Mimir

Mimir OSINT Threat Intel Interface - Named after the old Norse God of knowledge. Mimir functions as a CLI to HoneyDB which in short is an OSINT aggregative threat intel pool. Starting the program brings you to a menu the options for which are as follows. root@kitploit: 1. Fetch Threat Feed 5...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

TLDHunt

TLDHunt - Vérificateur de disponibilité de domaine TLDHunt est un outil en ligne de commande conçu pour aider les utilisateurs à trouver des noms de domaine disponibles pour leurs projets ou entreprises en ligne. En fournissant un mot-clé et une liste d'extensions de TLD domaine de premier niveau...

URLextractor

URLextractor Collecte d'informations et reconnaissance de sites web Utilisation : ./extractor http://www.hackthissite.org/ Astuces : Colorex : ajoute des couleurs à la sortie pip install colorex et utilisez-le comme ./extractor http://www.hackthissite.org/ | colorex -g "INFO" -r "ALERT" Tldextrac...

ditto

Ditto est un petit outil qui prend un nom de domaine en entrée et génère toutes ses variantes pour une attaque par homographie en sortie, en vérifiant lesquelles sont disponibles et lesquelles sont déjà enregistrées. Domaines de preuve de concept PoC https://tᴡitter.com/ https://clᴏudflare.com...

OSIPs

OSIPs Ce script analyse chaque fichier d'un dossier donné de manière récursive, extrait toutes les adresses IPv4 et IPv6, filtre les adresses IP publiques, puis interroge ces IP auprès des relais TOR, du service WhoIs et du service de localisation. Il produit 4 fichiers : un fichier CSV et un...

instarecon

InstaRecon Reconnaissance numérique de base automatisée. Idéal pour obtenir une première empreinte de vos cibles et découvrir des sous-domaines supplémentaires. InstaRecon effectuera : Requêtes DNS A, PTR, MX, NS Requêtes DNS récursives sur tous les hôtes découverts Requêtes Whois sur le domaine ...

Artemis

Artemis Panoramica Uno strumento per trovare l'infrastruttura degli APK . Offerto da: HADESS fornisce servizi di cybersecurity offensiva attraverso infrastrutture e software che includono analisi delle vulnerabilità, pianificazione di attacchi simulati e implementazione di progetti preventivi...

contact.sh

contact.sh Ein OSINT-Tool zur Ermittlung von Kontakten für die Meldung von Sicherheitsschwachstellen. Installation 🐧 GNU/Linux Stellen Sie sicher, dass die Pakete whois und jq installiert sind. root@kitploit: $ git clone https://github.com/EdOverflow/contact.sh.git $ cd contact.sh/ $ chmod u+x...

hostresolver

HostResolver Versione corrente: 1.0.0 Invia commenti e segnalazioni di bug a: [email protected] ==================================================================================== Contenuti: 1. Panoramica 2. Utilizzo di HostResolver File di input Opzioni e impostazioni Scansione Output...

ktr

ktr Programma traceroute altamente asincrono scritto in Rust con ricerche ASN WHOIS e PeeringDB. Messo insieme principalmente per how-did-i-get-here.net : Componenti: ktrlib: codice della libreria principale, gestisce traceroute, ricerche WHOIS degli ASN e supporto SQLite per PeeringDB ktragent:...

Mr.Holmes

🔍 Mr.Holmes Mr.Holmes è uno strumento di raccolta informazioni OSINT. Lo scopo principale è ottenere informazioni su domini, nomi utente e numeri di telefono utilizzando fonti pubbliche disponibili su Internet; utilizza inoltre gli attacchi Google Dork per ricercatori specifici. Usa anche proxy p...

AutoPentest-Framework

AutoPentest Framework A modular Automated Penetration Testing...

Black-Oracle

🖤 BLACK ORACLE 🖤 «The Eye That Sees Through Digital...

vulnscanx_v2

⚡ VulnScanX Advanced Vulnerability Scanning & Penetration...

METATRON AI Penetration Testing

Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine - no cloud, no API keys, no subscriptions. You give it a target IP or domain. It runs real recon tools nmap, whois, whatweb, curl, dig, nikto, feeds all results to a locally running AI model, and the...

CVE-2026-3270

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...

GHSA-429M-9874-RX9W PSI Probe vulnerable to Server-Side Request Forgery

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...

PSI Probe vulnerable to Server-Side Request Forgery

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...

CVE-2026-3270

A vulnerability has been found in psi-probe PSI Probe up to 5.3.0. This affects the function lookup of the file psi-probe-core/src/main/java/psiprobe/tools/Whois.java of the component Whois. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit h...