gitrob

Gitrob: وضع المصدر المفتوح في OSINT Gitrob هي أداة تساعد في العثور على الملفات الحساسة المحتملة التي تم دفعها إلى المستودعات العامة على Github. سيقوم Gitrob باستنساخ المستودعات التابعة لمستخدم أو منظمة إلى عمق قابل للتكوين ويتنقل عبر تاريخ الالتزامات ويحدد الملفات التي تطابق توقيعات الملفات الحسا...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

CVE-2025-71408

A flaw was found in NLTK Natural Language Toolkit. This eval injection vulnerability in the nltk.collocations module allows a local attacker to execute arbitrary Python code. By manipulating command-line arguments when collocations.py is invoked directly, an attacker can bypass validation and...

Belati

Belati Belati - The Traditional Swiss Army Knife For OSINT Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose. This tools is inspired by Foca and Datasploit for OSINT : Current Version v0.2.4 Belati In Action Why I Made this? Just for...

EGESPLOIT

EGESPLOIT EGESPLOIT is a golang library for malware development, it has few unique functions for meterpreter integration. DOCUMENTATION root@kitploit: CalculateChecksumx : Function calculates x digit 8 bit checksum for reverse HTTP/HTTPS meterpreter connections, returns the calculated checksum as...

portSpider

██████╗ ██████╗ ██████╗ ████████╗███████╗██████╗ ██╗██████╗ ███████╗██████╗ ██╔══██╗██╔═══██╗██╔══██╗╚══██╔══╝██╔════╝██╔══██╗██║██╔══██╗██╔════╝██╔══██╗ ██████╔╝██║ ██║██████╔╝ ██║ ███████╗██████╔╝██║██║ ██║█████╗ ██████╔╝ ██╔═══╝ ██║ ██║██╔══██╗ ██║ ╚════██║██╔═══╝ ██║██║ ██║██╔══╝ ██╔══██╗ ██║...

CVE-2024-36104

CVE-2024-36104 إخلاء مسؤولية هذه الأداة مخصصة فقط للبحث الأمني الشخصي والتعلم. أي عواقب أو خسائر مباشرة أو غير مباشرة تنجم عن نشر أو استخدام هذه الأداة، يتحملها المستخدم وحده، ولا يتحمل مؤلف الأداة أي مسؤولية عن ذلك. version = 18.12.14 NAME: Apache OFBiz - تنفيذ الأوامر USAGE: global options...

HERCULES

هيركليز هيركليز هي أداة توليد حمولات قابلة للتخصيص يمكنها تجاوز برامج مكافحة الفيروسات. root@kitploit: الإصدار 3.0.5...

cdf

CDF – التمييز التفاضلي للتشفير CDF هي أداة لاختبار صحة وأمان البرامج التشفيرية بشكل تلقائي. يمكن لـ CDF اكتشاف أخطاء التنفيذ، وعدم الامتثال للمعايير، وتسريبات القنوات الجانبية، وغير ذلك. يطبق CDF مزيجًا من اختبارات الوحدة مع "التمييز التفاضلي"، وهو نهج يقارن سلوك التطبيقات المختلفة لنفس البدائيات...

cdf

CDF – crypto differential fuzzing CDF is a tool to automatically test the correctness and security of cryptographic software. CDF can detect implementation errors, compliance failures, side-channel leaks, and so on. CDF implements a combination of unit tests with "differential fuzzing", an approa...

certgraveyard_yara v2026.09.02

CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features 🔄 Daily Updates : Automatically checks CertGraveyard for new compromised certificates 📝 YARA Rule Generation : Creates individual YARA rules for each certificate ✅...

kadimus

kadimus LFI Scan & Exploit Tool kadimus is a tool to check for and exploit LFI vulnerabilities, with a focus on PHP systems. Features: Check all url parameters /var/log/auth.log RCE /proc/self/environ RCE php://input RCE data://text RCE expect://cmd RCE Source code disclosure Command shell...

scanless

⚠️ I am no longer maintaining scanless as of August 2023. ⚠️ scanless This is a Python command-line utility and library for using websites that can perform port scans on your behalf. Supported Online Port Scanners ipfingerprints spiderip standingtech viewdns yougetsignal Install Do it up:...

passfault

Welcome to OWASP Passfault Objective: Do Passwords Better! NOTE: This project has been discontinued, but the zxcvbn project has a very similar approach and has been quite successful. We recommend using that library. Running the Command-line Interface: 1. install java 8 jdk 2. cd commandLine 3...

kube-knark

Projet Kube-Knark Tracez votre runtime Kubernetes !! Kube-Knark est un traceur open-source qui utilise les technologies pcap et ebpf pour effectuer un traçage runtime sur un cluster Kubernetes déployé. Il trace l'exécution de l'API Kubernetes et les changements de permissions des fichiers de...

chromebackdoor

VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go root@kitploit: python chromebackdoor.py user: root pass: toor KAL...

Hob0Rules

Hob0Rules Password cracking rules for Hashcat based on statistics and industry patterns. The following blog posts on passwords explain the statistical signifigance of these rulesets: Statistics Will Crack Your Password Praetorian Password Cracking Rules Released Useful wordlists to utilize with...

firehol

FireHOL http://firehol.org/ root@kitploit: FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade...

mitmAP

root@kitploit: | / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | || | || || ||||| || || |/| 2.2 ⚠️ Warning! This project is no longer maintained and may not work as excepted. A python program to create a fake AP and sniff data. new in 2.0: SSLstrip2 for HSTS bypass...

john

John the Ripper This is the community-enhanced, "jumbo" version of John the Ripper. It has a lot of code, documentation, and data contributed by jumbo developers and the user community. It is easy for new code to be added to jumbo, and the quality requirements are low, although lately we've start...