Apkatshu

Apkatshu Apkatshu its a Tool for extracting urls , emails , ip address , and interesting data from APK files root@kitploit: Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

misp-extractor

MISP Extractor Este código se conecta a un servidor MISP Malware Information Sharing Platform y analiza un número determinado de eventos, escribiendo las direcciones IP, URLs y hashes MD5 encontrados en los eventos en tres archivos separados. Uso Para usar este script, necesitarás proporcionar la...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes Audio Leakage via URL Extraction Fixed & Rewarded 🛡️ Vulnerability Summary In 05/2025, I discovered a vulnerability in Instagram Web that allowed any user to extract the original video file from a Note and access the background audio , which was not meant to be publicly...

mavd

mavd Mobile Application Vulnerability Detection Receives a domain or APK name from CLI, identifies most applications tied to the domain and downloads the APKs locally. It then reverses the APK to a jar file using dex2jar, extracts the class files and objects then searches the code for 'secret' ty...

pmg

pmg Extract parameters/paths from urls usage : $ cat urls.txt | python3 PmG.py results Save results $ cat urls.txt | python3 PmG.py ResultsFile.txt here you can add more parameters/paths using regex :D root@kitploit: wordlist = r'url=|password=|link=|u=|word=|username=|linkid=', r'+CSCOU+',...

cc.py

cc.py Extracting URLs of a specific target based on the results of "commoncrawl.org". Updated to v.0.3 | Whats new: 65% faster proceeding Specify a year via -y/--year, e.g.: -y 2018 Specify an output file via -o/--out, e.g.: -o whatever.txt Crawl all pages for a specific index -i/--index, e.g.:...

fses

fses Fucking Search Engines Scraper - librería de Python para extraer URLs de motores de búsqueda Motores de búsqueda que scrapeamos root@kitploit: Ask Bing DuckDuck GO UOL Yahoo Instalación root@kitploit: git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt...

wordlist_generator

wordlistgenerator La herramienta wordlistgenerator genera una lista de palabras única para tu objetivo utilizando las técnicas mencionadas en el video de tomnomnom "Who, What, Where, When". Toma URLs de gau para extraer directorios, nombres de archivo o palabras de las páginas. Como característic...

galer

galer root@kitploit: /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 Una herramienta rápida para obtener URLs de atributos HTML mediante rastreo. Inspirada en el tweet de @omespino, que permite extraer valores src, href, url y action evaluando JavaScript a través del Protocolo Chrome...

unfurl

unfurl stdin으로 제공된 URL에서 조각을 추출합니다 설치 Go가 설치 및 구성되어 있다면: root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest 그렇지 않으면 플랫폼에 맞는 최신 바이너리를 다운로드하고, 압축을 푼 다음 $PATH에 포함된 디렉토리예: /usr/bin/로 이동하세요: root@kitploit: ▶ wget...

RTF-Cleaner

RTF-Cleaner RTF Cleaner versucht, URLs aus schädlichen RTF-Beispielen unter Verwendung von CVE-2017-0199 & CVE-2017-8759 zu extrahieren...

jsluicepp

📄 Indice 👋 Introduzione 🛠️ Configurazione 📝 Utilizzo 📜 Funzionalità Monitoraggio URL Invia a Repeater Segreti Notifiche segreti Copia URL Positive/Negative Match Solo in-scope Tag In-line Nascondi duplicati Mostra parametrizzati Importa/Esporta Salva impostazioni 👋 Introduzione jsluice++ è...

jsluice

jsluice jsluice è un pacchetto Go e uno strumento da riga di comando per estrarre URL, percorsi, segreti e altri dati interessanti dal codice sorgente JavaScript. Se vuoi iniziare subito: dai un'occhiata allo strumento da riga di comando. Se vuoi integrare le funzionalità di jsluice nel tuo...

RTF-Cleaner

RTF-Cleaner De-offuscatore RTF per documenti CVE-2017-0199 per trovare URL staticamente. Usa questo strumento per trovare staticamente URL in documenti RTF offuscati. Utilizzo: .\rtfCleanerUniversal.ps1 percorso-del-file Esempio: .\rtfCleanerUniversal.ps1...

urx

Estrae URL da archivi OSINT per approfondimenti sulla sicurezza. Urx è uno strumento da riga di comando progettato per raccogliere URL da archivi OSINT, come Wayback Machine e Common Crawl. Costruito con Rust per l'efficienza, sfrutta l'elaborazione asincrona per interrogare rapidamente molteplic...

eml_parser has a URL extraction bypass via HTML entities in URLs

Summary emlparser performs certain validations on potential URL strings to discard bogus values. In versions prior to 3.0.2, this validation was performed before unescaping any HTML entities that might occur in the string. This caused the library to wrongfully reject valid URLs that use HTML...

CVE-2026-55618 eml_parser: URL extraction bypass via HTML entities in URLs

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...

EUVD-2026-65697

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...

CVE-2026-55618 eml_parser: URL extraction bypass via HTML entities in URLs

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...