intelspy

Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...

gitGraber

About gitGraber gitGraber is a tool developed in Python3 to monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon AWS, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe, Twilio... How it works ? It's important to understand th...

kube-hunter

Notice kube-hunter is not under active development anymore. If you're interested in scanning Kubernetes clusters for known vulnerabilities, we recommend using Trivy. Specifically, Trivy's Kubernetes misconfiguration scanning and KBOM vulnerability scanning. Learn more in the Trivy Docs. kube-hunt...

detect-secrets

detect-secrets About detect-secrets is an aptly named module for surprise, surprise detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible ,...

Port-enumeration

Port enumeration Have you ever faced with the lack of possibility of using NMap? For instance if you have reverse shell as an unprivileged user and there are no useful tools preinstalled? This is a small script which will help you to scan a network if you have nothing. Usage example: root@kitploi...

DivideAndScan

DivideEt Impera And Scan and also merge the scan results Featured Projects...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2...

CobaltStrikeScan

CobaltStrikeScan Scan files or process memory for Cobalt Strike beacons and parse their configuration. CobaltStrikeScan scans Windows process memory for evidence of DLL injection classic or reflective injection and/or performs a YARA scan on the target process' memory for Cobalt Strike v3 and v4...

AttackSurfaceManagement

ABOUT: Discover the attack surface and prioritize risks with our continuous Attack Surface Management ASM platform - Sn1per Professional. For more information, go to https://sn1persecurity.com. FEATURES: Attack Surface Discovery Easily discover the attack surface IPs, domain names, open ports, HT...

astsu

astsu How it works Scan common ports Send a TCP Syn packet to the destination on the defined port, if the port is open, use an nmap scan to check the service running on the port and prints all the ports found. Discover hosts in network Uses as a base the router's ip to map all possible ips. It th...

scan-for-webcams

scan-for-webcams 📷 中文文档 Note I switched to a new method of installing this program for a better developer experience and better modifiability. As a result, the PYPI package scan-for-webcams is not maintained anymore, and should be considered deprecated. btw: we have a discord channel ! join Table...

XAttacker

XAttacker V2.5 Tool FREE XATTACKER A Massive Exploiting Tool capable of scanning and auto-exploiting vulnerabilities in web applications, By providing a target website to the tool, it auto detects its’ architecture if using a Content Management Service CMS and tries to find vulnerabilities based ...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

dufflebag

Dufflebag Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

sharingan

Sharingan Sharingan is a recon multitool for offensive security / bug bounty WIP, will I ever finish? Who knows Cloning for development Outside of your gopath git clone https://github.com/leobeosab/sharingan Installing go get github.com/leobeosab/sharingan/cmd/sharingancli Dependencies NMap Go...

Judge-Jury-and-Executable

Judge Jury and Executable A Threat Hunting Forensics Tool Features: Scan a mounted filesystem for threats right away Or gather a system baseline before an incident, for extra threat hunting ability Can be used before, during or after an incident For one to many workstations Scans the MFT, bypassi...

bearer

Scan your source code against top security and privacy risks. Bearer is a static application security testing SAST tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks. Bearer offers a free, open solution, Bearer CLI, and a...

webtech

WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: root@kitploit: pip install webtech It can be also installed via setup.py: root@kitploit: python setup.py install --user Burp Integration Download Jython 2.7.0...

PentestBro

Description Experimental tool for Windows. PentestBro combines subdomain scans, whois, port scanning, banner grabbing and web enumeration into one tool. Uses subdomain list of SecLists. Uses nmap service probes for banner grabbing. Uses list of paths for web enumeration. Example scan of...