CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE Этот репозиторий содержит эксплойт для CVE-2019-16278 в Nostromo Web Server 1.9.6, позволяющий удалённое выполнение кода через уязвимость обхода каталогов. Скрипт использует pwntools для установки обратного шелла. Только для образовательных целей и авторизованног...

galer

galer root@kitploit: /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 Vulnerabilità scoperta da me CVE-2019-15053 Avviso: advisory.txt Informazioni di base root@kitploit: Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and...

CVE-2014-91371-Wordpress-

CVE-2014-91371-Wordpress विवरण root@kitploit: wordpress with Plugin Slider REvolution 4.1.4...

CVE-2016-10708

SSH NEWKEYS Flood PoC CVE-2016-10708 Descrizione Questo script proof-of-concept sfrutta una vulnerabilità nelle versioni di OpenSSH precedenti alla 7.4 CVE-2016-10708 inviando pacchetti SSHMSGNEWKEYS inaspettati, che possono causare un DoS. Può operare in due modalità: scan : Si connette a uno o...

haaukins

Haaukins Haaukins is a highly accessible and automated virtualization platform for security education, it has three main components Docker, Virtualbox and Golang, the communication and orchestration between the components managed using Go programming language. The main reason of having Go...

threatcl

threatcl Modellazione delle minacce con HCL Cosa è successo a hcltm? hcltm è stato rinominato in threatcl. Benvenuti! Panoramica !TIP Vuoi leggere la nuova documentazione? Vai su threatcl.dev Ci sono molti modi diversi in cui un modello di minaccia può essere documentato. Da un semplice file di...

CVE-2022-42889

CVE-2022-42889 Testanwendung Dieses Repository enthält eine einfache Anwendung, die Apache Commons Text 1.10 verwendet und für CVE-2022-42889 anfällig ist. Ausführen der Anwendung Ersetzen Sie den nc-Befehl in DemoApplication.java durch Ihre Host-IP-Adresse. Lauschen mit netcat: root@kitploit: $ ...

pdfresurrect

pdfresurrect PDFResurrect è uno strumento progettato per analizzare documenti PDF. Il formato PDF consente di mantenere le modifiche precedenti del documento in una versione più recente dello stesso, creando così una cronologia continua delle modifiche del documento. Questo strumento tenta di...

CVE-2018-16763

CVE-2018-16763 Título do Exploit: fuel CMS 1.4.1 - Execução Remota de Código Script Python3 - 💻 Este script foi desenvolvido por h3x0v3rl0rd...

CVE-2021-22205

CVE-2021-22205 Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 Uso: root@kitploit: Verificar vulnerabilidade: python 22205exp.py -u url -v Executar comando: python 22205exp.py -u url -c command Verificação em lote: python 22205exp.py -f filename Referência: root@kitploit:...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

CVE-2019-16278

CVE-2019-16278 💻 -h3x0v3rl0rd- nostromo 1.9.6 - Execução Remota de Código...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

ExchangeFinder

ExchangeFinder ExchangeFinder è uno strumento semplice e open-source che tenta di trovare istanze di Microsoft Exchange per un dato dominio, basandosi sui nomi DNS comuni più utilizzati per Microsoft Exchange. ExchangeFinder può identificare la versione esatta di Microsoft Exchange a partire da...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Behobene Version Beschreibung Dies ist ein Exploit für die Schwachstelle des Apache HTTP Server 2.4.49, identifiziert als CVE-2021-41773. Die Originalversion des Exploits, veröffentlicht auf Exploit-DB, enthielt Syntax...

CVE-2021-42013

Scanner di Vulnerabilità Apache CVE-2021-41773 / CVE-2021-42013 Un scanner di vulnerabilità completo basato su Python per rilevare le vulnerabilità di path traversal e remote code execution CVE-2021-41773 e CVE-2021-42013 nelle versioni 2.4.49 e 2.4.50 di Apache HTTP Server. Panoramica...

CVE-2019-9053

CVE 2019-9053 Details Beschreibung Dieser Code ist eine Implementierung eines zeitbasierten Blind-SQL-Injection-Angriffs in Python 3. Der Angriff zielt darauf ab, eine SQL-Injection-Schwachstelle in einem Content-Management-System CMS Made Simple 2.2.8 über eine HTTP-Anfrage auszunutzen. Exploit...

wp_bookingpress_1.0.11

CVE-2022-0739 CVE-2022-0739 Wordpress BookingPress Plugin 1.0.11 Nicht authentifizierte SQL-Injection Erste Schritte Programm ausführen Mit python3 root@kitploit: python3 sqli.py -u 'http://wordpress.site' -p 'wpnoncevalue' Hilfe Für das Hilfemenü: root@kitploit: python3 sqli.py -h...