#1Tools for collecting and analyzing publicly available information from online sources.
Kitploit recommended
352926/shellshock_crawlerUsing google to scan sites for "ShellShock" (CVE-2014-6271)
jorianwoltjer/shodan-favicon-preimageGenerate a favicon that results in any target hash on Shodan
s4vitar/airdroidpwnerPrograma ideal para robar toda la información de un dispositivo remotamente a través de la aplicación AirDroid. [CVE-2019-9599]…
nccgroup/scenesterA tool to visually snapshot a website by supplying multiple user-agent. Designed to aid in discovery of different entry points into an application.
kabiri-labs/cve-2024-4367-pocThis Proof of Concept (PoC) demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting (XSS) attacks.
subinacls/filibusterAutomated reconnaissance and information-gathering tool for penetration testing, designed to enumerate subdomains, endpoints, and network services.
und3sc0n0c1d0/userenumjiraSerie de scripts para enumerar nombres de usuarios de JIRA a partir de vulnerabilidades conocidas (CVE-2020-14181, CVE-2019-3403, CVE-2019-8449...)
jaycelation/cve-2025-55182PoC, Hunting React2Shell about CVE-2025-55182
dream434/cve-2017-5487Exploit for CVE-2017-5487 to enumerate WordPress user accounts via the REST API, extracting sensitive information from vulnerable 4.7 installations.
