ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers. Features 17 HTTP headers. Multithreading. JSON export with --json outputfile.json. Auto-detecting most successful bypasses...

ipchanger

IP CHANGER 🌐🔄 A powerful Tor-based IP rotation CLI tool that automatically changes your public IP address at a specified interval and displays it in a clean terminal table. Built with ❤️ by @CappricioSec ⚠️ For educational and privacy testing purposes only. Do not misuse this tool for illegal...

Proxylogon-exploit

Proxylogon-exploit proxylogon exploit - CVE-2021-26857 usage: root@kitploit: python exploit.py...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...

hostscan

hostscan 0.2 Hostscan is a php tool which allows you to scan specific range of hosts, mostly for information gathering and testing for weak passwords. I guess it's a pentest tool, i'd created it to automate some tests that i often do. Since it's PHP, it works quite slowly compared to client-side...

fierce

Fierce Fierce 是一款 DNS 侦察工具，用于定位非连续的 IP 空间。 相关链接： 域名系统 DNS 域名 - 概念与设施 域名 - 实现与规范 域名系统 DNS 威胁分析 名称服务器 NS 起始授权记录 SOA 区域传输 DNS 区域传输协议 AXFR DNS 增量区域传输 IXFR 通配符 DNS 记录 概述 首先，功劳归功于应得之人，fierce 最初由 RSnake 以及 http://ha.ckers.org/ 的其他人员编写。本版本仅为转换为 Python 3，以简化和现代化代码库。 原始描述非常贴切，因此在此引用： Fierce...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

CVE-2018-9995-2

Tool CVE-2018-9995-2 root@kitploit: CVE: CVE-2018-9995 Exploit Author: Fernandez Ezequiel @capitanalfa Modify: Kien Quoc Version: 2.0 Install Python3 root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Quick start root@kitploit: g...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

CVE-2026-37432

CVE-2026-37432 Location: Apiutil.java: 107-113 Principle: Directly trusting the X-Forwarded-For request header, which can be forged to manipulate IP addresses. Exploitation method: X-Forwarded-For: 127.0.0.1...

CVE-2022-23093

CVE-2022-23093 FreeBSD Stack-Based Overflow Informations The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway, is...

quick-lookup-ptrun

Quick Lookup Plugin for PowerToys Run This plugin for PowerToys Run allows you to quickly search for an IP address, domain name, hash or any other data points in a list of Cyber Security tools. It's perfect for security analysts, penetration testers, or anyone else who needs to quickly lookup...

requests-ip-rotator

Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

checker-CVE-2020-5902

Checker CVE-2020-5902 Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface TMUI arbitrary file read and command execution vulnerabilities...

CVE-2025-63667

CVE-2025-63667 — Vatilon-based IP Cameras Vulnerability Evidence Sanitized Summary Several Vatilon-based IP cameras observed brands: SIMICAM, KEVIEW, ASECAM issue Session-Id tokens without verifying credential correctness. This flaw allows unauthenticated attackers to obtain valid sessions and...

winspy

WinSpy winspy : Windows Reverse Shell Backdoor Creator With ip poisener Dependencies 1 - metasploit-framework 2 - xterm 3 - apache2 Installation root@kitploit: sudo apt-get install git git clone https://github.com/TunisianEagles/winspy.git cd winspy chmod +x setup.sh ./setup.sh chmod +x winspy.sh...

tippa-my-tongue

Tippa My Tongue Tippa My Tongue is an exploit that uses CVE-2022-1388 and CVE-2022-41800 to establish a root reverse shell on F5 BIG-IP products. Most CVE-2022-1388 exploits achieve code execution using /mgmt/tm/util/bash. However, this exploit uses /mgmt/shared/iapp/rpm-spec-creator, followed by...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST Authentication Bypass Vulnerability ⚠️ Disclaimer This tool is only for cybersecurity offensive and defensive research and exchange. Please use it in compliance with the Cybersecurity Law！ If the user engages in illegal attacks or other illegal...