pDNS2

pDNS2 pDNS2 project pDNS2 is yet another implementation of a passive DNS tool working with Redis as the database. pDNS2 means ‘passive DNS version2’ and favors speed in query over other database features. pDNS2 is based on Florian Weimer’s original dnslogger with improved features for speed and...

N1QLMap

Description N1QLMap is an N1QL exploitation tool. Currently works with Couchbase database. The tool supports data extraction and performing SSRF attacks via CURL. More information can be found here: https://labs.f-secure.com/blog/n1ql-injection-kind-of-sql-injection-in-a-nosql-database. Usage Hel...

wordpot

Wordpot Wordpot es un honeypot de Wordpress que detecta sondeos de plugins, temas, timthumb y otros archivos comunes utilizados para el fingerprinting de una instalación de Wordpress. root@kitploit: $ python wordpot.py --help Usage: wordpot.py options Options: -h, --help show this help message an...

CVE-2017-9506

Proof of Concept SSRF & XSS root@kitploit: https://jira.you.com//plugins/servlet/oauth/users/icon-uri?consumerUri=http://www.google.co.uk CVE-2017-9506 The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remo...

auth

Auth - Autenticación y gestión de usuarios de Supabase Auth es un servidor de autenticación y gestión de usuarios escrito en Go que impulsa las funciones de Supabase, como: Emisión de JWTs Seguridad a nivel de fila con PostgREST Gestión de usuarios Inicio de sesión con correo electrónico,...

indicator-intelligence

Indicator-Intelligence 注意：您必须仅在合法活动中使用它。请参阅；USAGEPOLICY.md LICENSE 描述 在Indicator-Intelligence收集静态文件后，查找相关域名和IPv4地址以进行威胁情报 截图 已完成 收集相关域名和IP。 HTTP - HTTPS 检查。 针对目标Web应用的二级或更深度静态文件扫描。 安装 从源代码安装 在安装前，您可以使用virtualenv管理包依赖。 root@kitploit: git clone...

morpheus

Morpheus - 自动化的ettercap TCP/IP劫持工具 root@kitploit: 版本发布：v2.2 - 稳定版 作者：pedro ubuntu r00t-3xp10it 代号：oneiroi phobetor（神话中的梦神） 支持的发行版：Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam 开发 @2018 法律免责声明 root@kitploit: 作者对本工具的任何滥用不承担任何责任， 请记住，未经事先同意攻击目标是非法的，并会受到法律惩罚。...

freshonions-torscraper

Fresh Onions TOR Hidden Service Crawler This is a copy of the source for the http://zlal32teyptf4tvi.onion hidden service, which implements a tor hidden service crawler / spider and web site. Features Crawls the darknet looking for new hidden service Find hidden services from a number of clearnet...

sherloq

An open source digital image forensic toolset Introduction "Forensic Image Analysis is the application of image science and domain expertise to interpret the content of an image and/or the image itself in legal matters. Major subdisciplines of Forensic Image Analysis with law enforcement...

CVE-2023-35078

CVE-2023-35078 shodan dorks You can use the following shodan dorks to find public targets. http.favicon.hash:362091310 http.favicon.hash:545827989 path=/mifs You can use the following to transform data from shodan API to format suitable for the checking script: root@kitploit: jq -cr...

RootKit

This is a rootkit which was tested on ubuntu-16.04.6-desktop-amd64 Linux 4.4,but it should be easy to port to different kernel versions. Link to video -- https://drive.google.com/file/d/1yDktAg9vIPBH3OPEBYset9OdQb0LMevA/view?usp=sharing Installation Clone the repository root@kitploit: git clone...

ViteVulScan

ViteVulScan Vulnerability Introduction This project covers 3 vulnerabilities: CVE-2025-30208, CVE-2025-31125, CVE-2025-31486. All are arbitrary file reading vulnerabilities in the Vite development server. These three vulnerabilities have broad coverage and are easy to exploit without restrictions...

feroxbuster

!WARNING Security Notice – Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...

feroxbuster

!WARNING 安全通知 – 域名冒用 域名 feroxbuster.com 与本项目、其维护者或任何官方 feroxbuster 版本均无关联 。 官方 feroxbuster 下载仅通过以下渠道分发： https://github.com/epi052/feroxbuster（开源） https://www.feroxbuster.pro（商业版） 本 README 中列出的软件包仓库 安装文档中列出的软件包仓库 我们 不 从 feroxbuster.com 分发软件，也无法保证该域名下文件的真实性与安全性。 如果您从其他域名下载了...

WhatWeb

WhatWeb - Next generation web scanner Developed by Andrew Horton urbanadventurer and Brendan Coles bcoles Latest Release: v0.6.4. April 3, 2026 License: GPLv2 This product is subject to the terms detailed in the license agreement. For more information about WhatWeb visit...

CVE-2025-24813

🚨 CVE-2025-24813 – Apache Tomcat PUT JSP RCE Exploit This repository contains a complete proof-of-concept PoC for CVE-2025-24813 , a Remote Code Execution RCE vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell. 🔥 This exploit demonstrates how an attacker...

CVE-2024-1071-Docker

CVE-2024-1071 con Docker 🎯 ¿Quieres practicar con el nuevo CVE de WordPress? Sigue las instrucciones Construir el laboratorio 1. Instalar Docker: https://docs.docker.com/get-docker/ 2. Clonar el proyecto: git clone https://github.com/Trackflaw/CVE-2024-1071-Docker.git. 3. Ir al proyecto: cd...

waidps

waidps Wireless Auditing, Intrusion Detection & Prevention System Depends on PyCrypto, run pip install pycrypto to install. Removed - Encryption feature Youtube Video Playlist - https://www.youtube.com/watch?v=aGTQAWoeujA&index=1&list=PLrekpjW7JwW-T0CeXP8GwudtJmTJ6KZ8O Blog -...

httpd-2.4.49

httpd-2.4.49 critical: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 CVE-2021-42013...

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...