dnsmorph

DNSMORPH is a domain name permutation engine, inspired by dnstwist. It is written in Go making for a compact and very fast tool. It robustly handles any domain or subdomain supplied and provides a number of configuration options to tune permutation runs. DNSMORPH includes the following domain...

elpscrk

Elpscrk - v2.0 An Intelligent common user-password profiler that's named after the same tool in Mr.Robot series S01E01 😄 In simple words, elpscrk will ask you about all info you know about your target then will try to generate every possible password the target could think of, it all depends on t...

altdns

Altdns - परिवर्तनों और क्रमपरिवर्तनों के माध्यम से सबडोमेन खोज Altdns एक DNS recon उपकरण है जो पैटर्न के अनुरूप सबडोमेन की खोज की अनुमति देता है। Altdns उन शब्दों को इनपुट के रूप में लेता है जो किसी डोमेन के अंतर्गत सबडोमेन में मौजूद हो सकते हैं जैसे test, dev, staging साथ ही सबडोमेन की एक सूची भ...

DeadDialect

DeadDialect Every boot speaks a different language. Yesterday's binary is today's dead code. A session-unique RISC-V ISA remapping system. Every time the system boots, it generates a fresh cryptographic permutation of the instruction set. Binaries compiled for one session are cryptographically...

AzSubEnum

AzSubEnum - Azure Service Subdomain Enumeration AzSubEnum is a specialized subdomain enumeration tool tailored for Azure services. This tool is designed to meticulously search and identify subdomains associated with various Azure services. Through a combination of techniques and queries, AzSubEnu...

dnsgen

DNSGen 2.0 - محرك متقدم لتوليد تبديلات أسماء النطاقات 🚀 DNSGen هي أداة قوية ومرنة لتوليد تبديلات أسماء DNS، مصممة لباحثي الأمن ومختصري الاختراق. تولّد تنويعات ذكية لأسماء النطاقات للمساعدة في اكتشاف النطاقات الفرعية وتقييمات الأمان. ✨ الميزات 🔍 محرك ذكي لتوليد تبديلات أسماء النطاقات 🚄 وضع توليد...

gotator

Gotator Gotator is a tool to generate DNS wordlists through permutations. 🛠️ Installation If you want to make modifications locally and compile it, follow the instructions below: root@kitploit: git clone https://github.com/Josue87/gotator.git cd gotator go build If you are only interested in using...

Wordlister

Wordlister A simple wordlist generator and mangler written in python 3.10.1. Supported permutations: Capital Upper 1337 Append Prepend Additional functions: Each generated password doesn't contain same word twice. Output can be sorted based on the word length. Preview: root@kitploit: usage:...

ail-typo-website

ail-typo-website Website for ail-typo-squatting library. This website is strongly inspired by dnstwist website. Requirements requests flask flask-restx werkzeug ail-typo-squatting idna redis tldextract pymisp beautifulsoup4 nltk scikit-learn How to run The main script to run is Flaskserver.py, bu...

ail-typo-squatting

ail-typo-squatting ail-typo-squatting هي مكتبة بلغة بايثون لتوليد قائمة من نطاقات التصيّد الاحتيالي المحتملة typo squatting عبر محرّك توليف أسماء النطاقات، لتغذية نظام AIL وأنظمة أخرى. يمكن استخدام الأداة بشكل مستقل أو لتغذية أنظمة أخرى. إذا كنت لا تريد استخدام مكتبة بايثون، فإن...

EUVD-2026-28620

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

CVE-2026-43336

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

UBUNTU-CVE-2026-43336

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

CVE-2026-43336

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

CVE-2026-43336

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permutedstate before it leaves scope Since the ChaCha permutation is invertible, the local variable 'permutedstate' is sufficient to compute the original 'state', and thus the key, even after the...

CVE-2026-43336

CVE-2026-43336 – linux kernel ChaCha secret handling : The vulnerability arises in lib/crypto: chacha where the permuted_state is not zeroized before leaving scope, allowing the original state (and thus the key) to be inferred after the permutation. The documented fix is to explicitly zeroize per...

DNS Spider Multithreaded Bruteforcer 1.5

DNS Spider is a multi-threaded bruteforcer of subdomains that leverages a wordlist and/or character permutation...

CVE-2026-32129

soroban-poseidon provides Poseidon and Poseidon2 cryptographic hash functions for Soroban smart contracts. Poseidon V1 PoseidonSponge accepts variable-length inputs without injective padding. When a caller provides fewer inputs than the sponge rate inputs.len k, hashm1, ..., mk equals hashm1, ......

GHSA-HHJV-JQ77-CMVX zeptoclaw has Android device shell blocklist bypass via argument permutation

Summary zeptoclaw implements a blocklist to prevent dangerous commands running in android device shell, but this blocklist has several blocked commands with argements in the pattern literal, such as rm -f and rm -rf, this can be simply bypassed by using different orders for these arguments, such ...

zeptoclaw has Android device shell blocklist bypass via argument permutation

Summary zeptoclaw implements a blocklist to prevent dangerous commands running in android device shell, but this blocklist has several blocked commands with argements in the pattern literal, such as rm -f and rm -rf, this can be simply bypassed by using different orders for these arguments, such ...