | Releases Независимый проект с открытым исходным кодом, хостинг поддерживается Vercel Open Source Program Spring 2026 Cohort. Сможете заметить разницу? curl -sSL https://install.example-cli.dev | bash saf...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install root@kitploit: python3 -m pip install -r requirements.txt ⏩ Usage root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / |...

authz0

Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can be automatically created and added through authz0. You can also test based on multiple authentication headers...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...