SSRFire

SSRFIRE 자동화된 SSRF 탐지기입니다. 도메인 이름과 서버만 입력하고 편하게 쉬세요! ; 또한 XSS 및 오픈 리다이렉트를 찾는 옵션도 있습니다. 구문 ./ssrfire.sh -d domain.com -s yourserver.com -f customfile.txt -c cookies domain.com --- 테스트하려는 도메인 yourserver.com --- SSRF를 감지하는 서버 예: Burp collaborator customfile.txt --- 선택적 인수. gau 대신 사용자 정의 URL을 제공...

Log4Shell

log4shell 脆弱なlog4jホストを検出するための、完全自動化・高精度・多機能スキャナ 特徴 URLリストに対応。 60以上のHTTPリクエストヘッダーに対するファジング。 HTTP POSTデータパラメータに対するファジング。 JSONデータパラメータに対するファジング。 脆弱性の発見と検証のためのDNSコールバックをサポート。 WAFバイパス用ペイロード。 お知らせ Log4J...

CVE-2020-3580

CVE-2020-3580 自動スキャナー CVE-2020-3580 - Cisco Adaptive Security Appliance ASA ソフトウェアおよび Cisco Firepower Threat Defense FTD ソフトウェア XSS。 使用方法 root@kitploit: ▶ git clone "https://github.com/adarshvs/CVE-2020-3580.git" ▶ cd CVE-2020-3580 スキャンしたいドメイン/IPを.txtファイル形式で同じフォルダに置いてください root@kitploit: ▶ python...

spring4shell-scan

spring4shell-scan Spring4Shell 및 Spring Cloud RCE 취약점을 찾기 위한 완전 자동화된 신뢰할 수 있는 정확한 스캐너 기능 URL 목록 지원 10개 이상의 새로운 Spring4Shell 페이로드 퍼징 기존 도구는 12개 변형만 사용 HTTP GET 및 POST 메서드 퍼징 취약점 발견 시 자동 검증 무작위 및 비침입적 페이로드 WAF 우회 페이로드 설명...

CVE-2020-5902-Scanner

CVE-2020-5902-Scanner F5 BIG-IP スキャナー（CVE-2020-5902）用の自動スクリプトで、Shodan API から取得したホストを使用します。このスクリプトを使用するには Shodan アカウントが必要です。Shodan アカウントをお持ちでない場合は、こちらをクリックしてください。 インストール 1. 依存関係をインストールします。 root@kitploit: CentOS & Fedora sudo yum install git python3 -y Ubuntu & Debian sudo apt install git python3...

pulsar

Pulsar 무엇인가요? Pulsar 는 레드팀, 펜테스터 및 버그 바운티 헌터를 위한 자동화된 네트워크 공격 표면 스캐너입니다. 인프라에 대한 최소한의 지식으로 조직의 공개 자산을 발견하는 데 중점을 둡니다. 네트워크 데이터 시각화와 함께 기본적인 취약점 점수를 제공하여 인프라의 약점과 다른 리소스와의 관계를 찾으려고 시도합니다. 또한 광범위하고 미지의 범위를 위한 맞춤형 취약점 스캐너로 사용할 수 있습니다. 이 소프트웨어는 가용성과 개방성을 염두에 두고 제작되었으므로 100% 무료이며, 기능을 사용하기 위해 API 키가...

CVE-2025-55182

Next.js CVE-2025-55182 – 自動スキャナー（Python） このリポジトリは、Next.js 16.0.6 に影響するセキュリティ脆弱性 CVE-2025-55182 のための 完全自動化された Python PoC スキャナー です。このツールは、セキュリティ研究者やバグ報奨金ハンターが、URL リストを提供するだけで複数のターゲットを大規模にテストできるようにします。 🚀 機能 100% Python 実装 Next.js 16.0.6 CVE-2025-55182 に特化して動作 urls.txt からターゲットを読み取り 自動的にエクスプロイトリクエストを送...

CVE-2024-4577-PHP-RCE

CVE 2024-4577 PHP リモートコード実行 の自動スキャナー Waived 提供 影響を受けるバージョン: PHP 8.3. 8.3.8, 8.2. 8.2.20, 8.1. 8.1.29 詳細: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 https://www.exploit-db.com/exploits/52047 https://vulners.com/cve/CVE-2024-4577 概要: これは、Web サーバーで CVE 2024-4577 のバグを調査するスキャナーです。 root@kitploit:...

MongoBleed-CVE-2025-14847-Fully-Automated-scanner

이 저장소에는 README가 없습니다...

Exploit for Path Traversal in Apache Http_Server

CVE Reproduction Lab Overview This project is a cybersecu...

OSTE-Web-Log-Analyzer - Automate The Process Of Analyzing Web Server Logs With The Python Web Log Analyzer

Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that include: Features 1. Attac...

Sn1per v7.0 - Automated Pentest Framework For Offensive Security Experts

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage...

Sn1per v6.0 - Automated Pentest Framework For Offensive Security Experts

Sn1per Community Edition is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Sn1per Professional is Xero Security's premium reporting addon for Professional Penetration Testers, Bug Bounty Researchers and Corporate Security teams to manage...

Sn1per v4.4 - Automated Pentest Recon Scanner

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. DEMO VIDEO: FEATURES: Automatically collects basic recon ie. whois, ping, DNS, etc. Automatically launches Google hacking queries against a target domain Automatically enumerates...

Taipan - Web Application Security Scanner

Taipan is a an automated web application scanner which allows to identify web vulnerabilities in an automatic fashion. This project is the core engine of a broader project which include other components, like a web dashboard where you can manage your scan or download a PDF report and a scanner...

Sn1per - Automated Pentest Recon Scanner

Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities. Features Automatically collects basic recon ie. whois, ping, DNS, etc. Automatically launches Google hacking queries against a target domain Automatically enumerates open ports...

OWASP ZAP 2.3.0.1 - An easy to use integrated penetration testing tool for finding vulnerabilities in web applications

The OWASP Zed Attack Proxy ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration...

[OWASP Zed Attack Proxy 2.2.1] Tool for finding vulnerabilities in web applications (Now supports CWE)

OWASP Zed Attack Proxy ZAP An easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing...

[OWASP Zed Attack Proxy 2.1.0] An easy to use integrated penetration testing tool for finding vulnerabilities in web applications

The OWASP Zed Attack Proxy ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration...

OWASP Zed Attack Proxy (ZAP) v.1.3.2 Released

OWASP Zed Attack Proxy ZAP v.1.3.2 Released The OWASP Zed Attack Proxy ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.It is designed to be used by people with a wide range of security experience and as such is ideal for developers and...