410803 matches found
AcuAutomate
AcuAutomate AcuAutomate is an unofficial Acunetix CLI tool that simplifies automated pentesting and bug hunting across extensive targets. It's a valuable aid during large-scale pentests, enabling the easy launch or stoppage of multiple Acunetix scans simultaneously. Additionally, its versatile...
requests-ip-rotator
Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries โ improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...
urlhunter
root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named...
LangAlpha v2026.09.01
A vibe investing agent harness LangAlpha is built to help interpret financial markets and support investment decisions. English ๏ฝ ็ฎไฝไธญๆ ๏ฝ ๆฅๆฌ่ช Getting Started โข API Docs โข Agent Core โข Backend โข Web โข TUI โข Skills โข MCP Pin a curated news brief from the dashboard, kick off idea generation, and...
BugChecker
BugChecker Introduction BugChecker is a SoftICE-like kernel and user debugger for Windows 11 and Windows XP as well: it supports Windows versions from XP to 11, both x86 and x64. BugChecker doesn't require a second machine to be connected to the system being debugged, like in the case of WinDbg a...
bing-ip2hosts
Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...
linux-smart-enumeration
First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...
fwknop
fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...
CVE-2020-28018
CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...
efiXplorer
efiXplorer - IDA plugin and loader for UEFI firmware analysis and reverse engineering automation Documentation Plugin wiki Loader wiki Build instructions and installation Publications efiXplorer: Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis Static...
flare-learning-hub
FLARE Learning Hub The FLARE Learning Hub freely distributes quality reverse engineering and malware analysis educational content from the FLARE team. The FLARE Learning Hub modules are hosted as web-published Google Docs, which are linked in the respective descriptions below. This repository...
CMD_Bypass_Assessment
CMD Bypass Method Analysis CMD Bypass Method Analysis is a PowerShell script that automatically tests CMD bypass methods on Windows systems and evaluates the results. The script checks for various CMD bypass methods and saves the results to a text file, providing security recommendations. Use To...
pgaudit
pgAudit Open Source PostgreSQL Audit Logging Introduction The PostgreSQL Audit Extension pgAudit provides detailed session and/or object audit logging via the standard PostgreSQL logging facility. The goal of pgAudit is to provide PostgreSQL users with capability to produce audit logs often...
CVE-2021-20323
CVE-2021-20323 Description Keycloak before 18.0.0 and after 10.0.0 contains a reflected XSS on the clients-registrations endpoint. The bug is triggered by providing, by POST, a json structure with a key as parameter name that is not supported by the endpoint. The response return reflects the json...
CVE-2017-9822
CVE-2017-9822 Deserializaciรณn de cookies de DotNetNuke - Ejecuciรณn remota de cรณdigo RCE Las versiones de DotNetNuke DNN entre 5.0.0 y 9.3.0 estรกn afectadas por una vulnerabilidad de deserializaciรณn que conduce a la ejecuciรณn remota de cรณdigo RCE. DotNetNuke utiliza la cookie DNNPersonalization pa...
insmod_block
insmodblock Linux: - - - - - - - By nu11secur1ty: https://github.com/nu11secur1ty/linux-nu11secur1ty Linux: - - - - - - - By nu11secur1ty: https://gitlab.com/nu11secur1ty/linux-nu11secur1ty root@kitploit: Linux Kernel security modules by nu11secur1ty GNU GENERAL PUBLIC LICENSE Version 3, 29 June...
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
CVE-2019-16724
Vulnerability Description File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter. This exploit was tested on windows 7 Home. It will certainly break when on other...
CVE-2023-30145
Description: Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection SSTI vulnerability via the formats parameter. Affected Component: All versions that are below 2.7.0 Fixed version: Fixed Versions: 2.7.4 Step to reproduce : Detection: 1.open below...
OpenDoor
OpenDoor โ OWASP Web Recon & Directory Discovery Platform OpenDoor is an open-source CLI Recon Platform for authorized web reconnaissance, directory discovery, subdomain enumeration, fingerprints, WAF detection, bypass probing, response filtering, reporting, open-redirect checks, bounded crawl an...