robusto

RobuSTO 💥 Robust-Subdomain-Takeover 💥 Obtenha uma lista de domínios e procure por tomadas de controle de subdomínios. Como é diferente de outras ferramentas? Esta ferramenta foi construída em torno da ideia de automatizar o processo e permitir que as blue-teams a usem para escanear seus próprios...

slurp-1

slurp Enumerador de buckets S3 blackbox/whitebox Visão Geral Créditos a todos os pacotes de fornecedores que tornaram esta ferramenta possível. Esta é uma ferramenta de segurança; é destinada a pentesters e profissionais de segurança para realizar auditorias de buckets S3. Recursos Escanear via...

RepoReaper

RepoReaper Überblick RepoReaper ist ein Präzisionswerkzeug, das entwickelt wurde, um die Identifizierung exponierter .git-Repositorys über eine Liste von Domains und Subdomains zu automatisieren. Durch die Verarbeitung einer vom Benutzer bereitgestellten Textdatei mit Domainnamen überprüft...

cve-2024-24919

रीकॉन टूल स्थापना 1. git clone https://github.com/satchhacker/cve-2024-24919.git 2. cd cve-2024-24919 3. chmod +x cve-2024-24919.sh 4. ln -s $pwd/cve-2024-24919.sh /usr/bin/cve-2024-24919.sh टूल का उपयोग करने के लिए, बस चलाएँ: root@kitploit: cve-2024-24919 उपयोग यह टूल आपके द्वारा प्रदान की गई...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

valhalla

valhalla Valhalla encontra dispositivos vulneráveis no Shodan, também pode escanear uma lista de domínios para encontrar vulnerabilidades. INSTALAÇÃO git clone https://github.com/gotr00t0day/valhalla.git cd valhalla pip3 install -r requirements.txt chmod +x install.sh ./install.sh USO...

antisquat

AntiSquat O AntiSquat utiliza técnicas de IA como processamento de linguagem natural PLN, modelos de linguagem grandes ChatGPT e muito mais para potencializar a detecção de domínios de typosquatting e phishing. Como usar Clone o projeto via git clone https://github.com/redhuntlabs/antisquat...

loboguara

Lobo Guará - Plataforma de Inteligência sobre Ameaças Cibernéticas Lobo Guará é uma plataforma voltada para profissionais de segurança cibernética, com diversos recursos focados em Inteligência sobre Ameaças Cibernéticas CTI. Ela oferece ferramentas que facilitam a identificação de ameaças,...

sqlmc

SQLMC - SQL Injection Massive Checker Demo Information This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program. Overview SQLMC SQL...

sqlmc

SQLMC - SQL Injection Massive Checker عرض توضيحي معلومات هذه الأداة لأغراض تعليمية فقط، استخدام SQLMC لمهاجمة أهداف دون موافقة متبادلة مسبقة هو غير قانوني. المطورون لا يتحملون أي مسؤولية ولا يكونون مسؤولين عن أي إساءة استخدام أو ضرر يسببه هذا البرنامج. نظرة عامة SQLMC SQL Injection Massive Checke...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j RCE Scanner Using this tool, you can scan for remote...

inDrive: the domain is truck-admin.eu-east-1.indriverapp.com and Enter the management system of the blasting mobile phone verification code

Vulnerability description not provided...

WAES - Auto Enums Websites And Dumps Files As Result

Doing HTB or other CTFs enumeration against targets with HTTPS can become trivial. It can get tiresome to always run the same script/tests on every box eg. nmap, nikto, dirb and so on. A one-click on target with automatic reports coming solves the issue. Furthermore, with a script the enum proces...

SQLiv - Massive SQL Injection Vulnerability Scanner

Massive SQL injection vulnerability scanner. Features 1. multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo 2. targetted scanning by providing specific domain with crawling 3. reverse domain scanning both SQLi scanning and domain info checking are done in multiprocessing s...

Advanced Discovery of Privileged Accounts: ACLight

ACLight is a tool for discovering privileged accounts through advanced ACLs Access Lists analysis. It includes the discovery of Shadow Admins in the scanned network. The tool queries the Active Directory AD for its objects’ ACLs and then filters and analyzes the sensitive permissions of each one...

Network Scanner 4.0.0 - SEH Local Buffer Overflow

Author: k0Sh1 Vulnerability reproduction Network Scanner is a scan tool, which has a directed domain scanning function, but this function for loading the string is not strict control, such as Textbox length, or the length of the checksum result if you do not enter the domain name, but change the...

HTTPS best practices: pshtt

HTTPS best practices “pshtt” is the sound you make when you feel mildly astonished. pshtt “pushed” is a tool to scan domains for HTTPS best practices. It saves its results to a CSV or JSON. pshtt was developed to push organizations— especially large ones like the US Federal Government — to adopt...

D-TECT - Pentesting the Modern Web

D-TECT is an All-In-One Tool for Penetration Testing. This is specially programmed for Penetration Testers and Security Researchers to make their job easier, instead of launching different tools for performing different task. D-TECT provides multiple features and detection features which gather...

[SpiderFoot v2.1.0] The Open Source Footprinting tool

SpiderFoot is a free, open-source footprinting tool, enabling you to perform various scans against a given domain name in order to obtain information such as sub-domains, e-mail addresses, owned netblocks, web server versions and so on. The main objective of SpiderFoot is to automate the...