PT-2026-89403

OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...

AutoBrowser

AutoBrowser 4.0 AutoBrowser is a tool written in python for penetration testers. The purpose of this tool is to create reportJson file and screenshots of http/s based ports on the network. you can choose between analyze Nmap reportXML file -oX or scan with Nmap, then the tool automaticly Check th...

strutser

strutser This program checks for CVE-2017-5638. Usage root@kitploit: Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP...

device-pharmer

device-pharmer Concurrently open either Shodan search results, a specified IP, IP range, domain, or list of IPs from a text file and print the status and title of the page if applicable. Add the -u and -p options to attempt to login to the page first looking for a form login and failing that,...

vulscan

vulscan - Escaneo de vulnerabilidades con Nmap Introducción Vulscan es un módulo que mejora nmap para convertirlo en un escáner de vulnerabilidades. La opción -sV de nmap habilita la detección de versiones por servicio, la cual se utiliza para determinar posibles fallos según el producto...

skipfish

=========================================== skipfish - web application security scanner http://code.google.com/p/skipfish/ Written and maintained by: Michal Zalewski [email protected] Niels Heinen [email protected] Sebastian Roschke [email protected] Copyright 2009 - 2012 Google In...

Rock-ON

Rock-ON A One-Shoot Killer Rock-On is a all in one recon tool that will help your Recon process give a boost. It is mainley aimed to automate the whole process of recon and save the time that is being wasted in doing all this stuffs manually. A thorough blog will be up in sometime. Stay tuned for...

freddy

Freddy, el asesino de la serialización - Buscador de errores de deserialización Una extensión de Burp Suite para ayudar a detectar y explotar librerías/API de serialización. Esta útil extensión fue desarrollada originalmente por Nick Bloor @nickstadb para NCC Group y se basa principalmente en el...

jsfinder

Características | Instalación | Uso | Demo | PENDIENTES| Contacto jsFinder es una herramienta de línea de comandos escrita en Go que escanea páginas web para encontrar archivos JavaScript enlazados en el código fuente HTML. Busca cualquier atributo que pueda contener un archivo JavaScript por...

Log4JHunt

Log4JHunt An automated, reliable scanner for the Log4Shell CVE-2021-44228 vulnerability. Video demo: Usage Here the help usage: root@kitploit: $ python3 log4jhunt.py +--------------+ Log4JHunt +--------------+ + Log4jHunt by RedHunt Labs - A Modern Attack Surface ASM Management Company + Author:...

CVE-2025-6543_CitrixNetScaler_PoC

CVE-2025-6543CitrixNetScalerPoC Multi-host, multi-port scanner and auditor for CVE-2025-6543-affected NetScaler devices. Supports SNMP and SSH enumeration with optional CSV reporting and exploit stubs. 🔐 GitHub Repository Description CVE-2025-6543 Enhanced Checker Multi-host, multi-port scanner a...

flumberboozle

flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...

NetworkAlarm

NetworkAlarm A command-line tool to monitor local network traffic for possible security vulnerabilities. Warns user against possible nmap scans, Nikto scans, credentials sent in-the-clear, credit card numbers sent in-the-clear, and shellshock attacks. Currently supports live monitoring and networ...

coronary

coronary Tests CIDR blocks for OpenSSL CVE-2014-0160 aka Heartbleed. Inspired by Jonathan Rudenberg's heartbleeder. Using root@kitploit: $ coronary 192.168.1.0/24 Scanning: 192.168.1.11/22 VULNERABLE - 192.168.1.71:443 has the heartbeat extension enabled and is vulnerable to CVE-2014-0160 SECURE ...

CVE-2025-55182

RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extension CVE-2025-55182 & CVE-2025-66478 This repository contains a security research toolkit designed to detect and demonstrate PoC the recently disclosed RCE vulnerabilities affecting React Server Components RSC / Next.js. The toolkit include...

BugBountyScanner

BugBountyScanner A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use. Low on resources, high on information output. Helpful? BugBountyScanner helped you net a bounty? Description ⚠ Note: Using the script over a VPN is highly recommended. It's recommended to run...

pidrila

PIDRILA Versión actual: v0.1.0 2020.11.08 Resumen PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer es un prototipo de escáner de rutas web asíncrono realmente rápido desarrollado por el equipo de BrightSearch para todos los rastreadores éticos de la red...

CVE-2024-32113

CVE-2024-32113 Apache OFBIZ Batch Scanning 注意：このツールを違法攻撃に使用することを支援するものではありません。このツールは技術的な交流のみを目的としています。 Note: This tool does not support any illegal attacks. It is intended solely for technical exchange. 注意：本人不支持任何人使用本工具进行非法攻击，本工具仅作为技术交流。 Help root@kitploit: CVE-2024-32113 Batch Scanning optional...

contrast

CodeSec by Contrast Security CodeSec delivers: The fastest and most accurate SAST scanner. Immediate and actionable results — scan code and serverless environments. A frictionless and seamless sign-in process with GitHub or Google Account. From start to finish in minutes. By running a scan on you...

red-detector

Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...