Lucene search
+L

12082 matches found

Kitploit
Kitploit
added 2026/09/15 10:49 a.m.7 views

Yasso

Yasso Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:31 a.m.13 views

Reconator

Reconator is an automated reconnaissance framework. Add a target — alone or in bulk — and the worker runs 17 recon modules against it subdomain enum, dirbrute, JS/link mining, WAF fingerprint, takeover check, GF triage, and more. The dashboard shows per-module output as it lands. Stack Layer| Tec...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 10:29 a.m.7 views

ios_Restriction_PassCode_Crack---Python-version

ios Restriction PassCode Crack -Python version Overview ios Restriction PassCode Cracker , this version of the application is written with Python programming language,which is used to crack the Restriction PassCode of iphone/ipad. iphone/ipad 访问限制密码破解 Methodthe same as C version bruce crack 1 .ge...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:08 a.m.5 views

SSOh-No

SSOh-No This tool is designed to enumerate users, password spray and perform brute force attacks against any organisation that utilises Azure AD or O365. Generally, this endpoint provides extremely verbose errors which can be leveraged to enumerate users and validate their passwords via brute...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:04 a.m.13 views

LadonGo

Ladon Scanner For Golang Wiki http://k8gege.org/Ladon/LadonGo.html Introduction LadonGo is an open source intranet penetration scanner framework, which can be used to easily detect segment C, B, A live hosts, fingerprint identification, port scanning, password explosion, remote execution, high-ri...

10CVSS8.2AI score0.99865EPSS
SaveExploits48References6
Kitploit
Kitploit
added 2026/09/15 9:54 a.m.7 views

o5logon-fetch

o5logon-fetch A small Java program that attempts to exploit CVE-2012-3137 on vulnerable Oracle 11 servers. By exploiting this vulnerability, you can run offline brute force attacks until you discover a given user’s password, without any apparent audit trail. Vulnerability Details A good writeup o...

6.4CVSS8AI score0.31437EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/15 9:52 a.m.37 views

brutespray

Brutespray Created by: Shane Young/@x90sky && Jacob Robles/@shellfail Inspired by: Leon Johnson/@sho-luv Description Brutespray automatically attempts default credentials on discovered services. It takes scan output from Nmap GNMAP/XML, Nessus, Nexpose, JSON, and lists, then brute-forces...

5.9AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/09/15 9:51 a.m.14 views

cowrie

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:49 a.m.4 views

SNMP-Brute

SNMP Brute SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:46 a.m.7 views

SafeGuard

root@kitploit: ./safeguard --version 1.0 Safeguard is a fast, lightweight, cross-platform command-line file encryption tool written in Go. Security Notice This project is a learning-oriented file encryption tool. While it uses standard cryptographic primitives from Go’s standard library e.g...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:37 a.m.4 views

t14m4t

t14m4t t14m4t is an automated brute-forcing attack tool, wrapper of THC-Hydra and Nmap Security Scanner. t14m4t is scanning an user defined target or a document containing targets for open ports of services supported by t14m4t , and then starting brute-forcing attack against the services running ...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 9:34 a.m.5 views

iOSRestrictionBruteForce

iOS Restriction Passcode Brute Force Overview This version of the application is written in Python, which is used to crack the restriction passcode of an iPhone/iPad takes advantage of a flaw in unencrypted backups allowing the hash and salt to be discovered. DEPENDENCIES This has been tested wit...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/15 9:32 a.m.6 views

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Weak Password Requirement in admin-center lead to malicious plugin upload in the i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to weak password requirement vulnerability in admin-center + malicious plugin upload lead to RCE vulnerability. These vulnerabilities...

9.8CVSS8.1AI score0.01191EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 9:27 a.m.10 views

dnsmap

INTRODUCTION dnsmap was originally released back in 2006 and was inspired by the fictional story "The Thief No One Saw" by Paul Craig, which can be found in the book "Stealing the Network - How to 0wn the Box" dnsmap is mainly meant to be used by pentesters during the information...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:23 a.m.21 views

cameradar

Cameradar RTSP stream access tool Cameradar scans RTSP endpoints on authorized targets, and uses dictionary attacks to bruteforce their credentials and routes. What Cameradar does Detects open RTSP hosts on accessible targets. Detects the device model that streams the RTSP feed. Attempts...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/15 9:09 a.m.7 views

API-SPY-API-PROBE

API-SPY 🕵️👻 A powerful directory brute-force tool designed for API reconnaissance and penetration testing. Automatically discovers hidden API endpoints, performs recursive subscanning, and probes HTTP methods for deeper API enumeration. Features ✨ Core Capabilities: 🎯 Fast endpoint discovery using...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 9:08 a.m.7 views

CVE-2020-27747

CVE-2020-27747 Possible Account Takeover | Brute Force Ability Suggested description An issue was discovered in Click Studios Passwordstate 8.9 Build 8973. If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote...

6.8CVSS6.9AI score0.01104EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:02 a.m.3 views

submonitor

submonitor by xpl0ited1 Description Subdomain monitor with reporting capabilities to Slack, Discord and Telegram Usage: Configure the scanning targets on the targets.txt file, set the reporting config at the config.yaml, then create a cronjob to execute every day root@kitploit: crontab -e 0 8...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 8:52 a.m.9 views

tactical-exploitation

tactical-exploitation "The Other Way to Pen-Test" -- HD Moore & Valsmith I've always been a big proponent of a tactical approach to penetration testing that does not focus on exploiting known software vulnerabilities, but relies on old school techniques such as information gathering and brute...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 8:33 a.m.6 views

plown

About Plown is a security scanner for Plone CMS. Although Plone has the best security track record of any major CMS and is considered highly secure, misconfigurations and weak passwords might enable system break-ins. Plown has been developed to ease the discovery of usernames and passwords, and a...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder