CVE-2021-22986

CVE-2021-22986 Este es un script simple para determinar si una IP es vulnerable a este CVE a partir de direcciones IP masivas. Para encontrar direcciones IP masivas, use la CLI de shodan o zoomeye. Guarde todas las IP en un archivo llamado "testips.txt"...

CVE-2024-24919

CVE-2024-24919 检测器 一个简单的 bash 脚本，用于检测 CVE-2024-24919 漏洞。 安装 克隆仓库： root@kitploit: git clone https://github.com/am-eid/CVE-2024-24919.git cd CVE-2024-24919 chmod +x CVE-2024-24919 用法 ./CVE-2024-24919 -l ips.txt...

CVE-2021-44228_scanner

File system scanner for CVE-2021-44228 Aims to find JndiLookup.class in nearly any directory or zip, jar, ear, war file, even deeply nested. find-class-files – Clojure implementation should be able to run nearly anywhere Java can run, assuming there's enough disk space. Given a set of file system...

cowcloud

CowCloud a serverless solution to distribute work-loads in AWS CowCloud was originally created to run recon tools and vulnerability scans in a distributed way; for example, one use case might be by bug bounty hunters. This solution is intended to abstract end users from the underlying work requir...

cq

cq Code Query, a universal code security scanning tool. CQ scans code for security vulnerabilities and other items of interest to security-focussed code reviewers. It outputs text files containing references to issues found, into an output directory. These output files can then be reviewed,...

hostresolver

==================================================================================== HostResolver Current version: 1.0.0 Send comments and bug reports to: [email protected] ==================================================================================== Contents: 1. Overview 2. Using...

memgrep

Memory grep A memory searching utility across multiple processes Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/memgrep Released under AGPL see LICENSE for more information...

mnemosyne

Mnemosyne is a generic Windows-based memory scraping tool. It scans a process memory space for a search string or regex unicode and ascii then if found, spits these out either to stdout, a file or a socket to a remote listener. The utility is useful for memory scraping a process, as a...

PS2

PS2 A port scanner written purely in PowerShell. Disclaimer This tool was designed for legal purposes only; users are responsible for ensuring that their use of this tool complies with all appliable laws. By using this tool, you take full responsibility for any actions you perform. Neither NCC...

pcap-burp

This project provides a Burp Suite extension for importing and passively scanning Pcap/Pcapng files with Burp. It can be used in cases where a HTTP client does not support proxying but it would be useful to scan, inspect or replay the HTTP traffic using Burp. Building from Source optional The Ant...

React2shell-CVE-2025-55182-checker

CVE-2025-55182 React2Shell Detection Tool Detection tools for finding vulnerable React Server Components in your infrastructure. Quick Start root@kitploit: Install dependencies pip3 install requests Version detection passive, safe for production python3 checker.py -u https://your-app.com What's...

behat-config-leaks

徽章 许可证 MIT 安装...

shell-history-leaks

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install shell-history-leaks Run bellow command to check shell-history-leaks -h Configurations 2. We integrated with the...

laravel-ignition-Rxss

徽章 许可证 MIT 安装 1. 安装 Python3 和 pip 说明在此 （如果你连这个都不会，那你真的不应该使用这个工具） 通过 pip 安装 root@kitploit: pip install laravel-ignition-rxss 运行以下命令进行检查 laravel-ignition-rxss -h 配置 2. 我们集成了 Telegram API，以便在检测到漏洞时即时接收通知。 Telegram 通知 root@kitploit: laravel-ignition-rxss --chatid 打开你的 Telegram，搜索...

GuardModel

GuardModel Block malicious AI models in your pipeline with one line of YAML. GuardModel is a GitHub Action that automatically scans ML model files for malicious code, vulnerabilities, and security risks in CI/CD pipelines. It blocks dangerous models before they reach production by detecting pickl...

f5_scanner

f5scanner F5 マススキャナーおよび CVE-2020-5902 チェッカー このツールは30スレッドがハードコードされたマススキャナーです。注意して使用してください。 セットアップ方法 root@kitploit: $ python3 -m venv venv $ source venv/bin/activate $ python3 -m pip install -r requirements.txt 実行方法 単一IP python3 f5scanner.py --ip 192.168.1.1 CIDR python3 f5scanner.py --cidr...

spfmap

Spfmap 一个大规模域名扫描器，用于检查 SPF 和 DMARC 记录。...

CVE-2021-44228

CVE-2021-44228 Herramienta de reconocimiento masivo para CVE-2021-44228 Necesita corregir la librería Crypto para que funcione con Python3.9 sudo vim /usr/local/lib/python3.9/dist-packages/Crypto/Random/UserFriendlyRNG.py reemplazar línea 77 : t = time.clock con : t = time.perfcounter Cómo usar:...

CVE-2020-5902-F5-BIGIP

CVE-2020-5902-F5-BIGIP Escanea desde una lista proporcionada para F5 BIG-IP y comprueba CVE-2020-5902...

open-source-web-scanners

open-source-web-scanners GitHubおよびGitLab上のオープンソースWebセキュリティスキャナーのリストで、スター数順に並べられています。詳細な分析は提供されていません。より詳細な分析や幅広いツールについては、以下のリンクを参照してください。 一部の大規模プロジェクトは複数のリポジトリを持っていることに注意してください。その場合、2番目に関連性の高いリポジトリがすぐ下にインデントされて含まれています。 関連: open-source-llm-scanners 汎用Webスキャナー あらゆるWebサイトでさまざまな「未知の」脆弱性を検出できるツール。...