SubOver

SubOver Note - This project is discontinued. No more updates will be provided! Sorry! But something more awesome will come soon! Subover is a Hostile Subdomain Takeover tool originally written in python but rewritten from scratch in Golang. Since it's redesign, it has been aimed with speed and...

recheck

recheck El confiable verificador de ReDoS Licencia MIT License. 2020-2025 C TSUYUSATO "MakeNowJust" Kitsune...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

ClipGuard

ClipGuard Real-time detection of ClickFix clipboard injection attacks on Windows. ClipGuard monitors clipboard activity and intercepts suspicious paste operations before they can execute — specifically targeting the ClickFix technique where fake verification pages trick users into pasting malicio...

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

Minio-CVE-2023-28432

Minio-CVE-2023-28432 Detection tool for Minio-CVE-2023-28432 information leak. For learning and authorized testing only. Personal analysishttps://lhxhl.github.io/2023/04/03/minio2023/ Usage Requires golang environment root@kitploit: go build main.go ./main -h // help ./main -u url // single URL...

CVE-2021-45232

Apache APISIX Dashboard Unauthorized Access Description This tool integrates fofa and POC one-click detection functionality, enabling one-click crawling from fofa and one-click detection crawl and test simultaneously Usage Version: python3 Before testing, you need to change your fofatoken value a...

cve-2020-7799

cve-2020-7799 Batch detection of cve-2020-7799 Add a text.txt file in the same directory The URL format in the file is as follows: www.baidu.com 132.231.132.132 133.12.122.13:8080 Run: python3 cve-2020-7799.py Note: It is prohibited to use any resources of this project for illegal testing!...

ScanQLi

ScanQLi ScanQLi is a simple SQL injection scanner with somes additionals features. This tool can't exploit the SQLi, it just detect them. Tested on Debian 9 Features Classic Blind Time based GBK soon Recursive scan follow all hrefs of the scanned web site Cookies integration Adjustable wait delay...

strutser

strutser This program checks for CVE-2017-5638. Usage root@kitploit: Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP...

vbulletin5-rce

vbulletin5 rce vulnerability detection tool 0x00 Overview In September 2019, vbulletin5 5.0.0-5.5.4 disclosed an RCE vulnerability CVE-2019-16759. Using the file ajax/render/widgetphp and the POST parameter widgetConfigcode, remote code execution can be directly achieved. On August 11, 2020, a...

Anti-Sandbox

Description Detecting AnyRun sandbox, and more is coming out in the future. AnyRun detection Demo https://github.com/user-attachments/assets/45533630-3c64-457a-80d0-a0f12ae84b98...

CVE-2021-22986

F5 BIG-IP RCE / CVE-2021-22986 Remote Code Execution Vulnerability Code By:Tas9er Warning This tool is intended to help enterprises quickly locate and fix vulnerabilities. It is only for authorized security testing and strictly complies with the Cybersecurity Law of the People's Republic of China...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

ShiroScan

ShiroScan Shiro=1.2.4 deserialization, one-click detection tool root@kitploit: 改动内容：1.新增4个利用链模块CommonsCollections7-10，预计增加成功率30%，已打包成新ysoserial的jar包，请勿更换 改动内容：2.增加多线程，虽模块增加但速度却提高300% root@kitploit: 集成21个key进行fuzz If it helps, please give a star. Corresponding blog article:...

watchTowr-vs-Progress-ShareFile-CVE-2026-2699

CVE-2026-2699 Progress ShareFile Authentication Bypass Progress ShareFile Authentication Bypass Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if Progress ShareFile instance is vulnerable to CVE-2026-2699 authentication bypass. Detection Artifact Generato...

Persistnux

Persistnux A comprehensive Linux persistence detection tool for Digital Forensics and Incident Response DFIR investigations. Overview Persistnux is a bash-based tool designed to identify known Linux persistence mechanisms used by attackers to maintain access to compromised systems. It performs...

jfrog-CVE-2022-24675

CVE-2022-24675 tools Usage instructions root@kitploit: cve202224675.sh rootfolder Will recursively walk the specified folder and report Golang binaries which use pem.Decode function, or are stripped in which case function name will be missed and the check will not be effective...

CVE-2021-25646-exp

CVE-2021-25646-exp Apache Druid CVE-2021-25646 Remote Code Execution Vulnerability Detection and Exploitation Tool Input domain name or ip:port to perform vulnerability detection For targets where the vulnerability is detected, command execution exploitation can be performed Supports single targe...

CVE-2021-44228

CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...