twifo-cli

T W I F O - C L I Get user information of a Twitter user! Install root@kitploit: $ npm install --global twifo-cli OR root@kitploit: $ sudo npm install --global twifo-cli Usage root@kitploit: $ Usage: twifo Example: $ twifo 9gag Related twifo : API for this tool. quorafy: Get user information of a...

magika

Magika Magika is a novel AI-powered file type detection tool that relies on the recent advance of deep learning to provide accurate detection. Under the hood, Magika employs a custom, highly optimized model that only weighs about a few MBs, and enables precise file identification within...

CVE-2020-17453

Badges License MIT Installation Install CVE-2020-17453 with npm root@kitploit: npm install cve-2020-17453 -g Usage Example for single url root@kitploit: CVE-2020-17453 -u http://example.com Usage Example for list of urls...

js-x-ray

!slsa...

PolinRider

PolinRider: DPRK Threat Actor Implants Malware in Hundreds of GitHub Repos Date: 2026-03-07 Last updated: 2026-04-11 — see April 10–11 Update below Severity: CRITICAL — active supply chain infection across 1,950+ public repositories, confirmed operational merger with the TasksJacker / Contagious...

node-ipc-malware-protestware-CVE-2022-23812

CVE-2022-23812 RIAEvangelist/node-ipc is malware / protestware The RIAEvangelist/node-ipc module contains protestware peacenotwar. Excerpt from RIAEvangelist/node-ipc: as of v11.0.0 & v9.2.2 this module uses the peacenotwar module. More importantly, commits 847047cf7f81ab08352038b2204f0e763344958...

CVE-2024-21533-PoC-ggit

Vulnerabilidad de inyección de argumentos CVE-2024-21533 en ggit ggit se describe a sí mismo como: root@kitploit: Envoltorios de comandos git locales basados en promesas Recursos: Código fuente del proyecto en GitHub: https://github.com/bahmutov/ggit Paquete npm del proyecto:...

cwe-tool

cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install...

cve-lite-cli

Most tools tell you what's wrong. CVE Lite CLI tells you what to run...

tiktok-scraper

TikTok Scraper & Downloader Extrae y descarga información útil de TikTok. No se requieren inicio de sesión ni contraseña Esto no es un soporte de API oficial ni nada por el estilo. Es solo un scraper que utiliza la API web de TikTok para extraer contenido multimedia e información meta relacionada...

generator-burp-extension

Generador de Extensiones Burp Instalación Primero, instala Yeoman y generator-burp-extension usando npm asumimos que ya tienes preinstalado node.js. root@kitploit: npm install -g yo npm install -g generator-burp-extension Luego genera tu nuevo proyecto: root@kitploit: yo burp-extension...

CVE-2021-21315-PoC

CVE-2021-21315-systeminformation This is Proof of Concept for CVE-2021-21315 which affects The System Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation "be sure to check or sanitize service parameters that are passed to si.inetLatency, si.inetChecksite,...

CVE-2021-44906

CVE-2021-44906 Originally from: https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip Run root@kitploit: npm run hack And you will see the any function's done property is changed to true. The explanation of command line node index.js...

dcipher

dcipher Decipher hashes using online rainbow & lookup table attack services. Install root@kitploit: ❯❯❯ npm install dcipher Usage root@kitploit: const dcipher = require'dcipher'; dcipher'21232f297a57a5a743894a0e4a801fc3'.thenplaintext = console.logplaintext; //= 'admin' ;...

CVE-2023-45827

CVE-2023-45827 취약점 개요 CVE-2023-45827 CVSS : 9.8 Nov 3, 2023 ProtoType Pollution in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories This is a Prototype PollutionPP vulnerability in dot-diver. It can leads to RCE. vulnerable code root@kitploit:...

CVE-2022-0155-PoC

CVE-2022-0155 Proof-of-Concept PoC This repository contains a demonstration of the CVE-2022-0155 vulnerability. The vulnerability was detected by ranjit-git and is described in detail here. The purpose of this PoC is to demonstrate that the vulnerability doesn't just apply to scenarios where...

ReactNext2Shell

React-Next-Scanner Safe CLI scanner for CVE-2025-55182 and CVE-2025-66478 This tool provides a lightweight, non-exploitative vulnerability scanner focused on modern JavaScript stacks, specifically: API services affected by CVE-2025-55182 Next.js applications affected by CVE-2025-66478 It works on...

lodash.template-fixed

lodash.template v4.5.0 The Lodash method .template exported as a Node.js module. Installation Using npm: root@kitploit: $ sudo -H npm i -g npm $ npm i --save lodash.template In Node.js: root@kitploit: var template = require'lodash.template'; See the documentation or package source for more detail...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 Detail Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. PoC Start a HTTP server root@kitploit: 1- python3 -m http.server 80 Start a netcat listener root@kitploit: 2- nc -lnvp 'Target Port' Ma...

MAL-2026-16140 Malicious code in tracker-cloudflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b5bacf5779f1a1fa161ee38acbf61fda0dc18b3d0fe35213e2b0dc230c06e4 The package's preinstall hook runs node index.js, which collects host identifiers os.hostname, os.userInfo, homedir, DNS servers, cwd along with the...