CVE-2023-21839

CVE-2023-21839 Analysis This vulnerability is caused by triggering the getReferent method of the bound object when calling the lookup or list method after binding an object via the t3 or iiop protocol. Call stack for t3 protocol: root@kitploit: getObjectInstance:96, WLNamingManager...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

Mimir

Mimir OSINT Threat Intel Interface - Named after the old Norse God of knowledge. Mimir functions as a CLI to HoneyDB which in short is an OSINT aggregative threat intel pool. Starting the program brings you to a menu the options for which are as follows. root@kitploit: 1. Fetch Threat Feed 5...

cve-maker

CVE-MAKER Utilice este software solo con fines legales. No soy responsable de sus acciones de ninguna manera. Utilice python 3.11.2 Creado por msd0pe DESCRIPCIÓN cve-maker es un centro para encontrar CVEs y exploits. Está basado en las bases de datos oficiales de NIST, ExploitDB y Github. La...

ktr

ktr Highly asynchronous traceroute program written in Rust with ASN WHOIS and PeeringDB lookups. Hacked together mostly for how-did-i-get-here.net : Components: ktrlib: main library code, handles traceroute, WHOIS lookups of ASNs, and PeeringDB SQLite support ktragent: daemon executable that allo...

cve-2022-42889-text4shell-docker

Instalar maven - maven-linux 1. Instalación de Maven para crear el fat jar root@kitploit: mvn clean install 2. Construir Docker root@kitploit: docker build --tag=text4shell . 3. Ejecutar Docker root@kitploit: docker run -p 80:8080 text4shell 4. Probar la aplicación root@kitploit:...

pwned

pwned A command-line tool for queryingTroy Hunt's Have I been pwned? service using the hibp Node.js module. Installation Download and install Node.js, then install pwned globally using npm: root@kitploit: npm install pwned -g Alternatively, you can run it on-demand using the npx package runner:...

Decodify

Decodify Puede detectar y decodificar cadenas codificadas, recursivamente. Tomemos esta cadena: s0md3v y codifiquémosla en Base 64 root@kitploit: czBtZDN2 Ahora codifiquémosla en hex root@kitploit: 637a42745a444e32 Y ahora nuevamente en Base 64 root@kitploit: NjM3YTQyNzQ1YTQ0NGUzMg== Ahora...

quien

quien A better whois and domain intelligence toolkit. Interactive TUI with tabbed views for WHOIS, DNS, mail, SSL/TLS, HTTP headers, SEO analysis, and tech stack detection. Try it without installing: ssh quien.sh Install Homebrew root@kitploit: brew install quien Ubuntu / Debian root@kitploit: cu...

dcipher-cli

dcipher-cli Crack hashes using online rainbow & lookup table attack services, right from your terminal. Install root@kitploit: ❯❯❯ npm install -g dcipher-cli Usage root@kitploit: ❯❯❯ dcipher --help Crack hashes using online rainbow & lookup table attack services, right from your terminal. Usage ❯...

nuubi

Nuubi Tools Scanner, Recon. Detalles root@kitploit: Opciones: -h/--help | Muestra el mensaje de ayuda y sale Argumentos: -b/--banner | Captura de banner de la dirección IP objetivo -s/--subnet | Búsqueda de subred del objetivo -c/--cms | Detección de CMS mediante cabeceras -d/--dns | Consulta DNS...

nuubi

Nuubi Tools Scanner, Recon. Details root@kitploit: Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract link...

SeekYou

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. SeekYou Unified host intelligence across 15 sources — Query any IP, domain, or ASN f...

shaha

shaha Constructor de bases de datos hash y herramienta de búsqueda inversa. SHA + aha! Construye bases de datos hash precomputadas a partir de listas de palabras y luego consúltalas para encontrar preimágenes. Instalación root@kitploit: cargo install shaha O compilar desde el código fuente:...

SHA256-CDP

SHA256-CDP: Cyclic Digit-sum Projection GPU-accelerated rainbow table implementation of the CDP structural analysis framework for SHA-256. Built on the findings of the CDP paper DOI: 10.5281/zenodo.20627240, this repository provides a complete, working implementation of CDP-based rainbow chain...

CVE-2025-65945-poc

CVE-2025-65945: Bypass de verificación de firma en node-jws Esto es una prueba de concepto para un bypass de verificación de firma en la librería node-jws. El error permite a atacantes falsificar JWTs válidos cuando el servidor deriva secretos HMAC de datos controlados por el usuario. ¿Cuál es el...

scripts-and-tools

Scripts and Tools 30backups.sh -- Creates and keeps the latest 30 web and SQL backups adig.sh -- DNS, reverse, and name server lookups, as well as any redirect blocklist-submission-forms.html -- Blocklist and abuse submission forms character-classes.txt -- Character classes useful for web malware...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

CVE-2021-44228

CVE-2021-44228 checker This is the repository for checking for vulnerability CVE-2021-44228. This is a PoC that only displays strings without any external class loading. It cannot be used for arbitrary code execution. How it works? Step 1: Run the server application The image...