Lucene search
+L

33 matches found

Kitploit
Kitploit
added 2026/09/04 6:26 a.m.4 views

autotimeliner

AutoTimeliner 自动从易失性内存转储中提取取证时间线。 AutoTimeliner 对 Windows、Linux 和 macOS 内存镜像运行多个 Volatility3 插件,然后将它们的输出合并为一个单一的、排序后的 CSV 时间线: 通用时间线插件 插件| 捕获内容 ---|--- timeliner| 跨插件时间戳事件(支持时适用于所有操作系统系列) Windows 插件集 插件| 捕获内容 ---|--- timeliner| 来自进程、注册表、句柄等的时间戳 mftscan| 内存中找到的 MFT 文件条目 shellbags|...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/04 6:11 a.m.5 views

Security_Article

SecurityArticle scrapy website Article and link ... 0x01 Crear un nuevo proyecto 0x02 Definir los objetivos 0x03 Crear el crawler 0x04 Almacenar contenido e.g. pip3 install lxml,scrapy root@kitploit: 文章标题 ArticleTitle //@id="wrapper"/main/div/article/header/h5/a/text...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 3:27 a.m.39 views

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 11:05 p.m.3 views

fileintel

fileintel Esta es una herramienta utilizada para recopilar diversas fuentes de inteligencia para un archivo determinado. Fileintel está escrito de forma modular para que se puedan agregar fácilmente nuevas fuentes de inteligencia. Los archivos se identifican por su hash MD5, SHA1, SHA256. La sali...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/03 9:56 p.m.6 views

email-prediction-asterisks

ASTERISKS & OBELIX 邮件预测星号 是一个脚本,能够让你识别隐藏在星号背后的电子邮件。它是OSINT分析师和安全部门的理想工具。通过利用Intelx泄露数据,它可以智能预测与我们正在寻找的人员相关的电子邮件。此外,它还能通过生成的CSV数据集自动获取邮件信息,便于手动分析。 推特上带有星号的电子邮件示例 演示 安装 需要安装Python的intelx库 root@kitploit: git clone https://github.com/Quantika14/email-prediction-asterisks pip3 install -r...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 8:13 p.m.957 views

h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

5.8AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/03 7:05 p.m.39 views

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 4:40 p.m.146 views

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

5.8AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/03 4:40 p.m.4 views

hostintel

hostintel Esta herramienta se utiliza para recopilar diversas fuentes de inteligencia sobre hosts. Hostintel está escrito de forma modular para que se puedan añadir fácilmente nuevas fuentes de inteligencia. Los hosts se identifican por nombre de host FQDN, dominio o dirección IP. Esta herramient...

5.8AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/03 3:12 p.m.259 views

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 9:59 a.m.3 views

godehashed

Godehashed 一款使用 dehashed.com API 搜索受损资产的 Golang 工具。结果可编译为 CSV 文件以供进一步分析。 截图 Dehashed API 您必须向工具提供 API 密钥。请参阅 apikeytemplate.txt 文件中的示例。 安装 要在 CLI 中安装该工具,请运行以下命令。您的 $GOPATH 必须已经设置好。 go get https://github.com/an00byss/godehashed 用法 ./godehashed -s email -i apikey.txt -e SOMEDOMAIN -o leaks.csv...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/08/24 1:16 a.m.10 views

CVE-2026-78209

exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially exfiltrating data or...

8.4CVSS0.00295EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/24 12:30 a.m.45 views

CVE-2026-78209

exceljs-hardened versions before 5.0.0 are vulnerable to CSV formula injection . The library fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. An attacker who can influence exported cell values can inject spreadsheet formulas that execute when the ...

8.4CVSS5.9AI score0.00295EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/06/30 1:08 p.m.136 views

Nessus-CVE-POC-Finder

Nessus-CVE-POC-Finder Python script to parse .nessus file, ext...

9.8CVSS7.6AI score0.99988EPSS
SaveExploits169
GithubExploit
GithubExploit
added 2026/05/23 1:25 p.m.138 views

Exploit for Path Traversal in Fortinet Fortiproxy

CVE-2018-13379 — Mass Exploit for Fortine...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits22
GithubExploit
GithubExploit
added 2026/03/10 3:14 p.m.250 views

Exploit for CVE-2026-27944

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector ht...

9.8CVSS5.9AI score0.22162EPSS
SaveExploits13
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2017-13053

Malware in sbrugna...

9.8CVSS8AI score0.01383EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 4:10 p.m.27 views

CVE-2020-22275

Easy Registration Forms ER Forms Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable...

8.8CVSS6.7AI score0.0217EPSS
SaveExploits1
Kitploit
Kitploit
added 2023/08/15 12:30 p.m.79 views

Trawler - PowerShell Script To Help Incident Responders Discover Adversary Persistence Mechanisms

Dredging Windows for Persistence What is it? Trawler is a PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts, primarily focused on persistence mechanisms including Scheduled Tasks, Services, Registry Modifications, Startup Items,...

7.5AI score
SaveExploits0References6
Kitploit
Kitploit
added 2023/05/05 12:30 p.m.42 views

Spartacus - DLL Hijacking Discovery Tool

Why "Spartacus"? If you have seen the film Spartacus from 1960, you will remember the scene where the Romans are asking for Spartacus to give himself up. The moment the real Spartacus stood up, a lot of others stood up as well and claimed to be him using the "I AM SPARTACUS" phrase. When a proces...

7.3AI score
SaveExploits0References8
Rows per page
Query Builder