XSSTRON

XSSTRON, Electron JS Browser To Find XSS Vulnerabilities Powerful Chromium Browser to find XSS Vulnerabilites automatically while browsing web, it can detect many case scenarios with support for POST requests too Installation root@kitploit: Install Node.js and npm https://www.npmjs.com/get-npm or...

Scannerweb

Scannerweb Vulnerability Scanner written in python3, It Fuzzes All URLs of target website & then scan them for scanner web Screeenshot Navigate to the /opt directory optional root@kitploit: cd /opt/ Clone this repository root@kitploit: git clone https://github.com/Khalidhusain786/Scannerweb.git...

crithit

crithit Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall...

BlackDir-Framework

BlackDir-Framework 1 Spider Directories 2 Find Sub Domain 3 Advanced Dorks Search 4 Scan list of Dorks 5 Scan WebSites Xss,Sql,Html Inj 6 Reverse Ip Lookup 7 Port Scan 8 Brute Force Wordpress 9 Wordpress User Enumerate 10 Hash Encryptionmd4,md5,sha1,sha256,sha384,sha512 11 Hash Identifier Install...

reconspider

最先端のオープンソースインテリジェンス（OSINT）フレームワーク ReconSpider ReconSpider は、IPアドレス、メール、Webサイト、組織をスキャンし、さまざまなソースから情報を収集するための、最も高度なオープンソースインテリジェンス（OSINT）フレームワークです。 ReconSpider は、インフォセキュリティ研究者、ペネトレーションテスター、バグハンター、サイバー犯罪捜査官が、ターゲットに関する詳細情報を取得するために使用できます。 ReconSpider はすべての生データを集約し、ダッシュボード上で可視化し、データの警告と監視を容易にします。...

EternalView

EternalView EternalView is an all in one basic information gathering CLI tool made purely in BASH EternalView in action CAUTION: This tool is purely for educational purposes, don't use it on any website without the permission of it's owner. The user is responsible for his/her actions! Update:...

PenBox

PenBox – A Penetration Testing Framework A Penetration Testing Framework , The Hacker’s Repo our hope is in the last version we will have evry script that a hacker needs Information Gathering : nmap Setoolkit Port Scanning Host To IP wordpress user enumeration CMS scanner XSStracer - checks remot...

webtech

WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: root@kitploit: pip install webtech It can be also installed via setup.py: root@kitploit: python setup.py install --user Burp Integration Download Jython 2.7.0...

archerysec

...

dorkScanner

DORK SCANNER A typical search engine dork scanner that scrapes search engines with queries that you provide in order to find vulnerable URLs. Introduction Dorking is a technique used by newsrooms, investigative organisations, security auditors as well as tech savvy criminals to query various sear...

SCANNER-INURLBR

Desription Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. A PHP tool that can run on different Linux distributions helps hackers and security professionals with...

Breacher

Breacher A script to find admin login pages and EAR vulnerabilites. Features Multi-threading on demand Big path list 482 paths Supports php, asp and html extensions Checks for potential EAR vulnerabilites Checks for robots.txt Support for custom patns Usages Check all paths with php extension...

web-wordlist-generator

WEB-Wordlist-Generator NOTE : You should definitely use it for legal activities. Please See; USAGEPOLICY.md LICENSE Description WEB-Wordlist-Generator scans your web applications and creates related wordlists to take preliminary countermeasures against cyber attacks. ScreenShot Done Scan Static...

wsvuls

WSVuls ウェブサイト脆弱性スキャナーは、問題（古いサーバーソフトウェアや安全でないHTTPヘッダー）を検出します。 WSVulsとは？...

hackersh

======== Hackersh Hackersh "Hacker Shell" is a shell command interpreter written in Python with Pythonect-like syntax, builtin security commands, and out of the box wrappers for various security tools. Hello, world Here is the canonical "Hello, world" example program in Hackersh:: root@kitploit:...

rapidscan

🟥 RapidScan v1.2 - マルチツールWeb脆弱性スキャナー RapidScan は Python3、すなわち v1.2 に移植されました 。Python2.7 コードベースは v1.1 リリースセクションで入手できます。まだ Python 3 にアップグレードしていない場合は、ダウンロードして使用してください。v1.1 Python2.7 は今後拡張されないことに注意してください。 進化: ペンテスターにとって、自動化なしで 連続ツールスキャン （ セキュリティスキャンツールを次々と実行すること...

Vulnerability-assessment

Installation & Usage Bash Copy to Nmap scripts directory sudo cp react2shell-detect.nse /usr/share/nmap/scripts/ Update script database sudo nmap --script-updatedb Single target nmap -p80,443 --script react2shell-detect.nse example.com Important: Use this script only against systems you have...

fyp

一个基于桌面的漏洞评估工具，使安全团队能够扫描、识别、利用并报告 Web 应用程序和网络中的漏洞。 概述 一个为安全管理员和分析师构建的漏洞评估平台。它通过单个桌面应用程序自动化目标扫描、漏洞检测、漏洞利用映射、风险评分和报告生成。 作为毕业设计项目（FYP）开发。 功能 Web 与网络扫描 — 针对域名和网络主机运行定向扫描 漏洞检测 — 识别已知 CVE 和安全弱点 漏洞利用映射 — 将检测到的漏洞与已知漏洞利用进行匹配 风险评分 — 自动分配严重性评分（严重 / 高 / 中 / 低） 报告生成 — 导出结构化安全报告以供审查 基于角色的访问控制 — 区分管理员和代理访问级别...

CVE-2023-6895

CVE-2023-6895 Vulnerability Scanner This is a simple Python script for scanning websites to check for the CVE-2023-6895 vulnerability. It sends modified requests to the target URL and checks the response for the vulnerability. Requirements Python 3 requests library tqdm library You can install th...

socgholish_finder

Buscador de SocGholish Script sencillo para escanear sitios web en busca de inyecciones de SocGholish. Comprueba y muestra la inyección si se encuentra, y desofusca y muestra los dominios de URL de shadowing. root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s...