13786 matches found
truegaze
truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...
hyenae-ng
Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...
jsfinder
Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...
vger
V'ger V'ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations. User Stories As a Red Teamer , you've found Jupyter credentials, but don't know what you can do with them. V'ger is organized in a format that...
Dnstracer-1.9-Fix
Dnstracer-1.9-Fix dnstracer dnstracerは、指定されたホスト名について、指定されたドメインネームサーバー（DNS）がどこから情報を取得しているかを特定し、権威サーバーに至るまでDNSサーバーのチェーンを辿ります。 問題 dnstracer 1.9以前におけるスタックベースのバッファオーバーフローにより、攻撃者はargv0のstrcpy呼び出しで長いname引数を不正に処理させ、任意のコードを実行できる可能性があります。 root@kitploit: /dnstracerbroken.h/ define NSMAXDNAME 1024...
metabigor
Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...
nemesis
N E M E S I S - Crafting & Injection The Nemesis Project is designed to be a command line based, portable human IP stack for UNIX-like and Windows systems. The suite is broken down by protocol, and should allow for useful scripting of injected packets from simple shell scripts. The latest release...
cpufetch
Simple yet fancy CPU architecture fetching tool cpufetch is a command-line tool written in C that displays the CPU information in a clean and beautiful way Table of contents 1. Support...
magic-wormhole
Magic Wormhole あるコンピュータから別のコンピュータへ、安全にデータを転送します。 このパッケージはライブラリと、wormhole という名前のコマンドラインツールを提供します。これにより、任意のサイズのファイルやディレクトリ（または短いテキスト）を、あるコンピュータから別のコンピュータへ転送できます。2つのエンドポイントは、同一の「ワームホールコード」を使用して識別されます。通常、送信側のマシンがコードを生成して表示し、受信側のマシンでそのコードを入力する必要があります。...
gftrace
gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...
reko
reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...
pbtk
pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...
wsvuls
WSVuls Website vulnerability scanner detect issues outdated server software and insecure HTTP headers...
browser-xpi-malware-scanner
XPI Analyzer — Firefox Extension Security Scanner A command-line tool that analyzes Firefox extension files .xpi for signs of malware, obfuscation, hidden payloads, steganography, and other techniques used to sneak malicious code past extension review teams. What It Does extension-scanner.py tear...
ipsw
ipsw iOS/macOS Research Swiss Army Knife What is ipsw 🤔 ipsw is a comprehensive command-line research framework for iOS and macOS. It provides an extensive toolkit for security researchers, reverse engineers, jailbreak developers, and iOS enthusiasts to download, parse, and analyze Apple firmware...
githubFind3r
githubFind3r githubFind3r is a very fast command line repo/user/commit search tool enter image description here Installation root@kitploit: git clone https://github.com/atmoner/githubFind3r.git cd githubFind3r npm install Run it root@kitploit: node githubFind3r.js...
RatRace
RatRace A lightweight CLI tool for systematically detecting and exploiting race conditions in web applications, APIs, and modern services. What Problem It Solves Race conditions represent one of the highest-impact security vulnerabilities in modern applications, yet they remain poorly covered by...
corelight-client
.. corelight-client: .. Version number is filled in automatically. .. |version| replace:: 1.5.17 ==================================== Corelight Sensor Command Line Client .. contents:: Overview This tool provides a command-line client for the Corelight Sensor , aBro appliance engineered from the...
zelos
Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...