fi6s

fi6s: Fast IPv6 scanner fi6s is an IPv6 port scanner designed to be fast, aimed at Internet scanning and discovery. This is achieved by sending and processing raw packets asynchronously. The design and goal is pretty similar to Masscan, though it is not as full-featured. Please take note of the...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

nightHawkResponse

nightHawk Response Custom built application for asynchronus forensic data presentation on an Elasticsearch backend. This application is designed to ingest a Mandiant Redline "collections" file and give flexibility in search/stack and tagging. The application was born out of the inability to contr...

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure

The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frmformspreview AJAX action. This makes it possible for unauthenticated attackers to export all of the form entries for a given form. id: CVE-2017-20194 info...

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion

The Avada Fusion Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maybedeletefiles function. An unauthenticated attacker can delete arbitrary files on the server by manipulating the filepath parameter in the...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

weebdns

WeebDNS DNS Enumeration Tool with Asynchronicity Do you like C4RR075? ONLY DOWNLOAD IT HERE, DO NOT TRUST OTHER PLACES. This is the official and only repository of the WeebDNS project. Written by: FuzzyRabbit - Twitter: @rabbitfuzzy, GitHub: @FuzzyRabbit DISCLAIMER: This is only for testing...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage root@kitploit: git clone...

bscan

:mag: 非同期ターゲット列挙ツール :magright: 概要 bscan は、アクティブな情報収集とサービス列挙を行うコマンドラインユーティリティです。その核心では、bscan はよく知られたスキャンユーティリティのプロセスを非同期に起動し、スキャン結果を強調表示されたコンソール出力と明確に定義されたディレクトリ構造に再利用します。 ライセンス bscan は教育目的やCTFなどのイベントのみを対象としており、事前の明示的な同意なしにマシンやネットワークで実行してはなりません。このコードは MIT ライセンス の下で公開されています。 インストール bscan は Kali Lin...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

CVE-2024-29973

CVE-2024-29973 CVE-2024-29973 の脆弱性検出・悪用ツール（非同期性能）。 インストール: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-29973 pip install -r requirements.txt python3 exploit.py --help 使用法: root@kitploit: python3 exploit.py -h / / / / / / / / | |// // / / / / / / / / / / / / / / // // /...

aiodnsbrute

Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...

masscan

MASSCAN: Mass IP 포트 스캐너 이것은 인터넷 규모의 포트 스캐너입니다. 단일 머신에서 초당 1000만 개의 패킷을 전송하며 5분 이내에 전체 인터넷을 스캔할 수 있습니다. 사용법매개변수, 출력은 가장 유명한 포트 스캐너인 nmap과 유사합니다. 확신이 서지 않으면 해당 기능 중 하나를 시도해 보세요. 많은 머신을 광범위하게 스캔하는 기능은 지원되지만, 단일 머신에 대한 심층 스캔 기능은 지원되지 않습니다. 내부적으로는 scanrand, unicornscan, ZMap과 같은 포트 스캐너와 유사하게 비동기 전송을...

nodriver

NODRIVER nodriverは、直感的なインターフェースでPython向けの次世代の非同期ウェブスクレイピングおよびブラウザ自動化ライブラリを提供します。Just Makes Sense™ これは、 Undetected-Chromedriver Pythonパッケージの公式後継です。 WebDriver不要、Selenium不要 ドキュメントはこちらをクリック 直接通信により、Webアプリケーションファイアウォール（WAF）に対する耐性がさらに向上し、 パフォーマンスも大幅に向上します。 このモジュールは、undetected-chromedriverとは異なり、完全に非同期です...

PSAsyncShell

PSAsyncShell PSAsyncShell 은 순수 PowerShell로 작성된 비동기 TCP 리버스 셸입니다. 다른 리버스 셸과 달리 모든 통신 및 실행 흐름이 비동기 방식으로 처리되어, 일부 방화벽 및 이러한 종류의 원격 연결에 대한 일부 대응 조치를 우회할 수 있습니다. 또한 이 도구는 명령 기록, 화면 지우기, 파일 업로드 및 다운로드, 청크를 통한 정보 분할, 역 Base64 URL 인코딩 및 난독화된 트래픽을 지원합니다. 요구 사항 PowerShell 4.0 이상 다운로드 전체 저장소를 복제하거나 zip 파일을...

ProxyBroker

ProxyBroker .. image:: https://img.shields.io/pypi/v/proxybroker.svg?style=flat-square :target: https://pypi.python.org/pypi/proxybroker/ .. image:: https://img.shields.io/travis/constverum/ProxyBroker.svg?style=flat-square :target: https://travis-ci.org/constverum/ProxyBroker .. image::...

url-status-checker

상태 확인기 URL 상태 확인기 v2.1 Status Checker는 하나 이상의 URL/도메인의 상태를 확인하고 HTTP 상태 코드에 따라 분류하는 Python 스크립트입니다. 버전 2.1.0 기능 단일 또는 여러 URL/도메인의 상태 확인 향상된 성능을 위한 비동기 HTTP 요청 리디렉션 추적 관련된 모든 IP 주소 추적 상태 코드를 시각적으로 구분하는 색상 코드 출력 여러 URL 확인 시 진행률 표시줄 결과를 출력 파일로 저장 접근 불가능한 URL 및 잘못된 응답에 대한 오류 처리 사용하기 쉬운 명령줄 인터페이스 설치 1...

ktr

ktr 高い非同期性を持つトレースルートプログラムで、Rustで書かれています。ASN WHOISとPeeringDBの検索機能を備えています。主にhow-did-i-get-here.netのために急ごしらえで作成しました : コンポーネント: ktrlib: 主ライブラリコードで、トレースルート、ASNのWHOIS検索、およびPeeringDB SQLiteサポートを処理します ktragent: デーモン実行ファイルで、STDIN/STDOUTを介してライブラリを使用できるようにします...

Http-Asynchronous-Reverse-Shell

HTTP/S Asynchronous Reverse Shell ✨ Introduction In an age where advanced detection systems such as IDS, IPS, EDR, AV, and firewalls dominate corporate networks, evading them during offensive security assessments is a challenge. Most reverse shells leverage TCP tunnels L4, which are now routinely...