ttyd

ttyd - Share your terminal over the web ttyd is a simple command-line tool for sharing terminal over the web. Features Built on top of libuv and WebGL2 for speed Fully-featured terminal with CJK and IME support ZMODEM lrzsz / trzsz file transfer support Sixel image output support img2sixel / lsix...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

dnsdmpstr

dnsdmpstr Unofficial API & Client for DNS Dumpster and HackerTarget.com IP tools. https://dnsdumpster.com/ https://hackertarget.com/ip-tools/ Installation root@kitploit: git clone https://github.com/zeropwn/dnsdmpstr cd dnsdmpstr pip3 install -r requirements.txt chmod +x ddump.py Usage As a...

pwdgenerator

pwdgenerator Customized password dictionary generator Based on bit4woo's passmaker project～ 🙏 Usage, download release Command line: ./pwdgenerator -h Simple usage ./pwdgenerator -d baidu.com -min 6 -max 10 Customized password dictionary generator How to use download release command line:...

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. root@kitploit: git clone...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

shed

Shed - .NET runtime inspector Shed is an application that allow to inspect the .NET runtime of a program in order to extract useful information. It can be used to inspect malicious applications in order to have a first general overview of which information are stored once that the malware is...

rifiuti2

Introduction Rifiuti2 is a for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the trashed files have been permanently...

RatRace

RatRace 一款轻量级CLI工具，用于系统性地检测和利用Web应用、API及现代服务中的竞争条件漏洞。 解决的问题 竞争条件是现代应用中最具破坏性的安全漏洞之一，然而自动化扫描器对此类问题的覆盖依然不足。Nuclei、ffuf、sqlmap等工具擅长发现静态漏洞，但从根本上无法识别基于并发的安全问题。 渗透测试人员面临两难选择：要么为每次测试手动编写一次性脚本，要么完全跳过竞争条件测试。这两种方案都不可扩展，也不够专业。 RatRace 通过提供一个精致且可重复的竞争条件测试工作流解决了这一难题 ——将以往临时拼凑的脚本过程转变为系统化的流程，可与CI/CD流水线集成，并生成专业报告...

preflight

Preflight.sh Preflight.sh は、コードベースを本番環境へのデプロイ前にスキャンして、起動準備が整っているかを確認するコマンドラインツールです。設定の欠落、統合の問題、セキュリティ上の懸念、SEOメタデータの欠落、その他のよくあるミスを検出します。 本番環境で恥をかかないように。コマンドを実行するだけです。 インストール Homebrew macOS/Linux root@kitploit: brew install preflightsh/preflight/preflight npm root@kitploit: npm install -g...

JShunter

JSHunter Herramienta Profesional de Análisis de Seguridad en JavaScript Descubrimiento completo de endpoints, detección de datos sensibles y análisis avanzado de código para profesionales de seguridad Acerca de JSHunter es una herramienta integral de línea de comandos para el análisis de segurida...

PyRat

PyRat PyRat，基于python XmlRPC完成的远控开源项目，包括客户端和服务端（也叫控制端，后统称服务端）。 申明：项目仅供技术交流，请勿用于商业及非法用途，如产生任何法律纠纷均与本人无关! 1. 由于XmlRPC基于http协议，所以PyRat能够无视防火墙，更加优雅得进行通信和控制。 2. python的跨平台特性，使得PyRat客户端可以支持Windows/Linux/Macos等不同平台，目前测试通过支持Windows/Ubuntu/Macos 平台。 3. 服务端命令行控制和管理，逼格满满。 4...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

PwnedCheck

PwnedCheck PwnedCheck 是一个命令行工具，用于通过Have I Been Pwned API 检查密码是否出现在已知的数据泄露事件中，并支持加密的 Bitwarden 密码库导出文件。 功能特性 从命令行检查单个密码 从文件处理密码 使用 -hashed 接受预计算的 SHA-1 哈希输入 使用 -bw 检查 Bitwarden 加密导出文件 使用 -hide 在输出中隐藏明文密码 使用 -v 显示请求级别的 HIBP 诊断信息 使用 -stats 打印运行结束时的统计信息 安装 预编译版本 你可以直接从发布页面下载针对你操作系统预编译的静态二进制文件： 1. 访问...

multiscanner

MultiScanner Introduction MultiScanner is a file analysis framework that assists the user in evaluating a set of files by automatically running a suite of tools for the user and aggregating the output. Tools can be custom built Python scripts, web APIs, software running on another machine, etc...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...