elpscrk

Elpscrk - v2.0 An Intelligent common user-password profiler that's named after the same tool in Mr.Robot series S01E01 😄 In simple words, elpscrk will ask you about all info you know about your target then will try to generate every possible password the target could think of, it all depends on t...

dnsmorph

DNSMORPH is a domain name permutation engine, inspired by dnstwist. It is written in Go making for a compact and very fast tool. It robustly handles any domain or subdomain supplied and provides a number of configuration options to tune permutation runs. DNSMORPH includes the following domain...

Wordlister

Wordlister A simple wordlist generator and mangler written in python 3.10.1. Supported permutations: Capital Upper 1337 Append Prepend Additional functions: Each generated password doesn't contain same word twice. Output can be sorted based on the word length. Preview: root@kitploit: usage:...

gotator

Gotator Gotator is a tool to generate DNS wordlists through permutations. 🛠️ Installation If you want to make modifications locally and compile it, follow the instructions below: root@kitploit: git clone https://github.com/Josue87/gotator.git cd gotator go build If you are only interested in using...

ail-typo-squatting

ail-typo-squatting ail-typo-squatting は、ドメイン名置換エンジンを使用して潜在的なタイポスクワッティングドメインのリストを生成し、AIL や他のシステムに供給する Python ライブラリです。 このツールは、スタンドアロンツールとしても、他のシステムに供給するためにも使用できます。 Python ライブラリを使用したくない場合は、https://typosquatting-finder.circl.lu/ がこのライブラリを使用したオンラインサービスです。 要件 Python 3.6+ inflect ライブラリ pyyaml tldextract...

ail-typo-website

ail-typo-website ail-typo-squatting ライブラリ用のウェブサイトです。このウェブサイトは dnstwist website に強く触発されています。 要件 requests flask flask-restx werkzeug ail-typo-squatting idna redis tldextract pymisp beautifulsoup4 nltk scikit-learn 実行方法 メインの実行スクリプトは Flaskserver.py ですが、以下のように始めることもできます: conf/conf.cfg を記入してください...

altdns

Altdns - 변경 및 순열을 통한 서브도메인 탐색 Altdns는 패턴에 일치하는 서브도메인을 발견할 수 있는 DNS 정찰 도구입니다. Altdns는 도메인 아래 서브도메인에 존재할 수 있는 단어예: test, dev, staging와 함께 이미 알고 있는 서브도메인 목록을 입력으로 받습니다. 이 두 목록을 입력으로 받아 altdns는 존재할 수 있는 '변형된' 또는 '돌연변이된' 잠재적 서브도메인의 방대한 출력을 생성합니다. 이 출력을 저장하여 나중에 선호하는 DNS 무차별 대입 도구에서 사용할 수 있습니다. 또는 -r...

AzSubEnum

AzSubEnum - Azure 서비스 서브도메인 열거 AzSubEnum은 Azure 서비스를 대상으로 한 특화된 서브도메인 열거 도구입니다. 이 도구는 다양한 Azure 서비스와 연관된 서브도메인을 세심하게 검색하고 식별하도록 설계되었습니다. AzSubEnum은 다양한 기술과 쿼리를 조합하여 Azure 도메인 구조를 탐색하고, 여러 Azure 서비스와 관련된 서브도메인을 체계적으로 조사하고 수집합니다. 작동 방식 AzSubEnum은 DNS 해석 기술과 체계적인 순열permutation 방식을 활용하여 Azure App...

DeadDialect

DeadDialect 매 부팅은 다른 언어를 말한다. 어제의 바이너리는 오늘의 죽은 코드다. 세션 고유의 RISC-V ISA 재매핑 시스템. 시스템이 부팅될 때마다 명령어 집합의 새로운 암호화 순열을 생성합니다. 한 세션용으로 컴파일된 바이너리는 다음 세션에서 암호학적으로 거부됩니다. 재부팅 후에도 살아남는 멀웨어는 실행될 수 없습니다 — 죽은 방언을 말하기 때문입니다. 아이디어 표준 ISA는 고정된 계약입니다. 모든 프로그램, 모든 라이브러리, 모든 멀웨어는 0x13의 의미, syscall 64의 기능, 스택 포인터가 어떤...

dnsgen

DNSGen 2.0 - 高度なDNSネームパーミュテーションエンジン 🚀 DNSGenは、セキュリティ研究者やペネトレーションテスター向けに設計された、強力で柔軟なDNS名パーミュテーションツールです。サブドメインの発見やセキュリティ評価を支援するために、インテリジェントなドメイン名バリエーションを生成します。 ✨ 特徴 🔍 スマートなドメイン名パーミュテーションエンジン 🚄 迅速な評価のための高速生成モード 📝 コメント付きカスタムワードリストのサポート 🎯 既存ドメインからのインテリジェントな単語抽出 🔧 複数のパーミュテーション手法 🌍 クラウド対応パターンと最新の命名規則 🚀...

Linux Distros Unpatched Vulnerability : CVE-2026-89656

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: reject buckets with mismatched CRUSH ids crushdecode stores bucket data by array slot, and the mapper later derives the per-bucket workspace index from...

EUVD-2026-28620

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

CVE-2026-43336

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

UBUNTU-CVE-2026-43336

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

CVE-2026-43336

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

CVE-2026-43336

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

CVE-2026-43336

CVE-2026-43336 – linux kernel ChaCha secret handling : The vulnerability arises in lib/crypto: chacha where the permuted_state is not zeroized before leaving scope, allowing the original state (and thus the key) to be inferred after the permutation. The documented fix is to explicitly zeroize per...

DNS Spider Multithreaded Bruteforcer 1.5

DNS Spider is a multi-threaded bruteforcer of subdomains that leverages a wordlist and/or character permutation...

CVE-2026-32129

soroban-poseidon provides Poseidon and Poseidon2 cryptographic hash functions for Soroban smart contracts. Poseidon V1 PoseidonSponge accepts variable-length inputs without injective padding. When a caller provides fewer inputs than the sponge rate inputs.len k, hashm1, ..., mk equals hashm1, ......

GHSA-HHJV-JQ77-CMVX zeptoclaw has Android device shell blocklist bypass via argument permutation

Summary zeptoclaw implements a blocklist to prevent dangerous commands running in android device shell, but this blocklist has several blocked commands with argements in the pattern literal, such as rm -f and rm -rf, this can be simply bypassed by using different orders for these arguments, such ...