crlfmap

CRLFMap CRLFMap è uno strumento per trovare vulnerabilità di HTTP Splitting Perché? Volevo scrivere uno strumento in Golang per la concorrenza Volevo essere in grado di fuzzare sia parametri che percorsi Installazione root@kitploit: go get github.com/ryandamour/crlfmap Aiuto root@kitploit:...

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

Zin

Versione 1.0 😎 Zin 😎 Un injector di payload per bug bounty scritto in go Caratteristiche Inietta più payload in tutti i parametri Inietta un singolo payload in tutti i parametri Salva le risposte in una cartella di output Mostra il codice di stato e la lunghezza della risposta Può cercare pattern...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

react2shell

React2Shell إصدار Go React2Shell هو ماسح ثغرات عالي الأداء مكتوب بلغة Go، مصمم خصيصًا لكشف ثغرات تنفيذ الأكواد عن بُعد من جهة الخادم RCE في تطبيقات Next.js CVE-2025-55182 و CVE-2025-66478. تعمل هذه الأداة على تحسين النصوص البرمجية لإثبات المفهوم الحالية من خلال الاستفادة من التزامن الأصلي لـ Go...

SubOver

SubOver Nota - Questo progetto è stato interrotto. Non verranno forniti ulteriori aggiornamenti! Ci dispiace! Ma presto arriverà qualcosa di più fantastico! SubOver è uno strumento per il rilevamento di takeover di sottodomini ostili, originariamente scritto in Python ma riscritto da zero in...

CVE-2025-62343

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343 HCL IntelliOps Event Management is affected by multiple security vulnerabilities.

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

EUVD-2025-210806

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2025-62343

HCL IntelliOps Event Management (IEM) is affected by an Admin Session Concurrency Vulnerability that may allow user sessions to remain active after logout or session deletion. The assigned CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexity and required user inte...

fprobe

FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...

cngo

cngo v1 Schnelles Golang-Tool, das einen Dateinamen mit Domains akzeptiert und für jede Domain den CNAME abruft s Installation root@kitploit: $ go get -u github.com/yghonem14/cngo Grundlegende Verwendung cngo akzeptiert nur Textdateien: root@kitploit: $ cngo -f /targets/spotify.txt...

dirsearch

DirSearch This software is a Go implementation of the original dirsearch tool written by Mauro Soria. DirSearch is the very first tool I write in Go, mostly to play and experiment with Go's concurrency model, channels, and so forth : Purpose DirSearch takes an input URL -url parameter and a...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

hacks

Hacks Hacky one-off scripts, tests etc...

bxss

Bxss - Blind XSS Scanner 🚀 Description...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 Divulgazione di informazioni non autenticate di Joomla Description Supporto per rilevamento ad alta concorrenza Scrivere url in urls.txt, supporta solo il formato http://ip:port & https://ip:port Usare il parametro -p per aggiungere un proxy Basta eseguire Usage Help...

CVE-2023-44487

CVE-2023-44487 POC für CVE-2023-44487 geschrieben in Python Bearbeite die .env-Datei, um die Ziel-URL einzufügen und die Gesamtzahl der Anfragen sowie die Parallelität anzupassen. viel Liebe -qmvt...

plution

plution Prototype pollution scanner using headless chrome What this is Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases...