massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

pwncat

Docs | Install | TL;DR | Features | Behaviour | Usage | Examples | FAQ | Contributing | Disclaimer | License pwncat...

catalyst

Catalyst Speed up your reactions Website - The Catalyst Handbook Documentation - Demo Catalyst is an incident response platform. It can help to automate your alert handling and incident response procedures. Features Ticket Alert & Incident Management Tickets are the core of Catalyst. They...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

CVE-2026-53264

CVE-2026-53264 Description: https://vulners.com/cve/CVE-2026-53264 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab...

linux-smart-enumeration

First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...

grapheneX

grapheneX In computing, hardening is usually the process of securing a system by reducing its surface of vulnerability, which is larger when a system performs more functions; in principle a single-function system is more secure than a multipurpose one. Reducing available ways of attack typically...

pwntools

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible...

uac-a-mola

uac-a-mola Installation To install uac-a-mola you have to perform the following actions: 1. Download and install python 2.7.x for Windows taking into account your particular infrastructure, you can find the binaries here: https://www.python.org/downloads/ 2. Add the python path to the path...

SSH-Honeypot

SSH-Honeypot Create Basic SSH Honeypot With Python For Info See Our Blog In : http://squnity.com/?p=1437 مجتمع عربي للحماية وامن المعلومات...

Mega-Bot

Mega Bot ☣ Scanner & Auto Exploiter What's Mega Bot ? root@kitploit: from MegaBot import print """ Tool Scanner Tool Auto Exploiter """ About Mega Bot root@kitploit: from MegaBot import print """ +----------------------------------+----------------------------------+ 1 X4PriV8 V1 | 22 XAttacker 2...

Locksmith

Locksmith root@kitploit: | | | | |/ | | | | | | || | || | | \ | | | | | | | | .--. .--. .--. /.-. '----------. /.-. '----------. /.-. '----------. '-' .---'-''-'-' '-' .--'--''-'-' '-' .--'--'-''-' '--' '--' '--' 一个用于查找并修复 Active Directory 证书服务中常见错误配置的小工具。 目录 1. 安装 2. 运行 Locksmith 1. 模式 0 2. 模式...

Grouper2

GROUPER2 IS DEPRECATED, GOTO https://github.com/Group3r/Group3r INSTEAD This place is not a place of honor... no highly esteemed deed is commemorated here... nothing valued is here. What is here was dangerous and repulsive to us. This message is a warning about danger...

vuln-list-nvd

vuln-list-nvd NVD...

OAuth-Request-Crafter

OAuth-Request-Crafter OAuth Request Crafter is a tool that helps you to play with OAuth signature protected URLs. Features Support GET,POST,PUT and DELETE Proxy the Request Tamper URL, Parameters & Headers on the GO Add additional Headers and Cookie Why? When dealing with OAuth signature protecte...

bypass-url-parser

Bypass Url Parser 该工具测试多种URL绕过技术，以访问40X保护的页面。 如果你好奇为什么这段代码只不过是一个简陋的curl封装，原因如下： 大多数Python请求库会对URL/路径/参数进行编码/解码，而我讨厌这一点。 如果我提交原始字符，我就要发送原始字符。 如果我发送一个奇怪的路径，我就想要它保持奇怪，而不是被标准化。 在Python中，要在不丢失库的所有好处（如解析、SSL/TLS封装等）的情况下实现这一点，出乎意料地困难。 所以，像我一样，使用curl作为后端，这就行了。 此外，该工具也可以作为库使用，参见libsampleusage.py 安装...

ShodanFortiOS

This repository does not have a README...

vuln-list-debian

vuln-list-debian Debian Security Tracker...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

monkey365

Monkey365 是一个面向 Microsoft 365、Azure 和 Microsoft Entra ID 的开源安全评估框架。它帮助安全专业人员、顾问、管理员和事件响应人员识别错误配置、审查云安全态势，并依据行业安全最佳实践和合规标准评估环境。 Monkey365 简化了 Microsoft 云安全评估，无需用户学习复杂的 API、安装多个 Microsoft 模块或浏览多个管理门户。 功能特性 自带依赖的自包含 PowerShell 模块 不依赖外部 Microsoft 模块或工具，包括 ExchangeOnlineManagement、Az PowerShell / Azur...