gasmask

gasmask All in one Information gathering tool - OSINT For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: maldevel twitter mikismaos xvass ndamoulianos sbrb Dependencies Python 3.x validators python-whois dnspython requests shodan censys mmap pprint...

ReClass.NET

ReClass.NET This is a port of ReClass to the .NET platform with lots of additional features. Features Support for x86 / x64 File import from ReClass 2007-2016 and ReClass QT Memory Nodes Arrays and Pointers to every other node types Hex 8 / 16 / 32 / 64 Int 8 / 16 / 32 / 64 UInt 8 / 16 / 32 / 64...

pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: root@kitploit:...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

XenoScan

XenoScan XenoScan is a memory scanner which can be used to scan the memory of processes to locate the specific locations of important values. These types of tools are typically used when hacking video games, as they allow one to locate the values representing the game's state in memory. XenoScan ...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

CVE-2026-90830 GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function bfdwritemergedsection of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed...

CVE-2026-90830

A null pointer dereference vulnerability was identified in GNU Binutils 2.47 , specifically in the function _bfd_write_merged_section within the file bfd/merge.c (component: Section Merge). The attack requires local access with low privileges. The exploit has been publicly disclosed as a proof-of...

LiMEaide

LiMEaide v2.0 by Daryl Bennett - kd8bnyatgmaildotcom About LiMEaide is a python application designed to remotely or locally dump RAM of a Linux client and create a volatility profile for later analysis on your local host. I hope that this will simplify Linux digital forensics in a remote...

Stowaway

Stowaway Stowaway is a multi-hop proxy tool for security researchers and penetration testers. Stowaway lets you proxy external traffic through multiple hops into a target internal network, bypassing access restrictions, building a tree-like node topology, and managing it easily. Thanks for the...

InfectPE

Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...

Name-That-Hash

➡️ Discord | Website ⬅️ The Modern Hash Identification System pip3 install name-that-hash && nth Web App with no install needed 🤔 What is this? Have you ever come across a hash such as 5f4dcc3b5aa765d61d8327deb882cf99 and wondered what type of hash that is? 🤔 Name-that-hash will name that hash...

requests-ip-rotator

Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...

pulsar

PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...

Mimir

Mimir OSINT Threat Intel Interface - Named after the old Norse God of knowledge. Mimir functions as a CLI to HoneyDB which in short is an OSINT aggregative threat intel pool. Starting the program brings you to a menu the options for which are as follows. root@kitploit: 1. Fetch Threat Feed 5...

hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

dns-rebind-toolkit

DNS Rebind Toolkit Demo | Security Advisory | Included Payloads | FAQ DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick. DNS Rebind Toolkit is a frontend JavaScript framewor...

sherlock

Hunt down social media accounts by username across 400+ social networks Installation • Usage • Contributing Installation !WARNING Packages for ParrotOS and Ubuntu 24.04, maintained by a third party, appear to be broken. Users of these systems should defer to uv/pipx/pip or Docker. Method| Notes...