bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts es un scraper web de Bing.com para descubrir nombres de host por dirección IP. Descripción Bing-ip2hosts es un scraper web de Bing.com que descubre nombres de host por dirección IP. Bing es el motor de búsqueda insignia de Microsoft, anteriormente conocido como MSN...

my-little-honeypot

my-little-honeypot Description This repository aims to show how easy it is to code a telnet honeypot in order to recovering IOT malwares, and thus, active Command & Control. This code has been released espacially because of the conference I gave at the INSHACK event in Lyon, France on April 6th...

fav-up

Fav-up Búsquedas de IP real a partir del icono favicon y usando Shodan. Instalación pip3 install -r requirements.txt Clave de API de Shodan no la gratuita Uso CLI Primero define cómo pasas la clave de API: -k o --key para pasar la clave por stdin -kf o --key-file para pasar el nombre del archivo...

MATE

MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...

Callisto

Callisto Una herramienta inteligente y automatizada para el análisis de vulnerabilidades en binarios Demostración: Callisto es una herramienta inteligente y automatizada para el análisis de vulnerabilidades en binarios. Su objetivo es descompilar de forma autónoma un binario proporcionado e itera...

PwnCtfTool

Herramienta para desafíos ret2win. root@kitploit: / \ / / // / / / / / // / | /| / / / / / / / / / / / / / / /| |/ |/ / / / / // // / / / / // / // / / // |/|// ///// // /// Por: DiegoAltF4 y Dbd4 Introducción Se puede usar tanto de forma local como remota indicando IP y puerto. Encuentra...

HikPwn

HikPwn HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8. This project was born out of curiosity while I was capturing and watching network traffic generated by some Hikvision's software and devices. Setup instructions:...

hakoriginfinder

hakoriginfinder रिवर्स प्रॉक्सी के पीछे मूल होस्ट की खोज करने का उपकरण। WAF और अन्य रिवर्स प्रॉक्सी को बायपास करने के लिए उपयोगी। यह कैसे काम करता है? यह उपकरण पहले आपके द्वारा प्रदान किए गए होस्टनाम/URL पर एक HTTP अनुरोध करेगा और प्रतिक्रिया संग्रहीत करेगा, फिर यह आपके द्वारा प्रदान किए गए...

Dorkify

Perform Google Dork search with Dorkify Google Dorking Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

x8

x8 Hidden parameters discovery suite written in Rust. The tool aids in identifying hidden parameters that could potentially be vulnerable or reveal interesting functionality that may be missed by other testers. Its high accuracy is achieved through line-by-line comparison of pages, comparison of...

DomainFrontDiscover

DomainFrontDiscover Scripts and results for finding domain frontable CloudFront domains A walkthrough of what happened here can be found at https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains ConfirmedFrontableDomains.txt A list of 93k+ domains that were...

github-endpoints

github-endpoints Find endpoints on GitHub. Description This Go tool performs searches on GitHub and parses the results to find endpoints of a given domain. Install root@kitploit: go install github.com/gwen001/github-endpoints@latest or root@kitploit: git clone...

pmg

pmg Extract parameters/paths from urls usage : $ cat urls.txt | python3 PmG.py results Save results $ cat urls.txt | python3 PmG.py ResultsFile.txt here you can add more parameters/paths using regex :D root@kitploit: wordlist = r'url=|password=|link=|u=|word=|username=|linkid=', r'+CSCOU+',...

amass

OWASP Amass परियोजना OWASP Amass परियोजना ओपन सोर्स सूचना संग्रहण और सक्रिय टोही तकनीकों का उपयोग करके आक्रमण सतहों का नेटवर्क मैपिंग और बाहरी संपत्ति खोज करती है। स्थापना आप अतिरिक्त स्थापना निर्देश और दस्तावेज़ीकरण Amass Docs रिपॉजिटरी में पा सकते हैं। कॉर्पोरेट समर्थक योगदान ह...

juicy-php

juicy-php Juicy-php - encuentra archivos de información de PHP con información jugosa...

vulnhuntr

Una herramienta para identificar vulnerabilidades explotables de forma remota utilizando LLMs y análisis estático de código. Las primeras vulnerabilidades 0day del mundo descubiertas de forma autónoma por IA Descripción Vulnhuntr aprovecha el poder de los LLMs para crear y analizar automáticament...

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

dnsbrute

dnsbrute Multi-theaded DNS bruteforcing, average speed 80 lookups/second with 40 threads root@kitploit: Usage: dnsbrute.py threads...

crithit

crithit Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall...