#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended

Scripts to detect Fast-Flux and DGA using DNS query responses
Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cybercrime…

Fake exploit tool, designed to rickroll users attempting to actually exploit.

This tool is designed to interact with the GitHub API and retrieve specific user details, repository information, and commit emails for a given user.

Tool to extract all themes and plugins that are shown on the front page of a wordpress site.


Check a list of Pterodactyl panels for vulnerabilities from a file.

Analysis of the ransom demands from Shodan results

Scanner for CVE-2023-36845 with Shodan and Censys integration for automated host discovery and exploitation of Juniper devices.

🔵 Threat analysis writeup for Follina (CVE-2022-30190) — Microsoft MSDT RCE zero-day exploited in the wild. Covers static analysis, VirusTotal,…

A repo for all things cyber threat intel

MCP server that lets AI assistants drive a self-hosted Sn1per install, running scoped, audited scans and returning findings, ports, subdomains and…

A utility for producing an HTTP cache database to use with go-exploit

Exploit for CVE-2018-20555: automated discovery and takeover of Twitter accounts via leaked API keys in vulnerable Social Network Tabs WordPress…

An S3 account ID enumeration and bucket discovery tool


Recovers deleted web content from Google's index by brute-forcing search queries to reconstruct text, detect hidden spam injections, and uncover…

POC For CVE-2020-1481 - Jira Username Enumerator/Validator