buds-audit

buds-audit Version 1.0.0 Bluetooth-Sicherheitsbewertungstool für drahtlose Ohrhörer, die von der Airoha-SDK-Schwachstellenkette CVE-2025-20700 / CVE-2025-20701 / CVE-2025-20702 betroffen sind. Es scannt nach Geräten in der Nähe, erstellt Fingerabdrücke von bekannten betroffenen Airoha-basierten...

bug-hunter

BugHunter KI-gestützte Bug-Bounty-Jagd — vom Recon zum Bericht, in deinem Terminal. Kostenlose Einrichtung · Schnellstart · Befehle · Was es findet · Installation · FAQ !BUGHUNTER —...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

ctftools

Database di strumenti CTF Twitter: @hydr0nium Dipendenze: sudo apt install python2 Installazione: git clone https://github.com/white-hood/ctftools.git cp .ctftools cd /bin ln -s ctftools /path/to/ctftools.py Utilizzo: ./ctftools | uso normale ./ctftools --remove | rimuovi strumento dal database...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

urlhunter

root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named...

ma2tl

ma2tl macapt to timeline This is a DFIR tool for generating a macOS forensic timeline from the analysis result DBs of macapt. Requirements Python 3.7.0 or later pytz tzlocal xlsxwriter Installation root@kitploit: % git clone https://github.com/mnrkbys/ma2tl.git Usage root@kitploit: % python...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

vulnknox

VulnKnoX VulnKnox is a powerful command-line tool written in Go that interfaces with the KNOXSS API. It automates the process of testing URLs for Cross-Site Scripting XSS vulnerabilities using the advanced capabilities of the KNOXSS engine. Features Supports pipe input for passing file lists and...

opencti v7.260824.0

Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. The structuration of th...

Apache-Druid-CVE-2021-25646-Exploit

Exploit RCE di Apache Druid CVE-2021-25646 Exploit in Python per l'esecuzione remota di codice in Apache Druid tramite iniezione di codice JavaScript CVE-2021-25646. Descrizione Questo script sfrutta una vulnerabilità RCE in Apache Druid versioni 0.20.1 che consente l'esecuzione arbitraria di...

CVE-2026-78430

A vulnerability was detected in sworddut mcp-ffmpeg-helper 0.1.0/0.1.1/0.2.1. This affects the function handleToolCall of the file src/tools/handlers.ts of the component Tool Handler. The manipulation of the argument format results in os command injection. Attacking locally is a requirement. The...

oracle-xxe-sqli

oracle-xxe-sqli Sfruttamento automatizzato di Oracle CVE-2014-6577 tramite SQLi Utilizzo: root@kitploit: oracle-xxe-sqli.py -h -i IP -p PORT --disable-server --custom-headers CUSTOMHEADERS -f PAYLOADFILE url Opzioni argomenti posizionabili: url URL da iniettare. Usa come marcatore di iniezione, u...

CVE-2018-5767-AC9

Ricerca e Autore David Baker Articolo: A volte gli exploit hanno bisogno di patch! Lavorare attraverso un cambio di indirizzo Link esterno CVE-2018-5767-AC9 Un'implementazione di una proof-of-concept per CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 root@kitploit: The following is an...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

CVE-2026-35585-poc

CVE-2026-35585: File Browser OS-Befehlseinschleusung PoC English version Zusammenfassung Dieses Repository enthält einen Proof of Concept PoC für die kritische OS-Befehlseinschleusungs-Schwachstelle CVE-2026-35585 , die in File Browser Version 2.0.0 bis 2.33.1 entdeckt wurde. Die Schwachstelle...

barrido

barrido Konsolen-Dienstprogramm zum Auffinden von Webanwendungspfaden. Noch in der Alpha-Version. Beispiele Brute-Force mit mehreren URLs: root@kitploit: $ cat urls.txt https://target.a.com https://target.b.com https://target.c.com $ barrido urls.txt wordlists/quickhits.txt -se | tee...

cve-2025-11953-vulnerability-demo

React Native CLI Command Injection Demo CVE-2025-11953 ⚠️ SCHWACHSTELLENDEMONSTRATION ⚠️ JFSA-2025-001495618 - Kritische Befehlseinschleusung in der React Native CLI CVE : CVE-2025-11953 CVSS-Score : 9.8 Kritisch Betroffenes Paket : @react-native-community/cli-server-api Verwundbare Versionen :...