webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

maltrail v3.2

Maltrail Maltrail is a network traffic detection system that identifies communication with known malicious infrastructure and reports selected traffic anomalies. It matches domains, URLs, IP addresses, IP:port pairs, and User-Agent values observed on the network against a set of indicators called...

Apache-Hunter

ApacheHunter - Scanner Avanzato per Server Apache Sviluppato da Rownok Ahmed Khan GitHub:https://github.com/Rk-000 ApacheHunter è un potente scanner progettato per rilevare server Apache, identificare versioni e verificare la presenza della vulnerabilità CVE-2024-22393 Pixel Flood nelle...

Security Bulletin: Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods API Management

Summary Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods developer portal and IBM webMethos API ControlPlane. Vulnerability Details CVEID:CVE-2026-22746 DESCRIPTION: Vulnerability in Spring Spring Security. If an application is using the...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

h2buster

h2buster v0.4d A fast, threaded, recursive, web directory brute-force scanner over HTTP/2 using hyper, inspired by Gobuster. Features Fast and portable - install hyper and run. Multiconnection scanning. Multithreaded connections. Scalable: scans can be as docile or aggressive as you configure the...

h2buster

h2buster v0.4d Un veloce scanner multithread ricorsivo per directory web con forza bruta su HTTP/2 che utilizza hyper, ispirato a Gobuster. Caratteristiche Veloce e portatile: installa hyper ed eseguilo. Scansione multiconnessione. Connessioni multi-thread. Scalabile: le scansioni possono essere...

securitybot

Securitybot Distributed alerting for the masses! Securitybot is an open-source implementation of a distributed alerting chat bot, as described in Ryan Huber's blog post. Distributed alerting improves the monitoring efficiency of your security team and can help you catch security incidents faster...

GoldenEye

QUESTO PROGETTO NON È PIÙ MANTENUTO GoldenEye GoldenEye è un'applicazione Python 3 SOLO A SCOPO DI TEST DI SICUREZZA! GoldenEye è uno strumento di test DoS HTTP. Vettore di attacco sfruttato: HTTP Keep Alive + NoCache Utilizzo root@kitploit: USO: ./goldeneye.py OPZIONI OPZIONI: Flag Descrizione...

CVE-2024-11318

CVE-2024-11318 IDOR - Hijacking dell'Utente in AbsysNet 2.3.1 DICHIARAZIONE DI NON RESPONSABILITÀ Questo strumento è progettato per aiutare a identificare e verificare se un'applicazione è vulnerabile a questa specifica CVE-2024-11318. È destinato all'uso da parte di professionisti della...

telegram_bbbot

telegrambbbot Telegram Bug Bounty Bot https://telegram.me/bugbountychannel History This bot adopted special for deploying to Heroku General purposes of this got - "Be helpful for infosec community!" Bot use https://github.com/maddevsio/bbcrawler for fetching information Used heroku...

gladius

Gladius Easy mode from Responder to Credentials Author: Cory Duplantis @ctfhacker / blog Blog post on Gladius asciicast Gladius provides an automated method for cracking credentials from various sources during an engagement. We currently crack hashes from Responder, secretsdump.py, and...

rekall

Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...

WiFi-Pumpkin-deprecated

Questo repository è ⛔️ DEPRECATO, wifipumpkin3 è stato rilasciato, dacci un'occhiata! WiFi-Pumpkin - Framework per attacchi Rogue Wi-Fi Access Point Descrizione WiFi-Pumpkin è un framework per creare facilmente falsi AP Rogue che inoltrano il traffico legittimo verso e dalla vittima ignara. È ricc...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

upx v5.2.1

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o root@kitploit: The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

parameth

parameth This tool can be used to brute discover GET and POST parameters Often when you are busting a directory for common files, you can identify scripts for example test.php that look like they need to be passed an unknown parameter. This hopefully can help find them. example scan The -off flag...

parameth

parameth Questo strumento può essere utilizzato per scoprire tramite brute force i parametri GET e POST Spesso, quando stai esplorando una directory alla ricerca di file comuni, puoi identificare script ad esempio test.php che sembrano aver bisogno di un parametro sconosciuto. Questo strumento pu...