GiveMeSecrets

GiveMeSecrets Use regular expressions to get sensitive information from a given repository GitHub, pip or npm. Dependencies You only need to have python 3.6 or higher installed to launch this script. In addition you must have installed in the system git, pip and npm. How to use It's very easy to...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

LinkFinder

About LinkFinder LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. This way penetration testers and bug hunters are able to gather new, hidden endpoints on the websites they are testing. Resulting in new testing ground, possibility containing ne...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...

apkvuln

ApkVuln root@kitploit: \ / \ / \ / \ / \ /\ \ \ \ /|\ \ \ | | | \ | |/ /\ \ / / | | | | | | | / \ | / ' \ V /| || | || . | // \|| |\ / /|||| With ApkVuln you will obtain the .java files of an APK and they will be analyzed in search of possible vulnerabilities in the code, for it will make...

hashID

hashID | hash-identifier 识别用于加密数据，尤其是密码的不同类型哈希。 此工具取代了已过时的 hash-identifier ！ hashID 是一款使用 Python 3 编写的工具，支持通过正则表达式识别超过 220 种独特的哈希类型。支持的哈希详细列表可在此处查阅 https://github.com/psypanda/hashID/blob/master/doc/HASHINFO.xlsx。 它能够识别单个哈希、解析文件或读取目录中的多个文件并识别其中的哈希。hashID 还能够在输出中包含相应的 hashcat 模式及/或 JohnTheRipper 格...

WifiPass

WifiPass 使用正则表达式和Python 3导出Windows中保存的WiFi密码...

cyberchef-recipes

CyberChef es la autodenominada 'Cyber Swiss-Army Knife' creada por GCHQ. Es una herramienta fantástica para la transformación, extracción y manipulación de datos en tu navegador web. Todo el crédito para @GCHQ por crear la herramienta. Ver: https://gchq.github.io/CyberChef/ Consejos generales...

anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...

httpd: Apache HTTP Server: Denial of Service via crafted regular expressions

A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service...

CVE-2026-42533

NGINX Vulnerability Checker 一个用于以非侵入式 方式检查 NGINX 安装是否可能受到漏洞 CVE-2026-42533 影响的脚本。 重要提示： 本项目不会利用该漏洞 。它仅对已安装版本和服务器配置执行本地检查，以识别可能存在的暴露风险。 功能特性 检测 NGINX 是否已安装。 获取已安装的版本。 将当前版本与已修复版本进行比较。 查找使用了 map 指令的配置。 检测配置文件中对正则表达式（ 和 ）的使用。 生成包含安装状态的摘要。 要求 Linux Bash 已安装 NGINX 对 /etc/nginx 的读取权限 使用方法 赋予执行权限：...

httpd: Apache HTTP Server: Denial of Service via crafted regular expressions

A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: nodejs-path-parse (UTSA-2026-093192)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093192 advisory. All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPathRe regular expressions...

Astra Linux – Vulnerability in pygments

In pygments 1.1+ and fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of these regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS attacks. By introducing malicious input, an attacker can cause a...

httpd: Apache HTTP Server: Denial of Service via crafted regular expressions

A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service...

httpd: Apache HTTP Server: Denial of Service via crafted regular expressions

A flaw was found in Apache HTTP Server. This buffer underwrite vulnerability occurs when processing crafted regular expressions in the server's configuration. An attacker could potentially exploit this to cause a denial of service...