spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

LadonGo

Ladon Scanner For Golang Wiki http://k8gege.org/Ladon/LadonGo.html 简介 LadonGo 是一款开源的内网渗透扫描器框架，可用于轻松探测 C 段、B 段、A 段的存活主机、指纹识别、端口扫描、密码爆破、远程执行、高危漏洞检测等。4.0 版本包含 37 个功能，高危漏洞检测 MS17010、SmbGhost，远程执行 SshCmd、WinrmCmd、PhpShell、JspShell、GoWebShell，12 种协议密码爆破...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

ShodanHat

依赖 你需要使用 pip install shodan 或 easyinstall shodan 安装 shodan。 你需要使用 pip install python-nmap 安装 python-nmap。 你需要在 'constantes.py' 文件中设置你的 API 密钥。 选项 -h, --help 显示此帮助信息并退出 -i IP, --ip=IP 获取单个主机的信息 -l LIST, --list=LIST 获取主机列表的信息 -s SQ, --sq=SQ 搜索查询字符串 --nmap 对主机执行 nmap 扫描 --setkey=SETKEY 自动设置你的 API 密钥...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

TPMGenie

TPM Genie TPM Genie está diseñado para ayudar en la investigación de vulnerabilidades de los Módulos de Plataforma Confiable TPM. Como un interpositor de bus serie, TPM Genie es capaz de interceptar y modificar todo el tráfico que se envía a través del canal I2C entre la máquina anfitriona y un...

LiveTargetsFinder

LiveTargetsFinder 生成用于目标定位的活跃主机和URL列表，自动化使用Massdns、Masscan和nmap来过滤掉不可达的主机 给定一个域名输入文件，此脚本将自动化使用MassDNS过滤掉无法解析的主机，然后将结果传递给Masscan以确认主机是否可达以及在哪些端口上可达。脚本随后将生成完整的URL列表，用于进一步的目标定位（传递给gobuster或dirsearch等工具，或发起HTTP请求），同时生成可达域名列表和可达IP地址列表。作为可选的最后一步，你可以在缩减后的主机列表上运行nmap版本扫描，验证之前可达的主机是否在线，并从其开放端口收集服务信息。 概览...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

CVE-2026-56709

Grav before 3.9.2 is vulnerable to a Host header injection in the sendInvitationEmail() function. When constructing token-bearing invitation links, the unvalidated Host header allows an attacker to poison the link and redirect users to an attacker-controlled domain . This bypasses the require_tru...

EUVD-2026-65207

Grav before 3.9.2 fails to validate untrusted Host headers in the sendInvitationEmail function when constructing token-bearing invitation links. Attackers can manipulate the Host header to poison invitation links and redirect users to attacker-controlled domains, bypassing the requiretrustedhost...

vulners-scanner

vulners-scanner 描述 基于主机的漏洞扫描器的PoC，使用vulners.com API。检测操作系统，收集已安装的包并检查其中的漏洞。 支持的操作系统 目前支持收集这些操作系统的包： 基于Debian（debian, kali, ubuntu） 基于Rhel（redhat, centos, fedora） Python版本 Lazy和Advanced版本已在python2.6、python2.7、python3.5上测试。如果发现任何错误，请随时打开issue Docker支持...

wp-allowed-hosts

WP Allowed Hosts 该插件是在已知漏洞CVE-2017-8295被披露后创建的，该插件将保护您免受该攻击，无需麻烦，只需在您的wp-config.php中添加简单的一行即可。 安装 只需从此处下载插件并上传到您的网站。 使用方法 只需将以下行添加到您的wp-config.php中 root@kitploit: // WP Allowed Hosts Plugin define 'WPALLOWEDHOSTS', 'mysit.com' ; 您也可以添加多个域名。 root@kitploit: // WP Allowed Hosts Plugin define...

antipwny

antipwny 作者：Rohan Vazarkar, David Bitner 一个基于主机的入侵检测/入侵防御系统（IDS/IPS），使用 C 编写，专门针对 Metasploit Payloads。 说明 AntiPwny 需要 .NET Framework 4.5，可从此处获取。 离线安装程序可在此处下载。 预编译的二进制文件位于根目录的 exe 文件夹中。请确保使用正确的平台，否则会出错！AntiPwny 运行需要包含的 DLL 文件。 AntiPwny 使用 Visual Studio 2012 Professional 编译。如需自行编译，请检出源代码并针对目标平台进行编译...

lorsrf

LORSRF - 2.1 Lorsrf es una potente herramienta de pruebas de penetración web diseñada para identificar parámetros que pueden ser explotados para ataques SSRF o de carga de recursos fuera de banda. Al añadir un host OAST como Burp Collaborator al valor del parámetro, Lorsrf puede generar una...

VHostScan

VHostScan 一个虚拟主机扫描器，可与 pivot 工具配合使用，可检测 catch-all 场景、别名和动态默认页面。首次在 2017 年 9 月的 SecTalks BNE 上展示（PPT）。 这是Codingo 原始 VHostScan 的增强版本，包含额外改进、现代化代码库以及更丰富的词表，以实现更好的虚拟主机发现。 此增强版本的新特性 现代化代码库 ：升级至 Python 3.8+，加入类型提示和现代实践 增强的词表 ：针对云、渗透测试和现代基础设施的新专用词表 改进的错误处理 ：更佳的错误处理和更稳健的扫描 性能优化 ：扫描更快捷，效率更高 扩展文档...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

CVE-2026-77310

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...