PF_RING

PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

turbo-intruder

Turbo Intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require exceptional speed, duration, or complexity. The following features set it apart: Fast - Turbo...

pepeScraper

pepeScraper - 4chan scraper A complete scraper for 4chan Now that's fast. pepeScraper is a scraper that uses context for your searches and returns exactly what you want. I'm learning how to make an item look cooler than it actually is Enter keywords, anything you can think of just be careful what...

ator

Authentication Token Obtain and Replace Extender Introduction In the world of web security testing, automation is key, and Burp Suite is the go to choice. However, to truly harness the power of Burp for automated scanning, you need the right plugins. That's where ATOR comes in. This open-source...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

aiodnsbrute

Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

catalyst

Catalyst Speed up your reactions Website - The Catalyst Handbook Documentation - Demo Catalyst is an incident response platform. It can help to automate your alert handling and incident response procedures. Features Ticket Alert & Incident Management Tickets are the core of Catalyst. They...

etherify

Etherify - bringing the ether back to ethernet c 2020 Jacek Lipkowski SQ5BPF [email protected] 2020 RC3 Conference talk: https://www.youtube.com/watch?v=7ek994-fwNE Etherify 1 and 2: https://lipkowski.com/etherify with RPI 4 Etherify 3: https://lipkowski.com/etherify3/ with no ethernet cable...

Pymap-Scanner

Pymap-Scanner Features root@kitploit: 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. Installation Modules root@kitploit: $ Pyqt4 $ Nmap RequirementsThird root@kitploit: +xsltproc...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...

rdpscan

rdpscan for CVE-2019-0708 bluekeep vuln This is a quick-and-dirty scanner for the CVE-2019-0708 vulnerability in Microsoft Remote Desktop. Right now, there are about 900,000 machines on the public Internet vulnerable to this vulnerability, so many are to expect a worm soon like WannaCry and...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery

Unauthenticated Server-Side Request Forgery SSRF vulnerability exists in the BrightSign digital signage media player affecting the Diagnostic Web Server DWS. The application parses user supplied data in the 'url' GET parameter to construct a diagnostics request to the Download Speed Test service...

CVE-2026-89438

A flaw was found in the Linux kernel, specifically within the Intel Speed Select Technology ISST component. This vulnerability arises from insufficient validation of input values, such as logical CPU ID and CLOS ID, used in the core power feature. A local attacker could exploit this by providing...

ImpossibleTravelLogAnalysis

NCC Group의 Impossible Travel 로그 분석 소개 IP 주소 지리 정보를 통해 불가능한 이동impossible travel을 탐지하는 기본 로그 분석 도구 예상 데이터 형식 다음 헤더를 포함하는 CSV 파일 root@kitploit: When,User,Event,IP 다음 형식을 따릅니다 root@kitploit: 2019-04-09 00:00:00,user2493,AUTHSUCCESS,101.193.251.145 필드 구조는 다음과 같습니다: When : YYYY-MM-DD HH:mm:SS 형식 User :...

CVE-2026-36960

CVE-2026-36960: 웹 관리 인터페이스의 사이트 간 요청 위조CSRF CVE ID: CVE-2026-36960 날짜: 2026-04-29 발견자: Kirubel Solomne 공급업체: U-SPEED 제품: U-SPEED 라우터 펌웨어 버전: V1.0.0 CWE: CWE-352 - 사이트 간 요청 위조CSRF 설명 U-SPEED 라우터 펌웨어 V1.0.0은 관리 API 엔드포인트에 대해 CSRF 보호 메커니즘예: CSRF 방지 토큰 또는 엄격한 Origin/Referer 검증을 구현하지 않습니다. 공격자는 구성...

CVE-2026-36959

CVE-2026-36959: 로그인 엔드포인트의 속도 제한 누락 CVE ID: CVE-2026-36959 날짜: 2026-04-29 발견자: Kirubel Solomne 공급업체: U-SPEED 제품: U-SPEED 라우터 펌웨어 버전: V1.0.0 CWE: CWE-307 - 과도한 인증 시도에 대한 부적절한 제한 설명 U-SPEED 라우터 펌웨어 V1.0.0은 /api/login 엔드포인트에 속도 제한 또는 계정 잠금 보호 기능을 구현하지 않습니다. 이로 인해 로컬 네트워크의 공격자가 무제한으로 인증 시도를 수행할 수 있으며...