CVE-2021-44228

CVE-2021-44228 Mass recognition tool for CVE-2021-44228 need to fix Crypto library to work with Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py replace line 77 : t = time.clock with : t = time.perfcounter how to use : sudo python3 192.168.0.0/8 mylog.txt...

RepoReaper

RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...

intercept

!zreadhttps://img.shields.io/badge/AskZread-.svg?style=plastic&color=00b0aa&labelColor=000000&logo=data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMTYiIGhlaWdodD0iMTYiIHZpZXdCb3g9IjAgMCAxNiAxNiIgZmlsbD0ibm9uZSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj4KPHBhdGggZD0iTTQuOTYxNTYgMS42MDAxSDIuMjQxNTZD...

xpfarm

XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...

agent-sweep

AgentSweep Find and redact secrets in your AI coding agent's local history. Fully offline. Prevention: Don't paste API keys into cloud-backed AI agents at all — the key transits the provider's servers before it ever hits your disk. If you already did: agentsweep removes the remaining local attack...

spyre

Spyre ...シンプルで自己完結型のモジュール式ホストベースIOCスキャナ Spyre は、YARA パターンマッチングエンジンとその他のスキャンモジュールを中心に構築されたシンプルなホストベースIOCスキャナです。このプロジェクトの主な目標は、YARAルールやその他の侵害指標を容易に運用可能にすることです。 ユーザーは独自のルールセットを用意する必要があります。awesome-yara リポジトリでは、利用可能な無料のYARAルールセットの概要が提供されています。 Spyre...

w12scan

w12scan W12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use. W12scan is also my graduation design. : Here is a web source program and the scanning end is at w12scan-client. Thinking Based on python3 + django + elasticsearch + redis...

ChopChop

ChopChop ChopChop 是一个用于Web应用程序动态应用程序安全测试的命令行工具，最初由米其林CERT编写。 其目标是扫描多个端点，识别通过Web根目录暴露的服务/文件/文件夹。检查/签名在配置文件中声明（默认：chopchop.yml），完全可配置，尤其适合开发者。 "Chop chop" 是一个源于粤语的短语。"Chop chop" 意为"赶快"，表示某事应该立即完成，刻不容缓 。 目录 构建 使用 可用标志 高级用法 创建新的检查/签名 外部库 演讲 许可证 作者 构建 我们尽量简化构建过程，希望以下步骤即可完成： root@kitploit: $ go mod...

datasploit

Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlate and collaborate the results, show them in a consolidated manner. Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

rsdl

rsdl Subdomain Scanner v.2 Ping方式によるサブドメインスキャン & HTTP/HTTPSステータスチェック。 フラグ| 値| 説明 ---|---|--- --hostname| example.com| スキャン対象のドメイン。 --output| | 出力をドメイン名で記録します。 --list| /tmp/lists/example.txt| サブドメインのリストファイル。 新機能 HTTP/HTTPSステータスのチェック HTTP/HTTPSリクエストのタイムアウト時間を更新 スキャン速度の高速化 IPアドレスのスキャン...

Project-Eyes-On

Project Eyes On v3.0（グローバル監視） 開発者: Y0oshi Instagram: @rde0 「大規模IPカメラスキャンのための統合インテリジェンスツール」 概要 Project Eyes On は、世界中の公開IPカメラを特定するために設計された超高速マルチスレッド監視ツールです。2つの強力なエンジンを組み合わせています： 1. ディレクトリスクレイパー : Insecamからフィードを収集します。 2. ディープウェブドーキング : GoogleおよびYahooの検索ドーキングを使用して、公開ディレクトリにリストされていない隠しカメラを見つけます。 機能...

foxguard

foxguard 快速本地安全扫描，针对代码、密钥、依赖和加密风险。 root@kitploit: npx foxguard . 为什么选择 foxguard 200+ 内置规则覆盖12种源语言，外加配置和清单检查 14种语言的污点追踪，支持Python、JavaScript、Go、Java、Ruby、PHP、C和Kotlin的跨文件分析 快速本地和CI扫描，支持差异模式，用于查看“此分支添加了什么？” 密钥扫描、基于OSV的依赖扫描和后量子加密审计 兼容Semgrep/OpenGrep的YAML桥接，可加载约98%的公共规则库（覆盖率报告） !htt...

Reconky-Automated_Bash_Script

Reconky-自动化Bash脚本 root@kitploit: \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / 用法 ./reconky.sh 关于 Reconky 是一个用 bash 编写的脚本，用于自动化侦察和信息收集任务。该 Bash...

mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

PentestBro

Description Experimental tool for Windows. PentestBro combines subdomain scans, whois, port scanning, banner grabbing and web enumeration into one tool. Uses subdomain list of SecLists. Uses nmap service probes for banner grabbing. Uses list of paths for web enumeration. Example scan of...

Breacher

Breacher A script to find admin login pages and EAR vulnerabilites. Features Multi-threading on demand Big path list 482 paths Supports php, asp and html extensions Checks for potential EAR vulnerabilites Checks for robots.txt Support for custom patns Usages Check all paths with php extension...

PCWT

PCWT A web application that makes it easy to run your pentest and bug bounty projects. Description The app provides a convenient web interface for working with various types of files that are used during the pentest, automate port scan and subdomain search. Main page Project settings Domains...

CVE-2021-22986

CVE-2021-22986 This is a simple script to determine whether an IP is vulnerable to this CVE from a mass ip addresses. For finding mass ip addresses use shodan or zoomeye cli. Save all the ips in a file name here "testips.txt"...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...