thedorkbox

thedorkbox TheDorkbox 全面的 Google Dorks & OSINT 技术集合，用于查找机密数据 欢迎使用 thedorkbox 👋 这是一个 OSINT 工具，包含嵌入到 HTML 模板中的各种 Google dorks，以便非技术用户了解 OSINT 技术的重要性，以及信息如何对有组织犯罪和网络犯罪调查有用。 ✨ 使用方法 root@kitploit: python3 -m http.server 8000 & open your browser and point it to http://localhost:8000 作者 👤 G4g5j41n...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

CVE-2025-6558-exp

CVE-2025-6558 - Google Chrome ANGLE/GPU 沙箱逃逸 字段| 详细信息 ---|--- CVE ID| CVE-2025-6558 漏洞类型| 沙箱逃逸 受影响应用| Google Chrome（ANGLE 和 GPU 组件） 严重性| 严重 – 可导致远程任意代码执行并访问敏感资源 受影响版本| Google Chrome 版本 138.0.7204.157 利用前提| 用户访问含恶意 WebGL/HTML 内容的网页 POC 可用性| 已确认 描述 CVE-2025-6558 是 Google Chrome 的 ANGLE （几乎原生图形层引擎）和...

Cisa-KEV-Threat-Intel-Orchestrator

CISA KEV Threat Intel Orchestrator Zero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities KEV catalog into production-ready Sigma detection rules, automatically, every week. The problem Manually turning a new KEV entry into a usable detection is slow:...

BigBountyRecon

BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It...

Mr.Holmes

🔍 Mr.Holmes Mr.Holmes is a information gathering tool OSINT. The main purpose is to gain information about domains,username and phone numbers with the help of public source avaiable on the internet also it use the google dorks attack for specific researchers. It also use proxies for make your...

CVE-2019-0808

CVE-2019-5786 与 CVE-2019-0808 Chrome 72.0.3626.119 稳定版 Windows 7 x86 漏洞利用链。 该漏洞利用通过站点隔离对 CVE-2019-5786 进行暴力破解。host1wrapper/iframe.html 是包装脚本，它会将漏洞利用代码反复加载到 iframe 中。实际利用链位于 host2singlerun 目录中。针对 CVE-2019-0808 的沙箱逃逸漏洞位于文件 host2singlerun/shellcode.js 中，该文件通过 sRDIhttps://github.com/monoxgas/sRDI 和...

gvision

GVision 是一款反向图片搜索应用，利用 Google Cloud Vision API 从图像中检测地标和网络实体，帮助您快速轻松地获取有价值的信息。 https://user-images.githubusercontent.com/37483725/228700363-cc0d8131-4134-4f37-918e-1a342dd22b83.mp4 🤖 关于 Google Cloud Vision API Google Cloud Vision API 是一种基于机器学习的图像分析服务，为开发者提供理解图像内容的工具。它可以检测图像中的对象、人脸、文字、徽标等。 🚀 开始使用...

cangibrina

/ | | | | / | ' \ / | | ' | '| | ' \ / | | || | | | | | | | | | | | | | | | | | | , || | |, | |./|| | || | |, | |/ Beta - v0.8.7 Dashboard Finder 仪表盘查找器 English Português English Dashboard Finder 仪表盘查找器 Cangibrina 是一个多平台工具，通过暴力破解方式（基于词表、Google、Nmap 和 robots.txt）来获取站点的管理后台面板。 要求： Python 2.7...

cangibrina

root@kitploit: / | | | | / | ' \ / | | ' | '| | ' \ / | | || | | | | | | | | | | | | | | | | | | \,|| ||, ||./|| ||| ||,| |/ Beta - v0.8.7 Dashboard Finder English Português English Dashboard Finder Cangibrina is a multi platform tool which aims to obtain the admin Dashboard of sites using...

RastLeak

RastLeak Tool to automatic leak information using Hacking with engine searches Google and Bing. How to install root@kitploit: git clone https://github.com/n4xh4ck5/RastLeak.git Install dependencies with pip: root@kitploit: pip install -r requirements.txt To install wget: root@kitploit: sudo pip...

TinyInst

TinyInst Copyright 2020 Google LLC Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at root@kitploit: https://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or...

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

domhttpx

domhttpx 是一个使用 Python 构建的 谷歌搜索引擎搜索器 及 HTTP 工具包，可以让你快速同时查找大量 URL/IP。 目录 安装 使用 参数 基本用法 单个关键词 多个关键词 提取页面标题 从真实路径提取页面标题 提取状态码 从真实路径提取状态码 提取 Web 服务器 运行示例 帮助与错误报告 致谢 安装 适用于 Windows、Linux 和 Mac root@kitploit: git clone https://github.com/naufalardhani/domhttpx.git cd domhttpx pip3 install -r...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🤝 展示您的支持 - 如果您喜欢本内容，请给一个 ⭐️ | 在 Twitter 上分享 | 关注我 CVE-2022-0337 Google Chrome、Microsoft Edge 和 Opera 系统环境变量泄露漏洞 📝 描述 成功利用此漏洞可导致用户存储在系统环境变量中的秘密泄露。Chromium 92 版本中存在一个安全漏洞，并在 97 版本中修复。有多个基于 Chromium 引擎的网页浏览器，例如 Google Chrome、Microsoft Edge、Opera 和 Brave。除了 Brave 外，它们都存在漏洞。该漏洞存在于文件系统访问 API 中，更具体地说是...

MasterHttpRelayVPN-RUST

mhrv-rs — bypass censorship for free, with your own Google account A small program that runs on your computer and lets you visit blocked websites for free, using a Google Apps Script you deploy in your own free Google account. Your ISP only sees encrypted traffic to — it can't tell what you're...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

CVE-2023-32117

CVE-2023-32117 Integrate Google Drive ","username":"admin","name":"admin","email":"[email protected]","role":"Administrator","folders":,"id":2,"avatar":"img alt='' src="http:///%5C/%5C/2.gravatar.com%5C/avatar%5C/b58996c504c5638798eb6b511e6f49af?s=32&d=mm&r=g"...