ODIN

ODIN Observe, Detect, and Investigate Networks Current version: v2.0.0 "Huginn" ODIN is Python tool for automating intelligence gathering, asset discovery, and reporting. Remember, check the dev branch for the bleeding edge, and feedback is welcome! See the GitHub wiki for details and installatio...

hakrawler

Hakrawler Fast golang web crawler for gathering URLs and JavaScript file locations. This is basically a simple implementation of the awesome Gocolly library. Example usages Single URL: root@kitploit: echo https://google.com | hakrawler Multiple URLs: root@kitploit: cat urls.txt | hakrawler Timeou...

BurpSuite-Asset_Discover

BurpSuite Extension - Asset Discover Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite for more details. The extension is now part of the BApp store and can be installed directly from the Burp Suite...

AttackSurfaceManagement

ABOUT: Discover the attack surface and prioritize risks with our continuous Attack Surface Management ASM platform - Sn1per Professional. For more information, go to https://sn1persecurity.com. FEATURES: Attack Surface Discovery Easily discover the attack surface IPs, domain names, open ports, HT...

w12scan

w12scan W12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use. W12scan is also my graduation design. : Here is a web source program and the scanning end is at w12scan-client. Thinking Based on python3 + django + elasticsearch + redis...

CloudRecon

CloudRecon Finding assets from certificates! Scan the web! Tool presented @DEFCON 31 BY Gunnar Andrews @G0LDENinfosec Jason Haddix @Jhaddix Install You must have CGO enabled, and may have to install gcc to run CloudRecon root@kitploit: sudo apt install gcc root@kitploit: go install...

firefly

Firefly is an advanced black-box fuzzer and not just a standard asset discovery tool. Firefly provides the advantage of testing a target with a large number of built-in checks to detect behaviors in the target. Advantages Hevy use of gorutines and internal hardware for great preformance Built-in...

gowitness

gowitness A golang, web screenshot utility using Chrome Headless. introduction gowitness is a website screenshot utility written in Golang, that uses Chrome Headless to generate screenshots of web interfaces using the command line, with a handy report viewer to process results. Both Linux and mac...

cygor

Cygor General Overview Cygor is a modular asset discovery framework that brings scanning, parsing, and service enumeration together in one workflow. It replaces the patchwork of separate tools with an automated process that handles discovery, enrichment, and targeted enumeration seamlessly —...

smogcloud

☁️ Smogcloud Encuentra activos de AWS en la nube expuestos que no sabías que tenías. Un inventario completo de activos es el primer paso para cualquier programa de seguridad capaz. Creamos smogcloud para permitir a los ingenieros de seguridad, probadores de penetración y administradores de AWS...

Awesome-FOFA

Awesome-FOFA Library 📒 中文 README Get Started with FOFA A Beginner’s Guide How to Get Free F-point from FOFA? FOFA and AI Next-Generation Attack Surface Inventory: Free Trial Available! Basic scenario How to use FOFA to discover free LLM resources? Elevating FOFA Search Efficiency through Novel...

amass

OWASP Amass परियोजना OWASP Amass परियोजना ओपन सोर्स सूचना संग्रहण और सक्रिय टोही तकनीकों का उपयोग करके आक्रमण सतहों का नेटवर्क मैपिंग और बाहरी संपत्ति खोज करती है। स्थापना आप अतिरिक्त स्थापना निर्देश और दस्तावेज़ीकरण Amass Docs रिपॉजिटरी में पा सकते हैं। कॉर्पोरेट समर्थक योगदान ह...

nextjs-CVE-2025-29927-hunter

परिचय एक सरल Python उपकरण जो Shodan खोजों को स्वचालित करता है और Next.js परिनियोजनों में CVE-2025-29927 के लिए संभावित रूप से कमजोर संपत्तियों की पहचान करने के लिए लक्ष्य IPs/डोमेन को फ़िल्टर करता है। उपयोग IP और डोमेन दोनों निकालें root@kitploit: python3 nextjs-CVE-2025-29927-hunter.py -t...

dismap

🌀 Dismap - أداة اكتشاف وتحديد الأصول 中文 Readme Dismap هو أداة اكتشاف وتحديد للأصول. يمكنه التعرف بسرعة على البروتوكولات ومعلومات البصمات مثل web/tcp/udp، وتحديد أنواع الأصول، وهو مناسب للشبكات الداخلية والخارجية. يساعد فريق الهجوم الأحمر في تحديد معلومات الأصول المحتملة الخطورة بسرعة، ويساعد فريق...

CloudPulse

CloudPulse - AWS Cloud Landscape Search Engine During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later help him to identify possible ways to get in an organization. CloudPulse is a powerful tool that simplifies and enhances th...

ThreatSentry-AI

ThreatSentry AI: AI-Powered Threat Hunting Tool Automate external asset discovery, intelligently enrich with multi-source data, and leverage ensemble machine learning to predict and prioritize risk. Transform alert fatigue into actionable intelligence. 🚀 Mission Statement ThreatSentry AI eliminat...

EUVD-2026-48447

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users...

CVE-2026-44955

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users...

CVE-2026-44955 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could allow for asset discovery by unauthenticated users...

CVE-2026-44955

CVE-2026-44955 affects Pronetiqs IntraVUE, version 3.2.1a14 and earlier. The issue is an exposure of sensitive system information to an unauthorized control sphere, enabling asset discovery by unauthenticated users. Documented impact is limited to information disclosure with no indicated changes ...