Lucene search
+L

31 matches found

Kitploit
Kitploit
added 2026/09/15 6:17 a.m.8 views

Cerberus

Cerberus A powerful vulnerability scanner. Subdomain enumeration uses aioDNS with asyncio for asynchronous fast scanning. It covers the target's full asset scope for batch vulnerability scanning, middleware information collection, automatic proxy IP collection, and automatically uses proxy IPs to...

9.8CVSS6AI score0.9835EPSS
SaveExploits31
Kitploit
Kitploit
added 2026/09/15 5:53 a.m.27 views

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 3:44 a.m.21 views

OpenDoor

OpenDoor — OWASP Web Recon & Directory Discovery Platform OpenDoor is an open-source CLI Recon Platform for authorized web reconnaissance, directory discovery, subdomain enumeration, fingerprints, WAF detection, bypass probing, response filtering, reporting, open-redirect checks, bounded crawl an...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/15 2:32 a.m.6 views

waf-checker

WAF Checker This project helps you check how well your Web Application Firewall WAF protects your product against common web attacks. It can be run as a Cloudflare Worker with a built-in interactive Web UI or as a standalone Node.js CLI tool. Features Core Testing Enter a target URL, pick HTTP...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 10:16 p.m.11 views

waf-checker

A powerful web application to test how well your Web Application Firewall WAF protects against common attack vectors. → waf-checker.com ← Features Security Testing 19+ attack categories out of the box: SQL Injection, XSS, Path Traversal, Command Injection, SSRF, NoSQL Injection, LFI, LDAP...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 10:03 p.m.576 views

gotestwaf

GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 7:35 p.m.4 views

WhatWaf

WhatWaf? WhatWaf is an advanced firewall detection tool who's goal is to give you the idea of "There's a WAF?". WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass or two for said firewall, on the specified target. SIDE-NOTE: Any issue that is not the...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/14 2:46 p.m.12 views

Recon

👑 Recon 👑 The step of recognizing a target in both Bug Bounties and Pentest can be very time-consuming. Thinking about it, I decided to create my own recognition script with all the tools I use most in this step. All construction of this framework is based on the methodologies of @ofjaaah and...

6AI score
SaveExploits0References37
Kitploit
Kitploit
added 2026/09/11 3:05 a.m.9 views

AutoSQLi

AutoSQLi, the new way script-kiddies hack websites Features Save System - there is a complete save system, which can resume even when your pc crashed. - technology is cool Dorking - from the command line one dork : YES - from a file: NO - from an interactive wizard: YES Waffing - Thanks to...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 4:17 p.m.5 views

cdncheck

cdncheck Características • Instalación • Uso • Unirse a Discord root@kitploit: cdncheck es una herramienta para identificar la tecnología asociada con direcciones de red dns / ip. Características Detección de CDN , CLOUD y WAF Fácil de usar como biblioteca Proveedores fácilmente extensibles Sopor...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/08 9:56 p.m.5 views

dfir-malware-investigation

Laboratorio de Investigación de Malware DFIR – Spring4Shell CVE-2022-22965 Un proyecto integral de Forense Digital y Respuesta a Incidentes DFIR que simula, detecta e investiga la vulnerabilidad crítica Spring4Shell CVE-2022-22965. Este proyecto demuestra el ciclo de vida completo de la respuesta...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits105
GithubExploit
GithubExploit
added 2025/07/28 6:48 a.m.289 views

Exploit for CVE-2025-32429

CVE-2025-32429 Vulnerability Checker A Python-based vulnerabi...

9.3CVSS7.2AI score0.85265EPSS
SaveExploits6
OSV
OSV
added 2024/07/23 6:15 p.m.30 views

CVE-2024-41661

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-50094. Reason: This candidate is a duplicate of CVE-2023-50094. Notes: All CVE users should reference CVE-2023-50094 instead of this candidate...

6.3AI score
SaveExploits0
NVD
NVD
added 2024/07/23 6:15 p.m.51 views

CVE-2024-41661

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-50094. Reason: This candidate is a duplicate of CVE-2023-50094. Notes: All CVE users should reference CVE-2023-50094 instead of this candidate...

SaveExploits1
Cvelist
Cvelist
added 2024/07/23 5:22 p.m.53 views

CVE-2024-41661

...

SaveExploits1
CVE
CVE
added 2024/07/23 5:22 p.m.107 views

CVE-2024-41661

CVE-2024-41661 is rejected; use CVE-2023-50094 instead.

9AI score
SaveExploits1
Cvelist
Cvelist
added 2022/09/20 12:00 a.m.64 views

CVE-2022-39957 Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header

The OWASP ModSecurity Core Rule Set CRS is affected by a response body bypass. A client can issue an HTTP Accept header field containing an optional "charset" parameter in order to receive the response in an encoded form. Depending on the "charset", this response can not be decoded by the web...

7.3CVSS8.7AI score0.00823EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2022/01/13 9:16 p.m.484 views

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This work includes testing and improvement tools for C...

10CVSS9.5AI score0.99999EPSS
SaveExploits381
Gitee
Gitee
added 2021/10/20 11:28 a.m.5 views

Vxscan

This is a Python-based comprehensive scanning tool called Vxscan. It is used for sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL injection, and other functions. The too...

7.1AI score
SaveExploits0
Kitploit
Kitploit
added 2021/01/11 11:30 a.m.97 views

Wprecon - A Vulnerability Recognition Tool In CMS Wordpress, 100% Developed In Go

Hello! Welcome. Wprecon Wordpress Recon, is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go. Notice: Why is the project out of updates these days ?! What happens is that I am doing the vulnerability scanner. Branch Dev Compile and Install Features Random Agent Detection WA...

7.2AI score
SaveExploits0References3
Rows per page
Query Builder