urx

Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...

windiff

WinDiff 关于 WinDiff 是一个开源、基于 Web 的工具，允许浏览和比较不同版本 Microsoft Windows 二进制文件中的符号、类型和系统调用信息。该二进制数据库会定期自动更新，包含来自最新 Windows 更新（包括 Insider Preview）的数据。 该工具的灵感来源于 ntdiff，并借助 Winbindex 实现。 截图 工作原理 WinDiff 由两部分组成：一个用 Rust 编写的 CLI 工具，以及一个用 TypeScript 编写、基于 Next.js 框架的 Web 前端。 CLI 工具根据配置文件生成压缩的 JSON 数据库，它依赖...

censys-python

Biblioteca Python de Censys !WARNING AVISO DE OBSOLESCENCIA : Las APIs de Censys Search v1 y v2 quedarán obsoletas pronto. Migre a la nueva Plataforma Censys. 📖 Nueva documentación de la API : https://docs.censys.com/reference/get-started 📦 Nuevo SDK de Python : censys/censys-sdk-python 🖥️ Nueva...

censys-python

Censys Python Library !WARNING DEPRECATION NOTICE : The Censys Search v1 and v2 APIs will be deprecated soon. Please migrate to the new Censys Platform. 📖 New API Documentation : https://docs.censys.com/reference/get-started 📦 New Python SDK : censys/censys-sdk-python 🖥️ New CLI Tool cencli:...

arducky

Arducky - Arduino Ducky Script Interpreter This project aims to create a cheap alternative but not less efficient to Hak5's USB Rubber Ducky. Introduction The USB Rubber Ducky is a HID Human Interface Device programmable with a simple scripting language allowing penetration testers to quickly and...

TLS-Scanner

TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...

PrivKit

PrivKit A collection of Beacon Object Files BOFs for Windows Local Privilege Escalation Checks. Description PrivKit is an open-source tool that empowers red teamers and penetration testers to quickly identify common Windows local privilege escalation vectors using Cobalt Strike Beacon Object File...

cloudsploit

CloudSploit de Aqua - Escaneos de Seguridad en la Nube Inicio Rápido Genérico root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploi...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

git-remote-gcrypt

================= git-remote-gcrypt GNU Privacy Guard-encrypted git remote :Manual section: 1 Description git-remote-gcrypt is a git remote helper to push and pull from repositories encrypted with GnuPG, using a custom format. This remote helper handles URIs prefixed with gcrypt::. Supported...

git-remote-gcrypt

git-remote-gcrypt GNU Privacy Guard 加密的 git 远程仓库 :手册章节: 1 描述 git-remote-gcrypt 是一个 git 远程辅助工具，用于推送和拉取使用 GnuPG 加密的仓库，采用自定义格式。该远程辅助工具处理以 gcrypt:: 为前缀的 URI。 支持的后端有 local、rsync:// 和 sftp://，仓库以一组文件的形式存储；也可以是任意 ，此时 gcrypt 会将相同的表示存储在一个 git 仓库中，通过任意 git 传输桥接。如果可能，优先使用 local 或 rsync://；性能方面的讨论见下文“性能”部分。...

sentrysearch

SentrySearch Semantic search over video footage. Type what you're looking for, get a trimmed clip back. !IMPORTANT Official source: github.com/ssrajadh/sentrysearch is the only official home of SentrySearch. Other sites republishing or mirroring this project are not affiliated with or endorsed by...

ispy

ispy ispy : Eternalbluems17-010/BluekeepCVE-2019-0708 Scanner and exploiter Metasploit automation How to install : root@kitploit: git clone https://github.com/Cyb0r9/ispy.git cd ispy chmod +x setup.sh ./setup.sh Screenshots :...

nomore403

NoMore403 nomore403 是一个命令行工具，用于测试 HTTP 访问控制绕过以及 401、403 及相关响应中的解析器不一致性。 该工具专为实际 Web 安全工作设计：漏洞赏金、渗透测试、安全审查以及访问控制规则的回归测试。它自动化执行一组广泛的请求变异，捕获基线，过滤常见误报，并突出显示最可能表示有意义绕过的响应。 工具功能 给定一个目标 URL，nomore403 会： 1. 发送一个基线请求以捕获被阻止的响应。 2. 可选地自动校准不存在的路径，以了解目标的默认错误行为。 3. 运行一组绕过技术，这些技术会变异请求路径、方法、标头或线路格式。 4...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

bitchat

bitchat A decentralized peer-to-peer messaging app with dual transport architecture: local Bluetooth mesh networks for offline communication and internet-based Nostr protocol for global reach. No accounts, no phone numbers, no central servers. It's the side-groupchat. bitchat.free 📲 App Store...

ReconHound

ReconHound ReconHound is a Python-based web reconnaissance tool built for penetration testers, bug bounty hunters, and ethical hackers. It helps identify hidden paths, files, subdomains, query parameters, virtual hosts, and fuzzable endpoints — making it a versatile solution for deep web...

CVE-2025-29306

POC - CVE-2025-29306 FOXCMS /images/index.html Vulnerabilidad de Ejecución de Código Descripción Un problema en FoxCMS v.1.2.5 permite a un atacante remoto ejecutar código arbitrario a través de la página de visualización de casos en el componente index.html. POC completo Lea sobre ello —...

numasec

numasec El agente de seguridad de IA de código abierto. Dale a tu terminal un cerebro de seguridad. Ejecuta flujos de trabajo de seguridad con tus herramientas locales, agentes, runbooks, hallazgos, evidencia, repetición e informes. npm install -g numasec Demo | Por qué | Cómo se siente | Pruébal...

CVE-2021-3441-check

HP CVE Check Una herramienta de inteligencia de amenazas en Python para automatizar el descubrimiento de IoC para CVE-2021-3441. Busque fácilmente objetivos en busca de indicadores de compromiso. root@kitploit: //| ////|| CVE-2021-3441 Check |=== |----| || | | �| || Author: Tyler Butler || �| ||...