Arecibo

Arecibo Endpoint para exfiltración fuera de banda DNS y HTTP Autores Juan Manuel Fernández @TheXC3LL y Pablo Martinez @Xassiz Exfiltración DNS Crear un nuevo token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Ahora puedes usar este token...

IMDShift

IMDShift Las cargas de trabajo de AWS que dependen del endpoint de metadatos son vulnerables a ataques Server-Side Request Forgery SSRF. IMDShift automatiza el proceso de migración de todas las cargas de trabajo a IMDSv2 con amplias capacidades, lo que implementa medidas de seguridad mejoradas pa...

CVE-2025-50505

CVE-2025-50505 API no autorizada conduce a ejecución arbitraria de comandos y escalada de privilegios en Clash Verge Rev Descripción La vulnerabilidad se origina en un endpoint API no autenticado expuesto por el componente clash-verge-service, que se instala con privilegios elevados por defecto...

king-phisher

King Phisher Kit de Campañas de Phishing King Phisher ya no tiene mantenimiento. Instalación Para instrucciones sobre cómo instalar, consulte el archivo INSTALL.md. Después de instalar, para instrucciones sobre cómo empezar, consulte la wiki. Resumen King Phisher es una herramienta para probar y...

CVE-2022-34919

CVE-2022-34919 Contensis Content Management System prior to version 15.2.1.79 has a flaw in their 'Classic' interface that allows an unauthenticated user to upload and approve arbitrary files. By uploading an aspx file, it is possible to execute commands in the context of the web server. This...

Samuraizer

Samuraizer — Motor de Base de Conocimientos de Ciberseguridad NotebookLM con esteroides — diseñado específicamente para investigadores de seguridad. 💡 ¿Por qué Samuraizer? Todo investigador de seguridad conoce esa sensación — encuentras un repositorio interesante en GitHub, un artículo fresco sob...

CVE-2026-50522

CVE-2026-50522 Poc : SharePoint Deserialization RCE SharePoint Server Unauthenticated Remote Code Execution via SecurityContextToken Cookie Deserialization Mass-scan exploit for CVE-2026-50522 targeting on-premises Microsoft SharePoint Server. Abuses insecure BinaryFormatter deserialization in th...

cynative

Crea tus propios agentes de seguridad Framework de código abierto para agentes de seguridad con acceso en vivo y de solo lectura a tu infraestructura. Inicio rápido · Agentes integrados · Tu primer agente · Docs Pregúntale lo que quieras a tu infraestructura. Cynative ejecuta modelos de frontera ...

shannon

!NOTE Shannon 3.0 ya está disponible: análisis de seguridad de código más profundo, hallazgos verificados con mayor rigor, una CLI reconstruida, CI/CD nativo, informes PDF profesionales y SARIF. Shannon es un pentester autónomo con IA para aplicaciones web y APIs. Analiza tu código fuente,...

neko

n.eko Welcome to Neko, a self-hosted virtual browser that runs in Docker and uses WebRTC technology. Neko is a powerful tool that allows you to run a fully-functional browser in a virtual environment , giving you the ability to access the internet securely and privately from anywhere. With Neko,...

hatiyar

Hatiyar Modern security toolkit for penetration testing, vulnerability assessment, and security research. ⚠️ IMPORTANT: Hatiyar is intended for educational, research, and defensive security use only. Do not use this software on systems you do not own or do not have explicit written permission to...

CVE-Factory

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability CVE-Factory is a Multi-Agent system for fully automated, end-to-end CVE reproduction. Given CVE records, the system automatically researches details, generates test cases, builds Docker environments, and validates tha...

cve-2020-1472

CVE-2020-1472 POC Replicate this vulnerability in a Windows domain environment using proxychains proxy on macOS. Environment DC Primary Domain Controller: Domain User Domain Member Host: Set up a SOCKS5 forward proxy directly via gost. Attack Hacker Attacker Machine: Configure proxychains4...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

CVE-2024-24919

Exploit para CVE-2024-24919 Descripción Este script de Python es un exploit para CVE-2024-24919, un CVE que afectó a productos Check Point: CloudGuard Network, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Spark Appliances Versiones: R77.20 EOL, R77.30 EOL, R80.10...

CVE-2026-60004-POC

CVE-2026-60004 — Gitea Pre-Auth Remote Code Execution CVSS 9.8 root@kitploit: ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...

CVE-2025-32756-POC

CVE-2025-32756: Fortinet RCE PoC A proof-of-concept for the critical stack-based buffer overflow vulnerability CVE-2025-32756 affecting Fortinet products. Vulnerability CVSS : 9.8 Critical Type : Stack-based buffer overflow in AuthHash cookie processing Impact : Unauthenticated remote code...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, hands-on A capture-the-flag built on the OWASP Kubernetes Top 10 — 2025. You've been hired to red-team NimbusMart , a fictional e-commerce company whose cluster grew faster than its security. Ten challenges, one per OWASP risk plus a bonus — exploit each weakness,...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

awesome-search-queries

Awesome Search Queries Community curated list of search queries for various categories across multiple search engines. Welcome to Awesome Search Queries, a community-driven project to create an index of search queries for various categories across multiple search engines. This project is inspired...