Apkatshu

Apkatshu Apkatshu its a Tool for extracting urls , emails , ip address , and interesting data from APK files root@kitploit: Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for...

fses

fses 搜索引擎爬虫 - 用于从搜索引擎抓取 URL 的 Python 库 我们抓取的搜索引擎 root@kitploit: Ask Bing DuckDuckGO UOL Yahoo 安装 root@kitploit: git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt 用法 使用 Ask 进行简单搜索 root@kitploit: from searchEngines.ask import ask print "Ask Search" query =...

RTF-Cleaner

RTF-Cleaner RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically. Use this tool to statically find URLs in obfuscated RTF documents. Usage: .\rtfCleanerUniversal.ps1 path-to-file Example: .\rtfCleanerUniversal.ps1 'C:\Users\yams\Downloads\invoiceForYams.doc' If the built in...

wordlist_generator

wordlistgenerator Tool wordlistgenerator generates unique to your target wordlist with techniques mentioned in tomnomnom's video "Who, What, Where, When". It takes URLs from gau to extract directories, file names or words on pages. As additional feature it can extract HTML comments. By default to...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

urx

Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...

cc.py

cc.py Extracting URLs of a specific target based on the results of "commoncrawl.org". Updated to v.0.3 | Whats new: 65% faster proceeding Specify a year via -y/--year, e.g.: -y 2018 Specify an output file via -o/--out, e.g.: -o whatever.txt Crawl all pages for a specific index -i/--index, e.g.:...

pmg

pmg Extract parameters/paths from urls usage : $ cat urls.txt | python3 PmG.py results Save results $ cat urls.txt | python3 PmG.py ResultsFile.txt here you can add more parameters/paths using regex :D root@kitploit: wordlist = r'url=|password=|link=|u=|word=|username=|linkid=', r'+CSCOU+',...

mavd

mavd Mobile Application Vulnerability Detection Receives a domain or APK name from CLI, identifies most applications tied to the domain and downloads the APKs locally. It then reverses the APK to a jar file using dex2jar, extracts the class files and objects then searches the code for 'secret' ty...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes Audio Leakage via URL Extraction Fixed & Rewarded 🛡️ Vulnerability Summary In 05/2025, I discovered a vulnerability in Instagram Web that allowed any user to extract the original video file from a Note and access the background audio , which was not meant to be publicly...

galer

galer root@kitploit: /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 一个通过爬取 HTML 属性快速获取 URL 的工具。灵感来源于 @omespino 的推文，该推文展示了通过 Chrome DevTools 协议执行 JavaScript 来提取 src、href、url 和 action 值的可能性。 资源 安装 从二进制文件安装 从源码安装 从 GitHub 安装 用法 基本用法 参数 示例 单个 URL 从列表中获取 URL 从标准输入获取 作为库使用 待办事项 帮助与 Bug 报告 许可证...

misp-extractor

MISP 提取器 该代码连接至指定的 MISP（恶意软件信息共享平台）服务器，解析指定数量的事件，并将事件中发现的 IP 地址、URL 和 MD5 哈希值分别写入三个独立文件。 用法 使用此脚本需要提供 MISP 实例的 URL 及有效的 API 密钥。随后可调用 MISPConnector.run 方法检索属性并保存至文件。 执行代码请运行以下命令： root@kitploit: python3 mispconnector.py --misp-url --misp-key --limit 支持的属性类型 MISPConnector 类目前支持以下属性类型： ip-src ip-dst...

RTF-Cleaner

RTF-Cleaner Limpia RTF, intenta extraer URL de muestras RTF maliciosas usando CVE-2017-0199 y CVE-2017-8759...

unfurl

unfurl Extrae partes de las URLs proporcionadas en stdin Instalación Si tienes Go instalado y configurado: root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest En caso contrario, descarga el último binario para tu plataforma, extráelo y muévelo a algún lugar de tu $PATH p. ej. /usr/bin/...

jsluicepp

📄 Table of Contents 👋 Introduction 🛠️ Setup 📝 Usage 📜 Features Monitor URLs Send to Repeater Secrets Secret Notifications Copy URL Positive/Negative Match In-scope only In-line Tags Hide Duplicates Show Parameterized Import/Export Save Settings 🤝 Contributors 👋 Introduction jsluice++ is a Burp...

jsluice

jsluice jsluice is a Go package and command-line tool for extracting URLs, paths, secrets, and other interesting data from JavaScript source code. If you want to do those things right away: look at the command-line tool. If you want to integrate jsluice's capabilities with your own project: look ...

eml_parser has a URL extraction bypass via HTML entities in URLs

Summary emlparser performs certain validations on potential URL strings to discard bogus values. In versions prior to 3.0.2, this validation was performed before unescaping any HTML entities that might occur in the string. This caused the library to wrongfully reject valid URLs that use HTML...

CVE-2026-55618 eml_parser: URL extraction bypass via HTML entities in URLs

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...

EUVD-2026-65697

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...

CVE-2026-55618 eml_parser: URL extraction bypass via HTML entities in URLs

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...