wappalyzer-next

Wappalyzer Next 该项目是一个命令行工具和 Python 库，利用 Wappalyzer 浏览器扩展及其指纹来检测技术。在官方开源项目停止维护后出现的其他项目使用了过时的指纹，并且对动态 Web 应用的检测准确性不足。本项目通过在 Chromium 中运行该扩展（通过 Playwright）来绕过这些限制。 安装 面向用户 面向开发者 常见问题 安装 安装 Python 包后，安装 Playwright 的 Chromium 浏览器： root@kitploit: python -m playwright install chromium 在最小化的 Linux...

graphw00f

Credits to Nick Aleks for the logo! graphw00f - GraphQL Server Fingerprinting Table of Contents How does it work? Detections GraphQL Threat Matrix Prerequisites Installation Configuration Example Usage Fingerprinting GraphQL Detecting & Fingerprinting GraphQL Support & Issues Resources How does i...

wappalyzergo

Wappalyzergo Wappalyzer 技术检测库的高性能 Go 移植版本。受 Webanalyze 启发。 数据来源于： https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer 功能特性 使用非常简单方便，代码库干净整洁。 标准化正则表达式 + 自动更新的 wappalyzer 指纹数据库。 针对性能进行优化：手动解析 HTML 以获得最佳速度。 使用 go install 安装 root@kitploit: go install -v...

RSC-Detect-CVE-2025-55182

🔎 RSC-Detect - React Server Components 检测器 轻量级检测工具，用于识别 React Server Components 和 Next.js 应用 🎯 目的 RSC-Detect 是一款简单、专注的工具，用于识别使用 React Server Components RSC 和 Next.js 框架的网站。适用于： 安全研究人员 - 在评估过程中识别技术栈 Web 开发者 - 了解竞争对手使用的框架 DevOps 团队 - 审计 Web 资产以建立技术清单 赏金猎人 - 快速指纹识别目标应用 ⚡ 快速开始 本指南支持 Windows 和 Linux...

wappalyzer-next

Wappalyzer Next This project is a command line tool and python library that uses the Wappalyzer browser extension and its fingerprints to detect technologies. Other projects that emerged after the discontinuation of the official open-source project are using outdated fingerprints and lack accurac...

ffufw

ffufw ffuf con esa salsa especial Instalación root@kitploit: go install github.com/puzzlepeaches/ffufw@latest ¿Por qué? ffufw es un envoltorio de ffuf que hace que el ataque de fuerza bruta a directorios sea más fácil e inteligente. La herramienta tiene las siguientes características: Ejecución...

CVE-Hunter-2026

CVE Hunter 2026 AI-assisted penetration testing tool that det...

nettoolbox

NetToolbox - Network Security Toolkit A comprehensive, modern...

A week in security (May 17 – May 23)

Last week on Malwarebytes Labs, we looked at a banking trojan full of nasty tricks, explained some tips and pointers for using VirusTotal, and dug into how an authentication vulnerability was patched by Pega Infinity. We also explored how a Royal Mail phish deploys evasion tricks to avoid analysi...

Osmedeus v1.5 - Fully Automated Offensive Security Framework For Reconnaissance And Vulnerability Scanning

Osmedeus allows you automated run the collection of awesome tools to reconnaissance and vulnerability scanning against the target. Installation git clone https://github.com/j3ssie/Osmedeus cd Osmedeus ./install.sh This install only focus on Kali linux, check more install on Wiki page How to use I...

Detecting Cloned Cards at the ATM, Register

Much of the fraud involving counterfeit credit, ATM debit and retail gift cards relies on the ability of thieves to use cheap, widely available hardware to encode stolen data onto any card's magnetic stripe. But new research suggests retailers and ATM operators could reliably detect counterfeit...

http-devframework NSE Script

Tries to find out the technology behind the target website. The script checks for certain defaults that might not have been changed, like common headers or URLs or HTML content. While the script does some guessing, note that overall there's no way to determine what technologies a given site is...