URLextractor

URLextractor Recopilación de información y reconocimiento de sitios web Uso: ./extractor http://www.hackthissite.org/ Consejos: Colorex: añade colores a la salida pip install colorex y úsalo como ./extractor http://www.hackthissite.org/ | colorex -g "INFO" -r "ALERT" Tldextract: es usado por la...

scodescanner

SCodeScanner SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities. The main objective for this scanner is to find the vulnerabilities inside the source code before code gets published in Prod. Website for newreleases, new...

h2t

h2t - HTTP Hardening Tool Description h2t is a simple tool to help sysadmins to hardening their websites. Until now h2t checks the website headers and recommends how to make it better. Dependences Python 3 colorama requests Install root@kitploit: $ git clone https://github.com/gildasio/h2t $ cd h...

killshot

This project is no longer maintained ! KILLSHOT A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner Why KillShot? You can use this tool to spider your website, gather important information, and automate data collection using tools such as WhatWeb, Host,...

CVE-2023-30253-PoC

CVE-2023-30253 CVE-2023-30253 PoC Description This is my PoC for the CVE-2023-30253 Dolibarr 17.0.0 PHP Code Injection, when the CMS Website plugin core is enabled, an authenticated attacker can obtain remote command execution via php code injection bypassing the application restrictions...

webanalyze

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

Cooper

Cooper, sustantivo, fabricante o reparador de toneles y barriles ¡Es un chiste de "pez en un barril"! ¡Disfruto de los juegos de palabras! Una herramienta Python para ingerir HTML y producir código fuente HTML adecuado para campañas de phishing. Cooper simplifica el proceso de clonar un sitio web...

webscreenshot

webscreenshot Descripción Un script sencillo para capturar pantallas de una lista de sitios web, basado en el script url-to-image de PhantomJS. Características Integración del 'renderizado diferido' de url-to-image para recursos AJAX Funciona completamente en sistemas Windows y Linux Soporte de...

Crawlector

Crawl e ctor Crawlector el nombre Crawlector es una combinación de Crawl er & Detector es un framework de caza de amenazas diseñado para escanear sitios web en busca de objetos maliciosos. Nota-1 : El framework se presentó por primera vez en la conferencia No Hat en Bérgamo, Italia, el 22 de...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon have a...

privacyguides.org

Your central privacy and security resource to protect yourself online. About Privacy Guides is a socially motivated website that provides information for protecting your data security and privacy. Our mission is to inform the public about the value of digital privacy, and global government...

EasyScan

EasyScan EasyScan es un script de Python que analiza la seguridad de un sitio web dado inspeccionando sus cabeceras HTTP, registros DNS y otras configuraciones. El script genera un informe de seguridad con una puntuación, una calificación y recomendaciones para abordar posibles vulnerabilidades...

CVE-2023-27035

CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Vulnerability type: Incorrect Access Control Description: An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedded website on the...

patch-checker

PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...

Astra Linux – Vulnerability in Chromium

Before version 92.0.4515.159, using free after functions in WebRTC in Google Chrome allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption through a crafted HTML page...

onionshare

OnionShare OnionShare es una herramienta de código abierto que te permite compartir archivos, alojar sitios web y chatear con amigos de forma segura y anónima utilizando la red Tor. Instalación de OnionShare Puedes descargar OnionShare para Windows y macOS desde el sitio web de OnionShare. Para...

fastfuz-chrome-ext

FastFuzz Chrome Extension Fast fuzzing websites with chrome extension Screenshot Install Add Your Custom Files Open files.txt Paste your file or directory name in line by line Happy Hunting TODO Add response size foundings Add new specific file and directory names Add Extension to chrome extensio...

HawkScan

HawkScan Security Tool for Reconnaissance and Information Gathering on a website. python 3.x News Installation Special features TODO Usage Exemples Thanks Donations Tools used Wiki News v2.x root@kitploit: - Add proxy function - Redefining priorities/tasks - Let's debug certificate subdomains...

CVE-2022-1329

CVE-2022-1329 The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: Terminal Trove The $HOME of all things in the terminal | Warp Built for coding with multiple AI agents ---|--- Contents About Screenshot Live Demo Mirror Features Usage Deployment...