Bolt

Bolt A dumb CSRF scanner Important Bolt is in beta phase of development which means there can be bugs. Any production use of this tool discouraged. Pull requests and issues are welcome. I also suggest you to put this repo on watch if you are interested in it. Workflow Crawling Bolt crawls the...

CVE-2021-41773-Scanner

CVE-2021-41773 Shodan scanner CVE-2021-41773 Shodan scanner via multithread Python script Usage: root@kitploit: git clone https://github.com/anldori/CVE-2021-41773-Scanner cd CVE-2021-41773-Scanner/ Add your private Shodan API to scan.py root@kitploit: python3 scan.py...

log4jcheck

Log4j CVE-2021-44228 checker Multithreaded checks a list of URLs with POST and GET requests in combination with parameters. Heavily inspired by NortwaveSecurity version. Set-up URLs to check The list of URLs to check should be in the following format csv: root@kitploit:...

guarddog

GuardDog GuardDog is a CLI tool that identifies malicious PyPI and npm packages, Go modules, Rust crates, RubyGems, GitHub actions, or VSCode extensions. It runs static analysis on package source code through YARA rules and analyzes package metadata to detect supply chain attacks. What makes...

CVE-2019-0708

CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Technical details: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Metasploit Module The Metasploit module has been pulled to rapid7:master. msf5 use...

subdosec

Subdosec Subdomain takeover scanner & reconnaissance tool. Install • Usage • Web Based • Contribution • Online scan • Acknowledgments Subdosec is a fast and accurate subdomain takeover scanner with no false positives, featuring a public database of vulnerable subdomains and detailed non-vulnerabl...

ssrfuzz

SSRFUZZ SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities Why? I wanted to write a tool in Golang for concurrency I wanted to fuzz parameters for SSRF vulnerablities, as well as fuzz both paths and parameters for CRLF injections I was inspired ...

CVE-2024-36991

CVE-2024-36991 POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file. Overview This is a bulk scanning and exploitation tool for CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. This vulnerability was...

modelaudit

ModelAudit Secure your AI models before deployment. Static scanner that detects malicious code, potential backdoor indicators, and security vulnerabilities in ML model files — without ever loading or executing them. Full Documentation | Usage Examples | Supported Formats...

agentic-radar

A Security Scanner for your agentic workflows!...

NextJS-Exploit-

NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable rang...

flawfinder

Acerca de Esto es "flawfinder" por David A. Wheeler. Flawfinder es un programa simple que escanea código fuente en C/C++ e informa sobre posibles fallos de seguridad. Puede ser una herramienta útil para examinar software en busca de vulnerabilidades, y también puede servir como una introducción...

retire.js

Retire.js What you require you must also retire There are a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development, but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the...

retire.js

Retire.js Lo que requieres, también debes retirarlo Hay una gran cantidad de librerías JavaScript disponibles para usar en la Web y en aplicaciones Node.JS. Esto simplifica enormemente el desarrollo, pero debemos mantenernos al día con los parches de seguridad. "Uso de componentes con...

vuls

Vuls: Escáner de Vulnerabilidades Escáner de vulnerabilidades para Linux/FreeBSD, sin agente, escrito en Go. Twitter: @vulsen...

APKHunt

APKHunt | OWASP MASVS Static Analyzer APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential...

wphunter

WPHunter Tool ☣ WPHunter A Wordpress Vulnerability Scanner You can use this tool on your wordpress website to check the security of your website by finding the vulnerability in your website. Over 75 million websites run on WordPress. which is now powers 26% of the Web. Remarkably enough thousands...

archerysec

...

React2Shell

React2Shell - CVE-2025-55182 & CVE-2025-66478 Author: LAKSHMIKANTHAN K letchupkt Instagram: @letchupkt Version: 2.0.0 Obfuscated Date: 2025-12-07 🚀 Quick Start Run the Scanner root@kitploit: python react2shell.py That's it! The scanner will: 1. Verify its integrity 2. Decompress the code 3. Execu...

evilwaf

EvilWAF is an advanced transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing. It operates at the transport layer — it does not touch payloads, cookies, or headers from your tools. Works with any tool likeffuz, sqlmap, nuclei and etc tha...