phpMussel

What is phpMussel? An ideal solution for shared hosting environments, where it's often not possible to utilise or install conventional anti-virus protection solutions, phpMussel is a PHP script designed to detect trojans, viruses, malware and other threats within files uploaded to your system...

Loki

I wrote a new Open Source YARA scanner called LOKI RS Rust. LOKI Python is now officially deprecated. Important Note This project is now in inactive maintenance mode. This means that while I merge pull requests for bug fixes and straightforward issues, I currently lack the time to add new feature...

strelka

发布版 | 文档 | 拉取请求 | 问题...

strelka

Releases | Documentation | Pull Requests | Issues !Pull...

xcavator

xcavator Un localizador de datos de red que utiliza credenciales obtenidas durante pruebas de penetración. Xcavator es una herramienta que escanea un rango de direcciones IP en busca de servicios que alojan archivos FTP, FTPS y SMB por el momento y, con las credenciales proporcionadas, intentará...

peach

Peach Fuzz - Vulnerability Scanning Framework This tool aims to look through files in a given directory to detect any unsafe, vulnerable, or dangerous function calls. It is designed to be extensible and easy to understand; you can "plug-and-play" modules that specify criteria on which types of...

indicator-intelligence

Indicator-Intelligence 注意：您必须仅在合法活动中使用它。请参阅；USAGEPOLICY.md LICENSE 描述 在Indicator-Intelligence收集静态文件后，查找相关域名和IPv4地址以进行威胁情报 截图 已完成 收集相关域名和IP。 HTTP - HTTPS 检查。 针对目标Web应用的二级或更深度静态文件扫描。 安装 从源代码安装 在安装前，您可以使用virtualenv管理包依赖。 root@kitploit: git clone...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

log4j-finder

log4j-finder A Python3 script to scan the filesystem to find Log4j2 that is vulnerable to Log4Shell CVE-2021-44228 & CVE-2021-45046 & CVE-2021-45105. It scans recursively both on disk and inside nested Java Archive files JARs. How it works log4j-finder identifies log4j2 libraries on your filesyst...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage root@kitploit: echo "+-------------------For-The-Help-------------------------------------+"; ec...

Fenrir

Fenrir Simple Bash IOC Scanner Fenrir is a simple IOC scanner bash script. It allows scanning Linux/Unix/OSX systems for the following Indicators of Compromise IOCs: Hashes MD5, SHA1 and SHA256 using md5sum, sha1sum, sha -a 256 File Names string - checked for substring of the full path, e.g...

Get-log4j-Windows-local

Get-log4j-Windows-local.ps1 Identifica todos los componentes log4j en un único servidor Windows local. CVE-2021-44228. Una copia de un solo uso; consulta https://github.com/KeysAU/Get-log4j-Windows.ps1 para múltiples equipos. Apache log4j CVE-2021-44228 Ejecución del script: Exportación: Columnas...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identifica todos los componentes log4j en todos los servidores Windows, en todo el dominio; puede ser multidominio. CVE-2021-44228 Se escala a más de 1,000 servidores Windows, 250+ servidores a la vez. 1k servidores tardaron aproximadamente 1 hora y media. Apache log4j...

vt-py-scanner

VirusTotal Scanner Python script to analyze ALL files with the VirusTotal API, scanning folders and subfolders recursively. Optimized for Windows. Features Scans ALL files in a folder and its subfolders Configuration via .env file - Save your API key and settings Interactive mode - Also works...

web-wordlist-generator

WEB-Wordlist-Generator NOTE : You should definitely use it for legal activities. Please See; USAGEPOLICY.md LICENSE Description WEB-Wordlist-Generator scans your web applications and creates related wordlists to take preliminary countermeasures against cyber attacks. ScreenShot Done Scan Static...

ShellSweep

ShellSweep ShellSweeping the evil Why ShellSweep "ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential web shell files in a specified directory. ShellSheep and it's suite of tools calculate the entropy of file contents to estimate the likelihood of a file being a web shell. Hi...

CVE-2021-44228_scanner-main-Modified-

CVE-2021-44228scanner modificado - Obsoleto Script y repositorio originales: https://github.com/CERTCC/CVE-2021-44228scanner Modificado por: Alex Pena Las aplicaciones que son vulnerables al problema log4j CVE-2021-44228 pueden detectarse escaneando archivos jar, war y ear para buscar la presenci...

CVE-2026-50656-rogueplanet-validation

Informe de validación del PoC RoguePlanet para Microsoft Defender Propósito y alcance del informe Este informe trata sobre la validación del PoC RoguePlanet descrito públicamente y relacionado con Microsoft Defender. La técnica descrita se presentó en los medios el 10 de junio de 2026 como una...

Veto

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

YARAify

YARAify YARAify es un motor abierto de escaneo y búsqueda de reglas YARA. Este repositorio proporciona algunos scripts de ejemplo en python3 sobre cómo interactuar con la API de YARAify. Obtener una clave de autenticación Auth-Key Para consultar la API de YARA, necesitas obtener una Auth-Key. Si...