ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

vault-conductor

🗝️ vault-conductor An SSH Agent that provides SSH keys stored in Bitwarden Secret Manager as secrets. Supports SSH authentication and Git commit signing. Demo Features...

credactor

Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...

scorecard

OpenSSF Scorecard...

githubFind3r

githubFind3r githubFind3r is a very fast command line repo/user/commit search tool enter image description here Installation root@kitploit: git clone https://github.com/atmoner/githubFind3r.git cd githubFind3r npm install Run it root@kitploit: node githubFind3r.js...

secretlint

Secretlint Secretlint es una herramienta de linting conectable para prevenir la confirmación de credenciales. Características Escáner : Encuentra credenciales en un proyecto e infórmalos Amigable con proyectos : Fácil de configurar en tu proyecto e integrar servicios CI Hook de Pre-Commit :...

CVE-2025-65964-Exploit

Pasos para replicar Primero, prepara un repositorio que contenga archivos maliciosos root@kitploit: mkdir n8n-rce-poc && cd n8n-rce-poc git init git remote add origin mkdir evilhooks echo '!/bin/sh' evilhooks/pre-commit echo 'touch /tmp/pwnedsuccess' evilhooks/pre-commit chmod +x...

gitrecon

gitrecon Herramienta OSINT para obtener información de un perfil de Github o Gitlab y encontrar direcciones de correo electrónico de usuarios filtradas en commits. 📚 ¿Cómo funciona? GitHub utiliza la dirección de correo electrónico asociada a una cuenta de GitHub para vincular commits y otras...

CVE-2010-2387

CVE-2010-2387 Version: https://github.com/GNOME/gdm/tree/2799f52e01354944c0f464aa93bc5adfbc6bc0e8...

CVE-2020-9038

CVE-2020-9038 Informe de divulgación de CVE-2020-9038 Más información: https://github.com/laurent22/joplin/commit/3db47b575b9cb0a765da3d283ba https://nvd.nist.gov/vuln/detail/CVE-2020-9038 https://vulners.com/cve/CVE-2020-9038...

vcamper

VCamper VCamper "Version Camper" is a proof-of-concept CLI that reviews a Git commit range for likely silent security fixes. Security fixes often reach public Git history before the advisory trail catches up. A maintenance-looking commit can carry enough evidence for a reviewer to infer the bug...

zizmor

🌈 zizmor zizmor is a static analysis tool for CI/CD systems. It can find and fix security issues in common CI/CD setups, including GitHub Actions, Dependabot, and pre-commit. Some of the things zizmor finds:...

talisman

Talisman Una herramienta para detectar y prevenir que se introduzcan secretos en el repositorio Tabla de Contenidos ¿Qué es Talisman? Instalación Instalar en el PATH enfoque recomendado Instalación como plantilla de hook global Configuración de un proyecto...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project...

trustlock

trustlock A Git-native dependency admission controller. Evaluates trust signals on every dependency change. How it works trustlock runs as a Git pre-commit hook advisory mode and a CI check enforce mode: Advisory pre-commit: warns on violations, exits 0, advances the trusted baseline when all...

reposcanner

Reposcanner Reposcanner is a python script to search through the commit history of Git repositories looking for interesting strings such as API keys, inspired by truffleHog. Installation The python Git module is required python3-git on Debian. Docker root@kitploit: docker build -t reposcanner...

git-secrets

============ git-secrets 防止你将密码和其他敏感信息提交到 git 仓库中。 .. contents:: :depth: 2 简介 :: root@kitploit: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git secrets --list --global git secrets --add -a|--allowed -l|--literal...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

terragoat

TerraGoat - Vulnerable Terraform Infrastructure...

Vitest Browser Mode - Local File Read

Vitest is a testing framework powered by Vite. The screenshot-error handler on the browser mode HTTP server that responds any file on the file system. Especially if the server is exposed on the network by browser.api.host- true, an attacker can send a request to that handler from remote to get th...