JCS

JCS Joomla Component Scanner made for penetration testing purpose on Joomla CMS JCS can help you with the latest component vulnerablities and exploits. Database can update from several resources and a Crawler has been implemented to find components and component's link. This version supports...

Sitadel

Sitadel - Web Application Security Scanner root@kitploit: | || || | / | | | | | | | | | | || | | | \ | | |/ | | | | || | | | |/ | | | | | | /|| ||\ Sitadel is basically an update for WAScan making it compatible for python = 3.11 It allows more flexibility for you to write new modules and...

garak

garak, LLM vulnerability scanner Generative AI Red-teaming & Assessment Kit garak checks if an LLM can be made to fail in a way we don't want. garak probes for hallucination, data leakage, prompt injection, misinformation, toxicity generation, jailbreaks, and many other weaknesses. If you know nm...

CVE-2026-41472-POC

CyberPanel XSS 到 RCE CVE-2026-41472 一键通过未经认证的 API 端点在 CyberPanel v2.4.3 中实现远程代码执行。 概述 该漏洞利用链串联了 CyberPanel AI Scanner 功能中的多个漏洞： 1. 未认证的数据库注入 /api/ai-scanner/callback 无需认证即可接受任意数据 2. 存储型 XSS 恶意载荷在管理后台未经净化即被渲染 3. CSRF 到 RCE XSS 劫持管理员会话以创建恶意 cron 任务 受影响版本 CyberPanel ≤ 2.4.3 时间线 2025 年 12 月 16 日 漏洞已报...

LolDriverScan

LolDriverScan LolDriverScan is a golang tool that allows users to discover vulnerable drivers on their system. This tool fetches the loldrivers.io list from their APIs and scans the system for any vulnerable drivers This project is implemented in Go and does not require elevated privileges to run...

CVE-2024-6387_Check

CVE-2024-6387Check 📜 Description CVE-2024-6387Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This script facilitates rapid scanning of multiple IP...

bluekeep

Description This script checks multiple IP addresses for the BlueKeep vulnerability CVE-2019-0708, which is a critical Remote Desktop Protocol RDP vulnerability found in older versions of Windows operating systems. The vulnerability allows attackers to remotely execute code on a target machine...

CVE-2022-37122-Exploit

CVE-2022-37122 Path Traversal Scanner A robust and feature-rich scanner for detecting the Carel pCOWeb logdownload.cgi path traversal vulnerability CVE-2022-37122. Designed for security researchers and authorized penetration testers. 🚨 Important Notice EDUCATIONAL / BUG BOUNTY USE ONLY This tool ...

CVE-2020-5902-Scanner

CVE-2020-5902-Scanner Automated F5 Big IP Remote Code Execution CVE-2020-5902 Scanner Written In Python 3 Vulnerability Description F5 released a Critical Remote Code Execution vulnerability CVE-2020-5902 on 30th June 2020 that affects several versions of Big IP. Attacker can easily exploit RCE &...

xpfarm

XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...

dllspy

DllSpy Scans compiled .NET assemblies to discover input surfaces HTTP endpoints, SignalR hubs, WCF services, gRPC services, Razor Pages, Blazor components, Azure Functions, OData endpoints, check authorization configuration, and flag security issues — all without running the application. Availabl...

spyre

Spyre ...シンプルで自己完結型のモジュール式ホストベースIOCスキャナ Spyre は、YARA パターンマッチングエンジンとその他のスキャンモジュールを中心に構築されたシンプルなホストベースIOCスキャナです。このプロジェクトの主な目標は、YARAルールやその他の侵害指標を容易に運用可能にすることです。 ユーザーは独自のルールセットを用意する必要があります。awesome-yara リポジトリでは、利用可能な無料のYARAルールセットの概要が提供されています。 Spyre...

spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

WhatWeb

WhatWeb - Escáner web de nueva generación Desarrollado por Andrew Horton urbanadventurer y Brendan Coles bcoles Última versión: v0.6.4. 3 de abril de 2026 Licencia: GPLv2 Este producto está sujeto a los términos detallados en el acuerdo de licencia. Para obtener más información sobre WhatWeb,...

rsdl

rsdl Subdomain Scanner v.2 Ping方式によるサブドメインスキャン & HTTP/HTTPSステータスチェック。 フラグ| 値| 説明 ---|---|--- --hostname| example.com| スキャン対象のドメイン。 --output| | 出力をドメイン名で記録します。 --list| /tmp/lists/example.txt| サブドメインのリストファイル。 新機能 HTTP/HTTPSステータスのチェック HTTP/HTTPSリクエストのタイムアウト時間を更新 スキャン速度の高速化 IPアドレスのスキャン...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identify potential vulnerabilities with CVE-2017-7921 exploit checks or by testing the /onvif-http/snapshot?auth=YWRtaW46MTEK URI on target IP addresses using a multi-threaded approach for faster results. Requirements root@kitploit: python3 Python Pacakges = requests,...

CVE-2021-22986

CVE-2021-22986 This is a simple script to determine whether an IP is vulnerable to this CVE from a mass ip addresses. For finding mass ip addresses use shodan or zoomeye cli. Save all the ips in a file name here "testips.txt"...

killshot

This project is no longer maintained ! KILLSHOT A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner Why KillShot? You can use this tool to spider your website, gather important information, and automate data collection using tools such as WhatWeb, Host,...

killshot

该项目已不再维护！ KILLSHOT 一个渗透测试框架、信息收集工具和网站漏洞扫描器 为什么选择KillShot？ 您可以使用此工具爬取您的网站，收集重要信息，并利用 WhatWeb、Host、Traceroute、Dig、Fierce 和 WafW00f 等工具自动收集数据。它还能帮助您识别 CMS，并通过 CMS 漏洞扫描器和 Web 应用漏洞扫描器发现网站中的漏洞。 此外，KillShot 可以使用 Nmap 和 Unicorn 自动执行多种类型的扫描。使用此工具，您还可以生成简单的 PHP 后门，手动上传，并通过 KillShot 连接到目标。 此工具还包含一个简单的 Ruby...

react2shell-scanner

react2shell-guard CVE-2025-55182 のセキュリティスキャナー - React Server Components における重大な（CVSS 10.0）認証不要のリモートコード実行脆弱性です。 ⚠️ 免責事項 これはセキュリティスキャナー であり、エクスプロイトツールではありません 。開発者やセキュリティチームがプロジェクト内の脆弱な依存関係を特定するのを支援するために設計されています。 これはコミュニティ主導のオープンソースプロジェクト...