httprobe

httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...

sunlogin_rce

Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...

Next.js-RCE-Scanner-BurpSuite-Extension-

CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...

TCLtools

用于Cisco IOS渗透测试的TCL脚本 借助TCLtools，你可以将任何Cisco IOS硬件转变为跳板站。设置和使用都非常简单！ 功能特性 TCLmap — 端口扫描器实现（nmap） TCLproxy — 代理服务器实现 TCLproxy TCLproxy 是一款用于通过Cisco设备进行跳板渗透的工具。它能够转发任意TCP端口或启动代理服务器。 root@kitploit: TCLproxy v0.0.3 Usage: tclsh ./tclproxy.tcl -L address... -D address... Proxy server implementation...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

angryFuzzer

AngryFuzz3r Status: Development About the AngryFuzz3r project AngryFuzz3r is a collection of tools for pentesting to gather information and discover vulnerabilities of the targets based on Fuzzedb https://github.com/fuzzdb-project/fuzzdb project UrlFuzz3r-AngryFuzz3r1 Discover hidden files and...

reconspider

最先进的开源情报（OSINT）框架 ReconSpider ReconSpider 是最先进的开源情报（OSINT）框架，用于扫描 IP 地址、电子邮件、网站、组织，并从不同来源获取信息。 ReconSpider 可供信息安全研究人员、渗透测试人员、漏洞猎手和网络犯罪调查人员使用，以深入挖掘目标信息。 ReconSpider 聚合所有原始数据，在仪表板上可视化，并支持基于数据的告警和监控。 ReconSpider 还结合了 Wave、Photon 和 Recon Dog 的功能，以全面枚举攻击面。 为什么叫 ReconSpider？ ReconSpider = Recon + Spide...

reconspider

Most Advanced Open Source Intelligence OSINT Framework ReconSpider ReconSpider is most Advanced Open Source Intelligence OSINT Framework for scanning IP Address, Emails, Websites, Organizations and find out information from different sources. ReconSpider can be used by Infosec Researchers,...

vscan

vscan vulnerability scanner tool is using nmap and nse scripts to find vulnerabilities This tool puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features...

sss3

SSS3 Simple Storage Scanner SSS3 is a simple S3 Bucket testing software. It uses aws cli to search for public buckets in a list of domains/subdomains. Basic Requirements It requires aws cli installed and configured with a s3 policy defined You should have a list of previous enumerated...

trivy

📖 Documentación Trivy pronunciación es un escáner de seguridad integral y versátil. Trivy tiene escáneres que buscan problemas de seguridad, y objetivos donde puede encontrar esos problemas. Objetivos qué puede escanear Trivy: Imagen de contenedor...

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 Weblogic SearchPublicRegistries SSRFCVE-2014-4210 Exploit Script based on Python3 Usage optional arguments: -h, --help show this help message and exit -u U Single Target URL -uf UF Read URLs from file -p P Only scan specified ports -sn SN Only scan specified subnets -sf...

NtHiM

NtHiM - Super Fast Sub-domain Takeover Detection...

GTScan

GTScan The Nmap Scanner for Telco. With the current focus on telecom security, there used tools in day to day IT side penetration testing should be extended to telecom as well. From here came the motivation for an nmap-like scanner but for telco The current security interconnect security controls...

goscan

GoScan is an interactive network scanner client, featuring auto-completion, which provides abstraction and automation over nmap. Although it started as a small side-project I developed in order to learn @golang, GoScan can now be used to perform host discovery, port scanning, and service...

goscan

GoScan 是一个交互式网络扫描客户端，具有自动补全功能，为 nmap 提供抽象化和自动化。 尽管最初我只是为了学习 @golang 而开发的一个小项目，但 GoScan 现在可用于执行主机发现、端口扫描和服务枚举，不仅适用于无需隐身且时间有限的情况（如 CTF、OSCP、考试等），而且通过少量配置调整，也可用于专业渗透测试。 GoScan 尤其适用于不稳定的环境（如不可靠的网络连接、没有 "screen" 等），因为它将扫描结果及其状态保存在 SQLite 数据库中。扫描在后台运行（与主线程分离），因此即使与运行 GoScan...

magescan

Mage 扫描 这个工具的目的是评估你无法直接访问的 Magento 网站的质量和安全性。 适用于你在面试潜在开发者或评估新客户时，想提前了解你将面临什么情况。 安装 .phar 从发布页面下载 magescan.phar 文件 使用 php 命令在命令行中运行 root@kitploit: php magescan.phar scan:all www.example.com 源码 克隆此仓库 使用 composer 安装 root@kitploit: git clone https://github.com/steverobbins/magescan magescan cd...

003Recon

📌 Description This repository contains some of my scripts that i created to automate some recon processes. It performs the following things; 1. Get subdomains of a domain 2. Filter out only online domains 3. Scan the domains for CRLF 4. Check for a CORS misconfigurations 5. Test for open redirect...

CVE-2024-23113

CVE-2024-23113 This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE. How To Use 1. Create a "clients.txt" file, and import a list of all your clients IP addresses. 2. Create a "vul.txt" file. This will be used to export the scripts findings. 3. Run...

dorkbot

dorkbot 扫描 Google（或其他）搜索结果中的漏洞。 dorkbot 是一个模块化命令行工具，用于对 Google 搜索查询或其他支持来源返回的网页集合执行漏洞扫描。它分为两组模块： 索引器（Indexers） - 返回目标列表的模块 扫描器（Scanners） - 对每个目标执行漏洞扫描的模块 目标在索引时存储在数据库中。扫描后，将生成一个标准的 JSON 报告，其中包含发现的任何漏洞。索引和扫描过程可以单独运行，也可以合并到单个命令中（每种最多一个）。 快速开始 通过开发者控制台创建 Google API 凭据 创建 Google 自定义搜索引擎，并记下搜索引擎 ID，例如...