the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

dorkscout

dorkscout dokrscout è uno strumento per automatizzare la ricerca di applicazioni vulnerabili o file segreti su internet attraverso ricerche Google. dorkscout inizia recuperando le liste di dork da https://www.exploit-db.com/google-hacking-database e poi esegue la scansione di un target specifico ...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install root@kitploit: GO111MODULE=on go install...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

aes-finder

AES Finder Utility to find AES keys in running process memory. Works for 128, 192 and 256-bit keys. Usage Open aes-finder.sln solution in Visual Studio 2013 to compile source. Alternatively use gcc/clang: root@kitploit: g++ -O3 -march=native -fomit-frame-pointer aes-finder.cpp -o aes-finder To...

CVE-2022-0759

creationtimestamp| type| source ---|---|--- 2026-08-29 18:00:04+00:00| seen| https://t.me/Kubesploit/232 2026-08-30 00:00:54+00:00| seen| https://t.me/Kubesploit/232...

Aurora-Incident-Response

Aurora Incident Response Documentazione per la gestione degli incidenti resa facile. Sviluppata da Incident Responder per Incident Responder. Aurora porta il "Foglio di calcolo del destino" utilizzato nel corso SANS FOR508 al livello successivo. Dopo aver gestito molti casi e insegnato a così tan...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

noseyparker

Nosey Parker is now Replaced by Titus. Nosey Parker is Officially Retired See our announcement post https://www.praetorian.com/blog/titus-open-source-secret-scanner/. The Titus Repo can be found at https://github.com/praetorian-inc/titus Overview Nosey Parker is a CLI tool that finds secrets and...

multiplier

Multiplier findet mehr Fehler schneller Multiplier bietet präzise und umfassende Möglichkeiten zum Verständnis von Code. Dies geschieht, indem Build-Artefakte in einer Datenbank gespeichert und anschließend über eine C++- oder Python-API dauerhaft zugänglich gemacht werden. Multiplier legt...

litefuzz

litefuzz Un fuzzer multi-piattaforma per sondare binari userland, client e server. Ha trovato bug in 50+ app e librerie di grandi aziende e open source. Configurazione semplice per iniziare il fuzzing su Linux, Mac e Windows. litefuzz intro why how it works what it does what it doesn't do support...

lava

LAVA: Großflächige automatisierte Hinzufügung von Schwachstellen Die Bewertung und Verbesserung von Fehlerfindungswerkzeugen ist derzeit schwierig aufgrund eines Mangels an Ground-Truth-Korpora d.h. Software mit bekannten Fehlern und auslösenden Eingaben. LAVA versucht, dieses Problem zu lösen,...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

CVE-2026-70419

creationtimestamp| type| source ---|---|--- 2026-08-26 20:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtz4pern6f22 2026-08-26 20:07:43+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtz54ufstr25 2026-08-27 02:21:53+00:00| seen|...

xnLinkFinder

Über - v8.2 Dieses Tool wird verwendet, um Endpunkte zu entdecken, potenzielle Parameter zu entdecken, eine zielspezifische Wortliste zu generieren und Geheimnisse für ein bestimmtes Ziel zu finden. Es kann sie finden durch: Crawlen eines Ziels eine Domain/URL übergeben Crawlen mehrerer Ziele ein...

CVE-2026-57171

creationtimestamp| type| source ---|---|--- 2026-08-26 00:34:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ar4qbv6h6ay2d...

PT-2026-82136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the ovpn component when removing a missing key. The function ovpn crypto kill key assumes that both crypto slots are populated and dereferences them before...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

llm-council-vapt

LLM Council — Validazione delle evidenze VAPT Una pipeline di peer-review cieca che convalida un'evidenza di penetration test prima che arrivi al cliente. Lenti esperte indipendenti valutano l'evidenza, si sottopongono a revisione cieca l'una con l'altra, e un Presidente sintetizza un verdetto...