gaia

Gaia - Attack Surface Discovery & AI-Assisted Triage Gaia is a CLI-first attack surface analysis tool that discovers endpoints and parameters, reduces noise, and highlights security-relevant risks using static heuristics and optional AI reasoning. It orchestrates Katana, gau, arjun, linkfinder, a...

NTLMRecon

NTLMRecon An NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains. NTLMRecon is built with flexibilty in mind. Need to run recon on a single URL, an IP address, an entire CID...

noir

Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies, and the source...

aimap

AIMap Internet-scale discovery and security testing platform for exposed AI agent infrastructure. AIMap finds, fingerprints, and security-tests publicly exposed AI endpoints — MCP servers, Ollama instances, vLLM/LiteLLM proxies, LangServe chains, Gradio apps, ComfyUI nodes, and more. Think Shodan...

TheTimeMachine

🚀 TheTimeMachine v3.0 - Weaponizing Wayback for Recon, BugBounties, OSINT & More! You’ve heard of time travel in movies and comics, right? Well, this isn’t fiction anymore 😎. TheTimeMachine lets you dig through the past of any web app by scraping archived URLs from the Wayback Machine — and helps...

xnLinkFinder

About - v8.2 This is a tool used to discover endpoints, discover potential parameters, generate a target specific wordlist and find secrets for a given target. It can find them by: crawling a target pass a domain/URL crawling multiple targets pass a file of domains/URLs searching files in a given...

API-SPY-API-PROBE

API-SPY 🕵️👻 A powerful directory brute-force tool designed for API reconnaissance and penetration testing. Automatically discovers hidden API endpoints, performs recursive subscanning, and probes HTTP methods for deeper API enumeration. Features ✨ Core Capabilities: 🎯 Fast endpoint discovery using...

cariddi

도메인 목록을 가져와서 URL을 크롤링하고 엔드포인트, 비밀, API 키, 파일 확장자, 토큰 등을 스캔합니다 edoardottt가 💙로 제작했습니다 트위터에 공유하기! 설치 • 사용법 • 시작하기 • 변경 사항 • 기여하기 • 라이선스 설치 📡 Homebrew root@kitploit: brew install cariddi Snap root@kitploit: sudo snap install cariddi Golang root@kitploit: go install -v...

subjs

subjs subjs는 URL 목록이나 서브도메인에서 자바스크립트 파일을 가져옵니다. 자바스크립트 파일을 분석하면 문서화되지 않은 엔드포인트, 비밀 정보 등을 발견하는 데 도움이 될 수 있습니다. 이 도구를 gau 및 LinkFinder와 함께 사용하는 것이 좋습니다. 자료 사용법 설치 사용법: 예시: root@kitploit: $ cat urls.txt | subjs $ subjs -i urls.txt $ cat hosts.txt | gau | subjs 도움말을 보려면 -h 플래그를 사용하세요: root@kitploit: ...

Diggy

Diggy Diggy can extract endpoints/URLs from apk files. It saves the result into a txt file for further processing. Dependencies apktool Usage root@kitploit: ./diggy.sh /path/to/apk/file.apk You can also install it for easier access by running install.sh After that, you will be able to run Diggy a...

GraphCrawler

GraphCrawler THE GraphQL automated testing tookit Graph Crawler is the most powerful automated testing toolkit for any GraphQL endpoint. Version 1.2 is out!! NEW: Can search for endpoints for you using Escape Technology's powerful Graphinder tool. Just point it towards a domain and add the '-e'...

NTLMRecon

Overview NTLMRecon is a Golang version of the original NTLMRecon utility written by Sachin Kamath AKA pwnfoo. NTLMRecon can be leveraged to perform brute forcing against a targeted webserver to identify common application endpoints supporting NTLM authentication. This includes endpoints such as t...

JSScanner

JSScanner You can find the article related to this script here https://securityjunky.com/scanning-js-files-for-endpoint-and-secrets/ To install the required tools use root@kitploit: bash install.sh Change the alive.txt with the domains you need to test. These should be in below format...

wpjuicer

wpjuicer WP Juicer Tool for quick scanning of confidential information on WordPress endpoints. This script is exclusively for Wordpress and facilitates the localization of sensitive information in framework endpoints, aiding in recognition and data extraction by providing detailed results. The ma...

warf

WARF: Web Application Reconnaissance Framework Try WARF root@kitploit: Username: demo Password: demopass ⚠️ Since Heroku apps run in a lightweight container called dynos, so any changes to the filesystem while the dyno is running only last until that dyno is shut down or restarted. This operation...

SourceWolf

SourceWolf ​ 테스트 환경: Windows, MAC, Linux 및 Linux용 Windows 하위 시스템WSL 스폰서 이 프로젝트를 후원해 주세요. 다음은 훌륭한 스폰서입니다: Oxylabs는 195개국 1억 개 이상의 IP를 보유한 프리미엄 프록시와 즉시 사용 가능한 Scraper API를 제공합니다. 독점 프로모션 코드 boost35 를 사용하여 Residential, Mobile 프록시, Web Unblocker 및 Scraper API를 35% 할인받으세요. 목차 기능 설치 사용법 워크플로우에 어떻게 통합할 ...

LinkFinder

About LinkFinder LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. This way penetration testers and bug hunters are able to gather new, hidden endpoints on the websites they are testing. Resulting in new testing ground, possibility containing ne...

STEWS

STEWS: Security Testing and Enumeration of WebSockets STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover : find WebSockets endpoints on the web by testing a list of domains...

JSpector

JSpector JSpector is a Burp Suite extension that passively crawls JavaScript files and automatically creates issues with URLs, endpoints and dangerous methods found on the JS files. Prerequisites Before installing JSpector, you need to have Jython installed on Burp Suite. Installation 1. Download...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...