prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

learning-management-system

learning-management-system Masteriyo - LMS for WordPress = 1.6.7 - Sensitive Information Exposure Plugin Info root@kitploit: Software Type Plugin Software Slug learning-management-system view on wordpress.org Patched? Yes Remediation Update to version 1.6.8, or a newer patched version Affected...

kong-pwn

kong-pwn Use Exposed KongAPI to act like a proxy and get metadata urls or internal urls. CVE-2020-11710 - It's not a vuln it's a misconfiguration. How to use root@kitploit: usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are required: -u/--url, -s/--ssrf...

Pixel-Flood-Attack

Pixel Flood DoS - CVE-2024-22393 PoC Pixel Flood Bug for Web Servers A lightweight Proof-of-Concept to test for the Pixel Flood memory exhaustion vulnerability in web applications running vulnerable versions of Apache Answer. Table of Contents Description Technical Details Affected Versions...

nextssrf

root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit partial-COW page-cache corruption culprit 899ee91156e5, present v5.18 .. fixed v7.1-rc7. packeteditmeme.c turns it into unprivileged local root: a userns CAPNETADMIN child overwrites the cached ELF metadata of a setuid-root binary with...

web-wordlist-generator

WEB-Wordlist-Generator NOTA : Definitivamente debes usarlo para actividades legales. Consulta; USAGEPOLICY.md LICENSE Descripción WEB-Wordlist-Generator escanea tus aplicaciones web y crea listas de palabras relacionadas para tomar medidas preventivas contra ciberataques. Captura de pantalla...

tiktok-scraper

TikTok Scraper & Downloader Extrae y descarga información útil de TikTok. No se requieren inicio de sesión ni contraseña Esto no es un soporte de API oficial ni nada por el estilo. Es solo un scraper que utiliza la API web de TikTok para extraer contenido multimedia e información meta relacionada...

IMDShift

IMDShift Las cargas de trabajo de AWS que dependen del endpoint de metadatos son vulnerables a ataques Server-Side Request Forgery SSRF. IMDShift automatiza el proceso de migración de todas las cargas de trabajo a IMDSv2 con amplias capacidades, lo que implementa medidas de seguridad mejoradas pa...

cloudquery

CloudOps, sin el caos CloudQuery es un inventario de activos en la nube creado para equipos de plataforma. Sincroniza los metadatos de tu infraestructura en la nube a tu data warehouse, generando información y automatización. Unifica datos y proporciona contexto en AWS, Azure, GCP y más de 70...

Stompy

Stompy A PowerShell function to perform timestomping on specified files and directories. The function can modify timestamps recursively for all files in a directory. Change timestamps for individual files or directories. Recursively apply timestamps to all files in a directory. Option to use...

download

Este repositorio nao tem um README...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. "HASSH" is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of an MD5 fingerprint. HASSH was invented at...

MetaFinder

MetaFinder Search for documents in a domain through Search Engines. The objective is to extract metadata. Installation: root@kitploit: pip3 install metafinder Upgrades are also available using: root@kitploit: pip3 install metafinder --upgrade Usage MetaFinder can be used in 2 ways: CLI...

gitrecon

gitrecon OSINT tool to get information from a Github or Gitlab profile and find user's email addresses leaked on commits. 📚 How does this work? GitHub uses the email address associated with a GitHub account to link commits and other activity to a GitHub profile. When a user makes commits to publi...

Exif-Remove

Ferramenta de Linha de Comando - Remova Dados Exif com Facilidade Esta ferramenta foi feita em Python 2.7 compilada usando pyinstaller para Windows OS. Nada de especial nesta ferramenta, apenas facilita o meu trabalho, talvez facilite o seu também Por qual motivo? Exif é Metadata armazenada...

Exif-Grabber

About Exif Grabber Beta Version Exif Grabber is a python tool designed to extract exif data from picture with two methods Screenshot Screenshot showing a part of it working Requirement Exifread library :https://pypi.python.org/pypi/ExifRead Installation root@kitploit: $ git clone...

exif-gps-tracer

exif-gps-tracer Un script en Python que permite analizar los datos de geolocalización de tus archivos de imagen almacenados en un conjunto de datos. También genera salida en archivo CSV y en HTML de Google Maps. Requisitos previos Para ejecutar este script correctamente: 1 Debes tener una clave d...

metabadger

Metabadger Previna ataques SSRF no AWS EC2 por meio de atualizações automatizadas para o Serviço de Metadados de Instância v2 IMDSv2 mais seguro. Metabadger Finalidade e funcionalidade Diagnosticar e avaliar seu uso atual do AWS Instance Metadata Service, bem como entender como o serviço funciona...

PowerMeta

PowerMeta O PowerMeta pesquisa por arquivos publicamente disponíveis hospedados em vários sites para um domínio específico, usando pesquisas especialmente elaboradas no Google e no Bing. Em seguida, permite o download desses arquivos do domínio alvo. Após recuperar os arquivos, o PowerMeta pode...