dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. root@kitploit: git clone...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

chromepass

Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...

faraday_addon

概要 Faraday Addon は、閲覧中のリクエストを自分の Faraday インスタンスに自動的に報告するためのシンプルなアドオンです。Faraday Addon はブラウザからのすべてのリクエストを傍受し、それぞれを脆弱性として扱ってアクセスする機能を追加します。これにより、ペンテスターは潜在的に脆弱なリクエストを Faraday に送信するためにアドオンを使うだけでよく、サーバーにコピー＆ペーストする必要がなくなります。 互換性 現時点では、Faraday Addon は Firefox Quantum のみで利用可能です。安定した Chrome リリースに向けて開発中です。...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

KubeLight

OWASP KubeLight - Kubernetes 보안 스캐너 Kubernetes 클러스터 보안 및 규정 준수 스캔 1. K8s 클러스터를 스캔하여 잘못된 구성을 탐지합니다. 2. 가볍고, 순수 Python, 빠르며, 멀티스레드 도구입니다. 3. NoSQL 쿼리 엔진. 4. Slack에 실시간 알림 5. SBOM 생성 및 이미지 취약점 스캔. 6. PCI-DSS, SOC2, NSA 및 CIS 벤치마크에 대한 규정 준수 보고서. 참고 - 위 항목들은 버전 0.0.5에서 제공됩니다. 할 일 Kubernetes 침투 테스트. 컨테...

CVE-2025-25014

CVE-2025-25014에 대한 POC Kibana의 프로토타입 오염 취약점으로 인해 머신 러닝 및 보고 엔드포인트에 대한 조작된 HTTP 요청을 통해 임의 코드 실행이 발생합니다. 현재 이 POC 는 취약한 인스턴스를 감지만 합니다. 사용법 root@kitploit: python CVE-2025-25014.py -u username -p password --proxy proxyurl url...

burpa

burpa: Burp Automator Burp Suite自動化ツール 必要条件 burp-rest-api Burp Suite Professional slackclient 使用方法 root@kitploit: $ python burpa.py -h / / / / / / / / / / / // / // / / / // / // / /./,// / ./,/ // burpa version 0.1 / by 0x4D31 usage: burpa.py -h -a scan,proxy-config,stop -pP PROXYPORT -aP...

AtomShields

AtomShields |Build| |Codacy| |Docs| |Version| .. |Docs| image:: https://readthedocs.org/projects/atomshields/badge/?version=latest :target: http://atomshields.readthedocs.io/en/latest/?badge=latest :alt: Read the Docs .. |Version| image:: http://img.shields.io/pypi/v/atomshields.svg?style=flat...

CVE-2023-36874

CVE-2023-36874 デモンストレーションのみを目的としています。エクスプロイトは、脆弱性のあるWindowsクライアント/サーバーで動作します。 コードをコンパイルし、c:\test\system32 ディレクトリを作成します。そのディレクトリに wermgr.exe を配置し、コンパイルしたPoCを実行してください。 https://github.com/Wh04m1001/CVE-2023-36874/assets/44291883/417d1384-4f3f-42c0-9e07-80d4347ed9c7 Windows 10 19045.2006 でのテスト...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

shellsploit-framework

We'll back in several years. update...

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful...

onionscan

What is OnionScan? OnionScan is a free and open source tool for investigating the Dark Web. For all the amazing technological innovations in the anonymity and privacy space, there is always a constant threat that has no effective technological patch - human error. Whether it is operational securi...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

domained

domained アーカイブ ドメイン名列挙ツール このプロジェクトはメンテナンスされなくなりました。 domained への貢献に @ccsplit と @mzfr に感謝します。 要旨: バグ報奨金の偵察に使用している、いくつかの優れたツールを活用したひどい 継続的に更新されるPythonコード。 domained に含まれるツールは、Kali Linux（推奨）または Debian 7+ と Recon-ng が必要です domained...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

abaddon

Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...

frogy2.0

Orbis - Attack Surface Intelligence Full-Spectrum Attack Surface Intelligence Orbis automatically maps your organisation's entire internet-facing attack surface, subdomains, open ports, web applications, cloud infrastructure, TLS certificates, email posture, exposed secrets, login panels, and mor...

CVE-2025-61301

CVE-2025-61301 - CAPEv2: 재귀적 프로세스 포킹을 통한 분석 거부 설명 CAPEv2커밋 52e4b43, 2025-05-17의 reporting/mongodb.py 및 reporting/jsondump.py에 영향을 미치는 고위험High-Severity 분석 거부Denial-of-analysis 취약점으로, 샘플을 제출할 수 있는 공격자가 샌드박스에서 샘플이 실행될 때 MongoDB BSON 한도 또는 orjson 재귀 오류를 트리거하는 심층 중첩 또는 과대한 동작 데이터를 생성하여 불완전하거나 누락된 동작 분...