h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

fprobe

FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...

fprobe

FProbe FProbe - 快速HTTP探测 安装 root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe 特性 接收域名/子域名列表，探测可用的HTTP/HTTPS服务器。 运行时优化内存和CPU使用。 支持为每个域名指定特殊端口。 以JSON格式输出详细信息，包含额外头部，如Status Code、Content Type、Location。 用法 root@kitploit: Usage of fprobe: -c int Concurrency default 50 -cidr...

naabu-action

Naabu Action facilita la orquestación de naabu con GitHub Action. Ejemplo de uso GitHub Action ejecutando naabu sobre una lista de hosts root@kitploit: - name: 💥 Naabu - Port Scanner uses: projectdiscovery/naabu-action@main with: host: example.com GitHub Action ejecutando naabu con un escaneo de...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: root@kitploit: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: root@kitploit: sudo python usbkill.py or root@kitploit: sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver:...

aquatone

AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...

portSpider

██████╗ ██████╗ ██████╗ ████████╗███████╗██████╗ ██╗██████╗ ███████╗██████╗ ██╔══██╗██╔═══██╗██╔══██╗╚══██╔══╝██╔════╝██╔══██╗██║██╔══██╗██╔════╝██╔══██╗ ██████╔╝██║ ██║██████╔╝ ██║ ███████╗██████╔╝██║██║ ██║█████╗ ██████╔╝ ██╔═══╝ ██║ ██║██╔══██╗ ██║ ╚════██║██╔═══╝ ██║██║ ██║██╔══╝ ██╔══██╗ ██║...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

CVE-2025-55182-NSE

Nmap scripting engine .nse para CVE-2025-55182 ASCII art unchanged Cómo usar root@kitploit: nmap -p 80,443 --script ./CVE-2025-55182.nse meow.com -d p/d: codifiqué esta mierda a lo vibe en unos 5 minutos, aún no la he probado...

Look-at-The-XNU-Through-A-Tube-CVE-2018-4242-Write-up-Translation-

Mira a XNU a Través de un Tubo: Análisis de CVE-2018-4242 Zhuo Liang de Qihoo 360 Nirvan Team Contenido 1 Introducción 1 1.1 CVE-2018-4242 . . . . . . . . . . . . . . . . . . . . . . . . . 1 2 El Kernel XNU 2 2.1 Llamada al Sistema . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2.2 MIG...

cve-2021-38647

cve-2021-38647 Un exploit PoC para CVE-2021-38647 RCE en OMI. Ejecuta un solo comando usando ExecuteShellCommand en el puerto HTTPS predeterminado: root@kitploit: python cve-2021-38647.py -s 10.10.10.10 shell id Ejecuta un solo comando usando ExecuteShellCommand en el puerto HTTP predeterminado:...

sonar v0.4.1

root@kitploit: ██████ ███ ██████ ██ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ████ ██ ██ ██ ██ ██ ██ ██ ██ ██████ ███ ██ ██ ██ ██ ██ ██ Know what's running on your machine. Sonar shows everything listening on localhost and puts it in order: every port belongs to a grou...

CVE-2026-20212

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

CVE-2026-20212

CVE-2026-20212 affects the Silicon One Hardware Abstraction Layer (S1HAL) in Cisco Nexus 9000 Series Switches . The root cause is that TCP ports 43210 and 43211 are accessible in the default Layer 3 VRF, allowing an unauthenticated, remote attacker to send crafted input that executes code with ro...

PT-2026-84805

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switches affected versions not specified Description A flaw in the Silicon One integration for specific Cisco Nexus 9000 Series Switches allows an unauthenticated remote attacker to execute code with root privileges. Th...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

RHEL 8 : kernel (RHSA-2026:61310)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61310 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free...

Binding to an Unrestricted IP Address

Overview github.com/cli/cli/cmd/gh is a GitHub on the command line. It brings pull requests, issues, and other GitHub concepts to the terminal next to where you are already working with git and your code. Affected versions of this package are vulnerable to Binding to an Unrestricted IP Address...

Binding to an Unrestricted IP Address

Overview Affected versions of this package are vulnerable to Binding to an Unrestricted IP Address through the ForwardPorts path in pkg/cmd/codespace/ports.go. An attacker can reach a forwarded Codespaces service from other hosts on the victim’s network by having the user run gh codespace ports...