SCANNER-INURLBR

Desription Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. A PHP tool that can run on different Linux distributions helps hackers and security professionals with...

web-wordlist-generator

WEB-Wordlist-Generator NOTE : You should definitely use it for legal activities. Please See; USAGEPOLICY.md LICENSE Description WEB-Wordlist-Generator scans your web applications and creates related wordlists to take preliminary countermeasures against cyber attacks. ScreenShot Done Scan Static...

hackersh

Hackersh Hackersh "Hacker Shell" es un shell intérprete de comandos escrito en Python con sintaxis similar a Pythonect, comandos de seguridad integrados y wrappers listos para usar para varias herramientas de seguridad. Hola, mundo Aquí está el programa canónico "Hola, mundo" en Hackersh::...

BlackDir-Framework

BlackDir-Framework 1 Rastrear directorios 2 Encontrar subdominio 3 Búsqueda avanzada de dorks 4 Escanear lista de dorks 5 Escanear sitios web Xss,Sql,Html Inj 6 Búsqueda inversa de IP 7 Escaneo de puertos 8 Fuerza bruta a Wordpress 9 Enumerar usuarios de Wordpress 10 Cifrado hash...

rapidscan

🟥 RapidScan v1.2 - El Escáner de Vulnerabilidades Web Multiherramienta RapidScan ha sido portado a Python3, es decir, v1.2. El código base de Python2.7 está disponible en la sección de lanzamientos de v1.1. Descárgalo y úsalo si aún no has actualizado a Python 3. Ten en cuenta que la v1.1 Python2...

wsvuls

WSVuls Escáner de vulnerabilidades de sitios web que detecta problemas versión de servidor desactualizada y cabeceras HTTP inseguras...

webtech

WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: root@kitploit: pip install webtech It can be also installed via setup.py: root@kitploit: python setup.py install --user Burp Integration Download Jython 2.7.0...

XSSTRON

XSSTRON, Electron JS Browser To Find XSS Vulnerabilities Powerful Chromium Browser to find XSS Vulnerabilites automatically while browsing web, it can detect many case scenarios with support for POST requests too Installation root@kitploit: Install Node.js and npm https://www.npmjs.com/get-npm or...

EternalView

EternalView EternalView is an all in one basic information gathering CLI tool made purely in BASH EternalView in action CAUTION: This tool is purely for educational purposes, don't use it on any website without the permission of it's owner. The user is responsible for his/her actions! Update:...

crithit

crithit Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall...

archerysec

...

PenBox

PenBox – A Penetration Testing Framework A Penetration Testing Framework , The Hacker’s Repo our hope is in the last version we will have evry script that a hacker needs Information Gathering : nmap Setoolkit Port Scanning Host To IP wordpress user enumeration CMS scanner XSStracer - checks remot...

reconspider

El Marco de Inteligencia de Fuentes Abiertas OSINT Más Avanzado ReconSpider ReconSpider es el marco de Inteligencia de Fuentes Abiertas OSINT más avanzado para escanear direcciones IP, correos electrónicos, sitios web, organizaciones y obtener información de diferentes fuentes. ReconSpider puede...

dorkScanner

DORK SCANNER A typical search engine dork scanner that scrapes search engines with queries that you provide in order to find vulnerable URLs. Introduction Dorking is a technique used by newsrooms, investigative organisations, security auditors as well as tech savvy criminals to query various sear...

Vulnerability-assessment

Instalación y Uso Bash Copy to Nmap scripts directory sudo cp react2shell-detect.nse /usr/share/nmap/scripts/ Update script database sudo nmap --script-updatedb Single target nmap -p80,443 --script react2shell-detect.nse example.com Importante: Utilice este script únicamente contra sistemas para...

fyp

A desktop-based vulnerability assessment tool that enables security teams to scan, identify, exploit, and report vulnerabilities across web applications and networks. Overview A vulnerability assessment platform built for security administrators and analysts. It automates target scanning,...

Breacher

Breacher Un script para encontrar páginas de inicio de sesión de administrador y vulnerabilidades EAR. Características Multihilo a demanda Lista grande de rutas 482 rutas Soporta extensiones php, asp y html Verifica posibles vulnerabilidades EAR Verifica robots.txt Soporte para rutas personalizad...

CVE-2023-6895

CVE-2023-6895 Vulnerability Scanner This is a simple Python script for scanning websites to check for the CVE-2023-6895 vulnerability. It sends modified requests to the target URL and checks the response for the vulnerability. Requirements Python 3 requests library tqdm library You can install th...

socgholish_finder

SocGholish Finder Simple script to scan website for SocGholish inject. It checks for and display inject if found, and it deonfuscates and display a shadowing URL domains root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h, --help show th...

Extracter

Extracter Extracter es una herramienta útil para encontrar paneles de inicio de sesión en un sitio web; recopilará información de un archivo robots o de otras áreas que el sitio pueda tener. Esta herramienta está hecha solo por diversión y no debe utilizarse para abusar de otros sitios sin ningún...