CVE-2021-44228-playground

LOG4SHELL-CVE-2021-44228-Validator About This tool allows you to verify whether a simple Java web app is vulnerable to CVE-2021-44228 for a user provided version of Java and of Log4J. You can also optionally apply one of a view pre-defined mitigations. The simulation lab spun up by...

reproxy

Reproxy एक सरल एज HTTPs सर्वर / रिवर्स प्रॉक्सी है जो विभिन्न प्रदाताओं डॉकर, स्टैटिक, फ़ाइल, कॉन्सल कैटलॉग का समर्थन करता है। एक या अधिक प्रदाता अनुरोधित सर्वर, अनुरोधित URL, गंतव्य URL और हेल्थ चेक URL के बारे में जानकारी प्रदान करते हैं। इसे एकल बाइनरी या डॉकर कंटेनर के रूप में वितरित किया जात...

lm-fingerprint

LM-Fingerprint Fingerprints the serving stack behind an OpenAI-compatible chat endpoint. It records tokenizer accounting, hidden template offset, validation prose, JSON/SSE shape, role acceptance, named limits, and gateway headers. It does not load weights, store API keys, or ask the model who it...

burp-cc-bridge

CC-Bridge إضافة لـ Burp Suite باستخدام Montoya API تتيح أهم بدائيات Burp عبر واجهة HTTP محلية، بحيث يمكن لصدفة برمجية وكيلية Claude Code، OpenAI Codex، إلخ التحكم في Burp باستخدام curl. تعمل على Burp Community. تنزيل احصل على أحدث إصدار JAR — لا حاجة للاستنساخ أو البناء: →cc-bridge-0.1.0.jar 381...

offensive-one-liners

offensive-one-liners Jean Miélot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...

dismap

🌀 Dismap - أداة اكتشاف وتحديد الأصول 中文 Readme Dismap هو أداة اكتشاف وتحديد للأصول. يمكنه التعرف بسرعة على البروتوكولات ومعلومات البصمات مثل web/tcp/udp، وتحديد أنواع الأصول، وهو مناسب للشبكات الداخلية والخارجية. يساعد فريق الهجوم الأحمر في تحديد معلومات الأصول المحتملة الخطورة بسرعة، ويساعد فريق...

insect

insect - वेब पथ खोज वर्तमान रिलीज़: v1.4 20222.09.03 वेब सर्वर में निर्देशिकाओं और फ़ाइलों को ब्रूट फोर्स करने के लिए डिज़ाइन किया गया एक उन्नत कमांड-लाइन टूल, उर्फ वेब पथ स्कैनर विचार @maurosoria और @shelld3v द्वारा Developement-2022 को @nu11secur1ty द्वारा सक्रिय रूप से विकसित किया जा रहा है...

tirith

tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? root@kitploit: curl -sSL...

NoiseHound

NoiseHound Detection-aware Active Directory attack-path scoring. DreadHost Research | companion to OffsetInspect PowerShell and OffsetScan Rust BloodHound and PlumHound on top of it finds a path to the objective. NoiseHound ingests the same graph data and re-ranks paths by expected detection cost...

TwitterSearch2Gephi

TwitterSearch2Gephi TwitterSearch2Gephi is a windows CLI app that lets you collect data from social media and convert it into a CSV data set that can be used with Gephi. Currently it supports Twitter Reddit Youtube WWW domains / URLs More social media platforms and more features for the platforms...

ike-scan

ike-scan IKE होस्ट्स IPsec VPN सर्वर की खोज और फिंगरप्रिंटिंग करें Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

CVE-2021-38647

CVE-2021-38647 AKA "OMIGOD" A Zeek package which detects CVE-2021-38647 AKA OMIGOD exploit attempts. https://corelight.com/blog/detecting-cve-2021-38647-omigod https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647...

violin

Violin ☤ — Supervised Agentic Hermes Pentest Profile 35 playbooks · 17 references · 13 templates · required execution guard · Hermes-native Violin is a Hermes-native agentic pentest profile for supervised, authorised penetration tests — from reconnaissance through safe exploit validation to...

Cybersecurity-Handbook

📚 Cybersecurity Handbook A modern, open-source cybersecurity knowledge base designed to help students, professionals, and lifelong learners build practical security skills through structured notes, hands-on labs, and real-world concepts. Built with Quartz • Powered by Markdown • Community Driven ...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

brutas

brutas Wordlists handcrafted and automated with ♥ A random passwords sample: root@kitploit: 1qaz2wsx | panel197111 | @bcd1234 | Root!22020 1q2w3e4r5t6y | catalog841@@ | Zaq@$m,. | 1Qazxsw@222 qwerty12345 | Asdzxc129191 | testguest | User@$12@ password123 | qwerty!@12345 | Guest1120 | ?99998888?...

watermarks-remover

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a...

cobol-shield

cobol-shield Security auditing toolkit for COBOL legacy systems Part of VTR Research Methodology | DOI: 10.5281/zenodo.22063208 Status: Reproducible | License: MIT | Track: Critical Infrastructure What it does Detects compilation context divergences, invisible Unicode attacks, and unsafe COBOL...

shortscan

🌀 Shortscan Un outil d'énumération de noms de fichiers courts pour IIS. Fonctionnalités Shortscan est conçu pour déterminer rapidement quels fichiers avec des noms courts existent sur un serveur Web IIS. Une fois un nom court identifié, l'outil essaie de trouver automatiquement le nom complet. En...