singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

rbndr

rbndr Simple DNS Rebinding Service rbndr is a very simple, non-conforming, name server for testing software against DNS rebinding vulnerabilities. The server responds to queries by randomly selecting one of the addresses specified in the hostname and returning it as the answer with a very low ttl...

tilt

Tilt: Terminal Ip Lookup Tool Автоматический инструмент поиска IP и обратного зондирования для пассивной разведки root@kitploit: ████████╗██╗██╗ ████████╗ ╚══██╔══╝██║██║ ╚══██╔══╝ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ██║ ██║███████╗██║ ╚═╝ ╚═╝╚══════╝╚═╝ Описание Tilt: инструмент поиска IP в терминале ...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

NetSpecter

NetSpecter NetSpecter 는 Python으로 구축된 가볍지만 강력한 비동기 OSINT 및 정찰 엔진입니다. 다중 소스 정보 수집DNS, WHOIS, Web, TLS, HTTP, Geo, Reverse DNS과 Shodan 기반 보안 인텔리전스 및 전체 원시 데이터 액세스를 결합하여 완전한 대상 프로필 및 위험 평가를 제공합니다. 면책 조항 NetSpecter는 교육용 및 승인된 보안 연구 용도로만 개발되었습니다. 이 도구는 정찰 작업을 수행하고 여러 소스에서 공개적으로 접근 가능한 정보를 수집합니다...

aquatone

AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...

CVE-2026-50980

CVE-2026-50980 : Cross-Site Scripting XSS via DNS et Détournement de Session dans oPanel Présentation Identifiant CVE : CVE-2026-50980 Produit : oPanel Versions concernées : v1.20.25 Type de vulnérabilité : Cross-Site Scripting XSS stocké via DNS / Détournement de session Sévérité : Élevée...

dnsx-action

dnsx Action упрощает оркестрацию dnsx с помощью GitHub Action. Пример использования GitHub Action, запускающийdnsx на списке хостов root@kitploit: - name: 💥 dnsx - DNS Resolver uses: projectdiscovery/dnsx-action@main with: list: hosts.txt GitHub Action, запускающийdnsx с пользовательскими...

DNSrecon-gui

私のウェブサイト: https://microjoan.com 私のブログ: https://darkhacking.es/ コーヒーをご馳走してください: https://www.buymeacoffee.com/microjoan 免責事項 このツールキットには、ソーシャルメディアに対して潜在的に損害を与える、または危険をもたらす可能性のある素材が含まれています。アクセス、使用、またはその他の方法で誤って利用する前に、あなたの州/国の法律を参照してください。...

CVE-2022-4096

CVE 2022 -4096 Amine TITROFINE | 21 janvier 2023 Cette expérience est destinée à démontrer comment l'attaque de rebinding DNS fonctionne sur un IoT émulé. Dans la configuration, nous avons un dispositif IoT simulé, qui peut être contrôlé via une interface web c'est typique pour de nombreux...

53R3N17Y

53R3N17Y Script basé sur Python pour la collecte d'informations. Pour obtenir les détails, hackertarget.com est utilisé. Il y a une limite de 100 appels API par jour depuis une seule adresse IP. Mise à jour root@kitploit: ----- | | |--o--| ╒ 53R3N17Y ════════════════════════════════════╕ --------...

DNS-Tunnel-Keylogger

Keylogger par Tunnel DNS Ce keylogger post-exploitation exfiltre furtivement les frappes clavier vers un serveur. Ces outils excellent dans l'exfiltration légère et la persistance, des propriétés qui empêchent la détection. Ils utilisent le tunneling DNS pour contourner les pare-feux et éviter la...

egression

Description EGRESSION est un outil qui fournit une vue instantanée de la facilité avec laquelle il est possible de télécharger des données sensibles depuis n'importe quel réseau. Il commence avec un fichier sensible contenant ces données, stocké localement en texte clair. Ce fichier est utilisé...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

Raccoon

Raccoon Outil de sécurité offensive pour la reconnaissance et la collecte d'informations Fonctionnalités Détails DNS Cartographie DNS visuelle à l'aide de DNS dumpster Informations WHOIS Données TLS - chiffrements pris en charge, versions TLS, détails du certificat et SAN Scan de ports Scan de...

Egress-Assess

Egress-Assess Egress-Assess est un outil utilisé pour tester les capacités de détection des données sortantes. Configuration Pour configurer, exécutez le script d'installation inclus ou effectuez les opérations suivantes : 1. Installer pyftpdlib 2. Générer un certificat serveur et le stocker sous...

WiFi-Pumpkin-deprecated

이 저장소는 ⛔️ 더 이상 사용되지 않습니다, wifipumpkin3이 출시되었습니다, 확인하세요! WiFi-Pumpkin - 불량 Wi-Fi 액세스 포인트 공격 프레임워크 설명 WiFi-Pumpkin은 가짜 네트워크를 쉽게 생성하는 불량 AP 프레임워크로, 의심하지 않는 대상으로부터 합법적인 트래픽을 전달하면서 동시에 다양한 기능을 제공합니다. 기능에는 불량 Wi-Fi 액세스 포인트, 클라이언트 AP에 대한 디어트 공격, 프로브 요청 및 자격 증명 모니터, 투명 프록시, Windows 업데이트 공격, 피싱 관리자, ARP...

ct-exposer

Discover sub-domains by searching through Certificate Transparency logs What is CT? Certificate Transparency CT is an experimental IETF standard. The goal of it was to allow the public to audit which certificates were created by Certificate Authorities CA. TLS has a weakness that comes from the...

typofinder

Domain typo finder Typofinder для поиска опечаток в доменах Выпущен как open source компанией NCC Group Plc - http://www.nccgroup.com/ Разработано: Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com Stephen Tomkinson, @neonbunny9 в twitter Matt Summers, matt dot summers at nccgroup dot co...

CVE-2026-56708

Grav API plugin before 1.0.16 contains a server-side request forgery vulnerability in webhook delivery that allows attackers to bypass hostname validation by DNS rebinding. Attackers controlling authoritative DNS for a configured webhook hostname can answer validation lookups with public addresse...