Lucene search
+L

3121 matches found

Kitploit
Kitploit
added 2026/09/18 4:35 a.m.68 views

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/18 4:28 a.m.151 views

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:09 a.m.61 views

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 3:36 a.m.11 views

BlackThrone

BlackThrone PHP BlackThrone Script An open source Alternative to burp collaborator BlackThrone created To detect websockets and HTTP traffic in the main website with provide some server header and client info. BlackThrone is web based tool to run on webservers with PHP . It will detect the visito...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 2:07 a.m.7 views

of-CORS

of-CORS of-CORS is Truffle Security's tool suite for identifying and exploiting CORS misconfigurations on the internal networks of bug bounty targets using typosquatting. You can read more here https://trufflesecurity.com/blog/of-CORS How Does it Work?? of-CORS is a Python3 web application built ...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 12:44 a.m.9 views

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS Exploit Author: emirhanerdogu Vendor Homepage https://www.sourcecodester.com/php/16928/sticky-notes-app-using-php-source-code.html Software Link...

6.5CVSS6.8AI score0.00342EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 11:32 p.m.11 views

CorsMe

What is CorsMe ?...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 5:53 p.m.13 views

ApiHunter

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. 🎯 ApiHunter 📺 Video Demo Click to watch the full demo on YouTube 🖥️ Desktop App...

5.9AI score
SaveExploits0References23
Kitploit
Kitploit
added 2026/09/17 5:12 p.m.9 views

theftfuzzer

root@kitploit: ┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ Introduction: TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations. Usage: python theftfuzzer.py -d 'http://example.com/api/data'...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 3:49 p.m.392 views

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/17 3:44 p.m.11 views

CORStest

CORStest A simple CORS misconfiguration scanner Based on the research ofJames Kettle CORStest is a quick & dirty Python 3 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 3:28 p.m.8 views

inference-gateway-PoC

inference-gateway:安全公告 | ---|--- 研究员| Dostxodjayev Abdullox @squeeze440 公告| GHSA-5293-fcm6-fh8v CVE| CVE-2026-87009 CVSS 3.1| 5.4(中危)— CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L 弱点| CWE-352、CWE-306、CWE-346 状态| 已在 v0.46.0 中修复 摘要 :inference-gateway 默认绑定到 0.0.0.0 并关闭身份验证(AUTHENABLED=false),其 ANY...

5.8AI score
SaveExploits0References6
EUVD
EUVD
added 2026/09/17 2:52 p.m.7 views

EUVD-2026-80991

oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass...

6.3CVSS0.00623EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/17 1:47 p.m.16 views

Corsy

Corsy CORS Misconfiguration Scanner Introduction Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations. Requirements Corsy only works with Python 3 and has just one dependency: requests To install this dependency, navigate to Corsy directory and execute...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/17 11:43 a.m.11 views

corsair_scan

Welcome to Corsairscan Corsairscan is a security tool to test Cross-Origin Resource Sharing CORS misconfigurations. CORS is a mechanism that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served. If this is not...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 10:37 a.m.8 views

CVE-2019-17633

CVE-2019-17633 Eclipse CheのCSRFによるRCE このバグにより、リモートのウェブサイトが、ユーザーがウェブページを訪問した際に、バージョン7.3.0以前および7.4.1以前のCheを実行しているマシン上で任意のDockerコンテナを作成・起動できるようになります。 脆弱性 これはCSRFバグであり、リモートのウェブサイトが、スタンドアロンモードでEclipse...

8.8CVSS8AI score0.00811EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 7:04 a.m.7 views

CVE-2025-34291_cors_security_scanner

CVE-2025-34291corssecurityscanner A lightweight Python-based security assessment tool for detecting dangerous Cross-Origin Resource Sharing CORS misconfigurations - CVE-2025-34291. root@kitploit: CORS Security Scanner A lightweight Python-based security assessment tool for detecting dangerous...

9.4CVSS8.7AI score0.83629EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/17 6:21 a.m.11 views

dorkX

dorkX Pipe different tools with google dork Scanner Version 1.0 Install zoid@MSI /dorkX git clone https://github.com/ethicalhackingplayground/dorkX zoid@MSI /dorkX cd dorkX zoid@MSI /dorkX go build dorkx.go zoid@MSI /dorkX go build corsx.go zoid@MSI /dorkX go build csrfx.go zoid@MSI /dorkX go bui...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/17 5:53 a.m.10 views

Astra

Astra REST APIのペネトレーションテストは、既存のAPIの継続的な変更や新しく追加されるAPIのために複雑です。Astraは、セキュリティエンジニアや開発者がプロセスの一部として使用できるため、開発サイクルの初期段階で脆弱性を検出し修正できます。Astraはログイン・ログアウト(認証API)を自動的に検出しテストするため、誰でも簡単にCICDパイプラインに統合できます。AstraはAPIコレクションを入力として受け取ることができるため、スタンドアロンモードでのAPIテストにも使用できます。 SQLインジェクション クロスサイトスクリプティング 情報漏洩 認証とセッション管理の...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 5:53 a.m.38 views

Astra

Astra REST API penetration testing is complex due to continuous changes in existing APIs and newly added APIs. Astra can be used by security engineers or developers as an integral part of their process, so they can detect and patch vulnerabilities early during development cycle. Astra can...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder