Lucene search
+L

597 matches found

Kitploit
Kitploit
added 2026/09/13 11:56 a.m.6 views

icebreaker

icebreaker Break the ice with that cute Active Directory environment over there. When you're cold and alone staring in at an Active Directory party but don't possess even a single AD credential to join the fun, this tool's for you. Sequentially automates 5 internal network attacks against Active...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 11:03 a.m.469 views

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

5.7AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 10:32 a.m.138 views

geo-recon

Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 9:14 a.m.106 views

knockpy

🔍 Knockpy Subdomain Scan v9.0 ✅ Fast & Async • 🔐 Recon + Brute • 🔧 Easy to Extend KnockPy is a modular Python 3 tool to enumerate subdomains via passive reconnaissance and bruteforce, now with async/await support , enhanced performance, and modern HTTP/TLS handling. 🚀 Features v9 ✅ Async scanning...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 8:58 a.m.156 views

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 7:26 a.m.48 views

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 6:37 a.m.56 views

domi-owned

Domi-Owned Summary Domi-Owned is a tool used for compromising IBM/Lotus Domino servers. Tested on IBM/Lotus Domino 8.5.2, 8.5.3, 9.0.0, and 9.0.1 running on Windows and Linux. Requirements Domi-Owned uses Python 3, which can be install through your distribution's package manager apt, yum, etc...

5.7AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 5:55 a.m.148 views

wpscan

WPScan WordPress Security Scanner WPScan WordPress Vulnerability Database - WordPress Security Plugin INSTALL Prerequisites Optional but highly recommended: rbenv Ruby = 3.3 - Recommended: latest stable Curl = 7.72 - Recommended: latest stable The 7.29 has a segfault The 7.72 could result in...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 4:55 a.m.207 views

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 4:03 a.m.311 views

lazybee

ABOUT TOOL : Lazybee tool is a python based script from which you can generate random wordlist for brutefocre attacks. This tool has a unique features like wordlist generating time calculation and direct .txt saving in current directory. This tool works on both rooted Android device and Non-roote...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 12:01 a.m.5 views

HostileSubBruteforcer

HostileSubBruteforcer This app will bruteforce for exisiting subdomains and provide the following information: IP address Host if the 3rd party host has been properly setup. for example if site.example.com is poiting to a nonexisiting Heroku subdomain, it'll alert you - Currently only works with...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 11:10 p.m.66 views

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 10:31 p.m.32 views

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

6.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 9:51 p.m.3 views

SocialBox

SocialBox SocialBox is a Bruteforce Attack Framework Facebook , Gmail , Instagram ,Twitter , Coded By Belahsan Ouerghi Installation root@kitploit: sudo apt-get install git git clone https://github.com/TunisianEagles/SocialBox.git cd SocialBox chmod +x SocialBox.sh chmod +x install-sb.sh...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 9:49 p.m.6 views

PoC-ubuntutouch-pin-privesc

UPDATE 09.09.2022 I got new CVE for this vulnerability: CVE-2022-40297. Proof of Concept: Privilege escalation in Ubuntu Touch 16.04 - by Passcode Bruteforce Ubuntu Touch allows you to "protect" devices with a 4-digit passcode. Such a code was set in a demonstration device. The problem is that th...

7.8CVSS7.3AI score0.0047EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 9:01 p.m.164 views

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:52 p.m.4 views

hashcracker

hashcracker Supported hashing algorithms: SHA512, SHA256, SHA384, SHA1, MD5, SHA224 Features: auto detection of hashing algorithm based on length not recommended, bruteforce, password list Arguments: type: hash algorithm must be one of the supported hashing algorithms mentioned above or AUTO if y...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:50 p.m.64 views

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 7:22 p.m.15 views

Android-PIN-Bruteforce

🔓📱 Android-PIN-Bruteforce Unlock an Android phone or device by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! 📱 How it works It uses a USB OTG cable to connect the locked phone to the Nethunter device. It emulates a keyboard,...

6.1AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/12 7:09 p.m.9 views

ldapnomnom

LDAP Nom Nom Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by abusing LDAP Ping requests cLDAP Looks for enabled normal user accounts. No Windows audit logs generated. High speed up to 50K/sec per server - go way beyond that with multiple...

6AI score
SaveExploits0References3
Rows per page
Query Builder