UART Firmware Info

Probes a UART console with read-only commands to collect kernel, OS release, CPU, and bootloader / firmware identity strings !/usr/bin/env python3 -- coding: utf-8 -- """ UART Firmware Info - Probes serial console for OS / firmware identity """ from kittysploit import from...

UART BusyBox Audit

Audits BusyBox on an embedded UART console: detects presence, enumerates applets, and highlights risky networking / shell tools !/usr/bin/env python3 -- coding: utf-8 -- """ UART BusyBox Audit - Enumerates BusyBox applets and flags risky ones over UART """ from kittysploit import from...

CANBUS Session Info

Displays interface, CAN ID, timing, and message statistics for a CANBUS session !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS Session Info - Displays metadata and statistics for a CANBUS session Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from core.outputhandler...

CANBUS ECU Discovery

Discovers ECUs by correlating CAN IDs across sessions, classifying diagnostic ranges, and optionally probing with UDS TesterPresent !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS ECU Discovery - Discovers ECUs via passive traffic analysis and optional UDS probing Author: KittySploit Team...

CANBUS OBD-II Query

Queries OBD-II data such as supported PIDs, VIN, custom PID values, and DTCs !/usr/bin/env python3 -- coding: utf-8 -- """ CANBUS OBD-II Query - Sends read-only OBD-II diagnostic queries over a CANBUS session Author: KittySploit Team Version: 1.0.0 """ from kittysploit import from...

oxo v2.9.2

OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...

Lanflux

Lanflux On-LAN recon and exploitation after wireless footho...

bbot v3.0.0

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...

discover — Updated!

root@kitploit: Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux or Ubuntu. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend1 Jason Ashton @ninewir...

Malicious code in @debile/require-dir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3075732c05c8b941b57fed9e8fe9c788b28f9ff6fe9ef91936d1802f568c594e Package @debile/require-dir republishes the code of the well-known require-dir package under a different scope. Its package.json preinstall script ru...

Malicious code in estore-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5f2a664c7576b3cbf04696ddff717d8b3e9b835693035fa56a23035edef411 package.json declares a preinstall lifecycle script that runs wget against https://webhook.site/d32804ac-1bbb-4100-ab60-95231dd3251c/, sending the...

Malicious code in cbr-internal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa96f42fade399b9e73756e2abd62eafbfa11e2eb02fe1055d9c7e025fba4ab7 On module load, the package's main entrypoint shells out via childprocess.exec to run cat /etc/passwd and prints the contents to stdout. This fires...

pantest-containers

Pentest Containers Uruchamianie Ten projekt buduje narzęd...

Authenticated HTTP Surface Mapper

Maps post-authentication attack surface from a landing page using session cookies — admin paths, uploads, APIs, and privileged forms. !/usr/bin/env python3 -- coding: utf-8 -- """ Authenticated HTTP surface mapper. After login, crawls the landing page and shallow linked paths to discover admin...

Exploit-Chain-Suggestor

Exploit Chain Suggestor A CLI tool for penetration testers an...

Exploit for Incorrect Calculation of Buffer Size in F5 Dos

RIFT — Remote Injection & Fault Trigger Author: Michael S...

bounthunt

Bountyhunt !CIhttps://github.com/bess1lie/bountyhunt/acti...

WR41TH

WRAITH Offensive Security Framework — an all-in-one, menu-driven...

pentest-cheatsheet

pentest-cheatsheet Commands, techniques and notes for penetrat...

Malicious code in simplisafe-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564baff2e47527f159c52c527e1ea2b93d73625f94737f4397cff99311871a18 On npm install, the package's preinstall hook package.json declares "preinstall": "node index.js" executes index.js, which collects the installer's...