5777 matches found
PS2
PS2 A port scanner written purely in PowerShell. Disclaimer This tool was designed for legal purposes only; users are responsible for ensuring that their use of this tool complies with all appliable laws. By using this tool, you take full responsibility for any actions you perform. Neither NCC...
pcap-burp
This project provides a Burp Suite extension for importing and passively scanning Pcap/Pcapng files with Burp. It can be used in cases where a HTTP client does not support proxying but it would be useful to scan, inspect or replay the HTTP traffic using Burp. Building from Source optional The Ant...
spfmap
Spfmap A mass domain scanner to check for SPF and DMARC records...
local-log4j-vuln-scanner
Simple local log4j vulnerability scanner Written in Go because, you know, "write once, run anywhere." This is a simple tool that can be used to find vulnerable instances of log4j 1.x and 2.x in installations of Java software such as web applications. JAR and WAR archives are inspected and class...
vigolium v0.4.4
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
openvas-scanner v23.50.24
OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...
checkov v3.3.16
Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...
log4j-fuzzer
log4j-fuzzer For Single Target root@kitploit: chmod +x log4j After That Command Simply Put Your Target root@kitploit: ./log4j YOURTARGETURL YOURREMOTESERVER For Multiple Target Gether All Domain, Subdomain, Directroty in a list After That Simply Command This root@kitploit: chmod +x log4j You Can...
CVE-2026-84810
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...
EUVD-2026-70226
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious pycache entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports...
EUVD-2026-70225
claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...
arp-scan
arp-scan Acerca de arp-scan es una herramienta de escaneo de red que utiliza el protocolo ARP para descubrir y realizar el fingerprinting de hosts IPv4 en la red local. Está disponible para Linux, BSD, macOS y Solaris bajo la licencia GPLv3. Este es README.md para la versión 1.10.1-git de arp-sca...
vet v1.19.0
Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...
dalfox v3.2.2
Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...
puncia v0.36
PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...
DefaScan
Defascan: Defacement Scan and Alert root@kitploit: | \ / | | | | |/ \ | / / |/ / | ' \ | || | / | | \ \ | | | | | | |/ || ,|/\,|| || Defascan is a python tool that will scrape the internet for your given google dork queries using APIs and alert using the email provied during rutime. Installation...
ship-safe v9.7.5
The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...
promptfoo v0.122.1
Promptfoo: LLM evals & red teaming promptfoo is a CLI and library for evaluating and red-teaming LLM apps. Stop the trial-and-error approach - start shipping secure, reliable AI apps. Website · Getting Started · Red Teaming · Documentation · Discord Promptfoo is now part of OpenAI. Promptfoo...
DakshSCRA v0.38-beta
Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist tool is built to enhance the efficiency of the source code review process, providi...