decider

Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...

fat-finger

Fat-Finger Extiende el finger.nse original e intenta enumerar los usuarios con sesión iniciada actualmente mediante una coincidencia completa del nombre de usuario y una coincidencia parcial del campo GECOS en /etc/passwd Salida de ejemplo: root@kitploit: @output PORT STATE SERVICE 79/tcp open...

CVE-2025-32463

CVE-2025-32463 Escalada de privilegios local en Sudo mediante nsswitch.conf malicioso con sudo -R. Versiones afectadas 1.9.14 – 1.9.17 📘 Introducción Sudo es una utilidad de línea de comandos ampliamente utilizada en sistemas tipo Unix que permite a los usuarios autorizados ejecutar comandos con...

CVE-2024-39211

CVE-2024-39211 Enumeración de usuarios en Kaiten Kaiten - un sistema de gestión de flujos de trabajo, es vulnerable a ataques de fuerza bruta sin restricciones sobre los nombres de usuario y las direcciones de correo electrónico registradas en el sistema mediante una simple petición POST...

CVE-2020-9461

CVE-2020-9461 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ XSS Almacenado - Oempro Octech Oempro 4.7 a 4.11 permiten XSS almacenado por un usuario autenticado. El parámetro FolderNa...

keycloak

Gestión de identidad y acceso de código abierto Añade autenticación a aplicaciones y protege servicios con el mínimo esfuerzo. No necesitas ocuparte de almacenar usuarios ni de autenticarlos. Keycloak proporciona federación de usuarios, autenticación sólida, gestión de usuarios, autorización de...

CVE-2024-42327

PoC para CVE-2024-42327 / ZBX-25623 Una cuenta de usuario no administrador en el frontend de Zabbix con el rol de Usuario predeterminado, o con cualquier otro rol que otorgue acceso a la API, puede explotar esta vulnerabilidad. Existe un SQLi en la clase CUser en la función addRelatedObjects; est...

kernel-exploits

Exploits del kernel Varios exploits del kernel CVE-2021-22555 Exploit local de root en Linux. Versión actualizada del exploit de theflow para CVE-2021-22555. Se descubrió una escritura fuera de los límites del heap que afecta a Linux desde v2.6.19-rc1 en net/netfilter/xtables.c. Esto permite a un...

youzer

youzer Active Directory 环境的虚假用户生成器 简介 Youzer 的目标是创建信息丰富的 Active Directory 环境。它使用 python3 库 'faker' 生成随机账户。 root@kitploit: pip3 install faker 你可以提供一个单词列表，或让密码自动生成。生成的选项非常适合测试像 hashcat 规则掩码之类的场景。单词列表选项则适用于希望将特定密码列表植入环境，或练习字典攻击的情况。 输出为 CSV 和 PowerShell 脚本，两者均可复制到目标。执行时，PowerShell 脚本通过 LDAP 绑定（不依赖较新的...

fortigate-cve-2022-40684-tool

Descripción Esta herramienta permite a los profesionales de seguridad identificar y validar la exposición al CVE-2022-40684 en dispositivos FortiGate mediante la interacción con endpoints expuestos de la API CMDB. Admite la enumeración de usuarios administrativos, grupos de usuarios y la extracci...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

CVE-2026-93662

The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts' unpublished, pending or trashed event and venue content, including full street...

CVE-2026-88847

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...

CVE-2026-88845

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not perform any capability or nonce checks on an administrative maintenance action, allowing any authenticated user, such as a subscriber, to trigger it and create published content on the site attributed to their own accoun...

CVE-2026-82850

The Masteriyo LMS WordPress plugin before 3.4.2 does not restrict access to quiz answer keys, allowing any authenticated user, such as a student, to retrieve the correct answers for any quiz on the site, including quizzes in courses they are not enrolled in. The redaction that hides them is appli...

CVE-2026-82849

The Masteriyo LMS WordPress plugin before 3.4.2 does not verify that the user making the request owns the course-progress records being returned, allowing any authenticated user, such as a self-registered subscriber, to read another user's learning activity. The ownership check it applies is...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...

EUVD-2026-85809

The Events Manager WordPress plugin before 7.4.5 does not force the scope of its logged-in event and location search when a caller supplies their own owner value, letting a low-privileged user read other accounts' unpublished, pending or trashed event and venue content, including full street...

EUVD-2026-85804

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.50 does not verify that a user is enrolled in a course before recording lesson completions against it, allowing any authenticated user, such as a subscriber, to create course progress records for courses they have no access to...

CVE-2026-88847

The MasterStudy LMS WordPress Plugin (versions before 3.7.50 ) is vulnerable to an authentication bypass flaw where it fails to verify if a user is enrolled in a course before recording lesson completions. This allows any authenticated user , such as a subscriber, to create unauthorized course pr...