vaas

Verdict-as-a-Service Verdict-as-a-Service VaaS is a cloud service that provides capabilities to scan files for malware and other threats. It allows you to easily integrate malware detection in your application with a few lines of code. You can use VaaS to secure any scenario where a file is...

fscan

Fscan 中文 Comprehensive intranet scanning tool for automated vulnerability assessment. Version : 2.2.0 Features Scanning Host Discovery - ICMP/Ping alive detection, B/C segment statistics for large networks Port Scanning - TCP connect scan, 133 built-in ports, port groups web/db/service/all...

astsu

astsu How it works Scan common ports Send a TCP Syn packet to the destination on the defined port, if the port is open, use an nmap scan to check the service running on the port and prints all the ports found. Discover hosts in network Uses as a base the router's ip to map all possible ips. It th...

extended-ssrf-search

Extended ssrf search This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend ...

pompelmi

pompelmi — ClamAV Antivirus Scanning for Node.js ClamAV antivirus scanning for Node.js — clean, typed, zero dependencies. pompelmi Pro — audit logs, priority support, and enterprise features. Learn more Quick Start root@kitploit: Scan a file npx pompelmi scan ./uploads/file.pdf Scan a directory n...

ApacheTomcatScanner

A python script to scan for Apache Tomcat server vulnerabilities. Features Multithreaded workers to search for Apache tomcat servers. Multiple target sources accepted: Retrieving list of computers from a Windows domain through an LDAP query to use them as a list of targets...

HOCig1_2

HOCig12 HOC IG- Automatic HOC Information Gathering Tool You do not add to Library, it automatically detects and Run Here you go.. HOCig is our first ever tool on GitHub. Here you will find 1. Header Information 2. SSL Certificate Information 3. Whois Lookup 4. Sub-domain Website 5. Robots.txt 6...

ReconDog

ReconDog Reconnaissance Swiss Army Knife Main Features Wizard + CLA interface Can extracts targets from STDIN piped input and act upon them All the information is extracted with APIs, no direct contact is made to the target Utilities Censys: Uses censys.io to gather massive amount of information...

webtech

WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: root@kitploit: pip install webtech It can be also installed via setup.py: root@kitploit: python setup.py install --user Burp Integration Download Jython 2.7.0...

CVE-2021-21972

Usage & Disclaimer VMware vCenter Server Remote Code Execution Vulnerability CVE-2021-21972 Usage: Python CVE-2021-21972.py urls.txt Each URL in urls.txt is on a single line, vulnerable addresses are output to vul.txt Affected Versions: VMware vCenter Server 7.0 series 7.0.U1c VMware vCenter Serv...

Panoptic

Panoptic Panoptic is an open source penetration testing tool that automates the search and retrieval of common log and config files through path traversal vulnerabilities. Features Async concurrent scanning with configurable worker pool --concurrency Automatic discovery of common log and...

jsubfinder

JSubFinder is a tool writtin in golang to search webpages & javascript for hidden subdomains and secrets in the given URL. Developed with BugBounty hunters in mind JSubFinder takes advantage of Go's amazing performance allowing it to utilize large data sets & be easily chained with other tools...

Evil-M5Project

Evil-M5Project Evil-M5Project is an innovative tool developed for ethical testing and exploration of WiFi networks. It harnesses the power of the M5Core2 device to scan, monitor, and interact with WiFi networks in a controlled environment. This project is designed for educational purposes, aiding...

installer

Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg:...

protections-artifacts

Protections Artifacts Elastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint. Protections-Artifacts is the home of our detection logic rules, yara, etc for Elastic Security for endpoint. At...

nuclei

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

-cve-2022-22947-

-cve-2022-22947- cve-2022-22947 spring cloud gateway batch scanning script usage: python3 springcloudpoc.py ./urls.txt Use urls.txt to store url information URL format: https://xxx.xx.xx/ one per line Original Script Reference:...

Project-Eyes-On

Project Eyes On v3.0 Global Surveillance Coded by: Y0oshi IG: @rde0 "The unified intelligence tool for mass IP camera scanning." Overview Project Eyes On is a hyper-fast, multi-threaded surveillance tool designed to locate open IP cameras across the globe. It combines two powerful engines: 1...

angryFuzzer

AngryFuzz3r Status: Development About the AngryFuzz3r project AngryFuzz3r is a collection of tools for pentesting to gather information and discover vulnerabilities of the targets based on Fuzzedb https://github.com/fuzzdb-project/fuzzdb project UrlFuzz3r-AngryFuzz3r1 Discover hidden files and...

kscan

Kscan - Lightweight Comprehensive Scanner Chinese Readme | English Readme 0 Disclaimer The author did not participate in any XX operation, please stop tracing This tool is intended only for legally authorized enterprise security construction activities and personal learning. If you need to test t...