CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE Resumen: Este documento muestra cómo combinar dos vulnerabilidades de FreePBX 16 CVE-2025-57819 y CVE-2025-61678 para lograr una cadena de ataque completa que permite escalar desde el acceso no autenticado hasta la ejecución remota de código Remote Code...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

slither

Slither, the smart contract static analyzer Join the Empire Hacking Slack - Discussions and Support Slither is a Solidity & Vyper static analysis framework written in Python3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...

brakeman

Brakeman Brakeman es una herramienta de análisis estático que verifica las aplicaciones Ruby on Rails en busca de vulnerabilidades de seguridad. Instalación Usando RubyGems: root@kitploit: gem install brakeman Usando Bundler: root@kitploit: group :development do gem 'brakeman', require: false end...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

CVE-2001-0932

CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Múltiples vulnerabilidades de denegación de servicio 1 Publicación en Exploit-db en https://www.exploit-db.com/exploits/21162/ CVE-2001-0932 Cooolsoft PowerFTP Server 2.0 3/2.10 - Múltiples vulnerabilidades de denegación de servicio 2 Publicaci...

JSONPath

ver también licencias para dependencias de desarrollo JSONPath Plus Analiza, transforma y extrae selectivamente datos de documentos JSON y objetos de JavaScript. jsonpath-plus expande la especificación original para añadir algunos operadores adicionales y hace explícitos algunos comportamientos q...

bomber

bomber is an application that scans SBOMs for security vulnerabilities. Overview So you've asked a vendor for an Software Bill of Materials SBOM for one of their closed source products, and they provided one to you in a JSON file... now what? The first thing you're going to want to do is see if a...

google-ctf

Google CTF This repository lists most of the challenges used in the Google CTF since 2017, as well as most of the infrastructure that can be used to run them. IMPORTANT - The code in the 201x and 202x folders have unfixed security vulnerabilities. These are there on purpose, and running these on...

peniot

PENIOT: Penetration Testing Tool for IoT Table of Contents Project Description What is PENIOT? Why is PENIOT required? What does PENIOT provide? Build Instructions Documentation Testing Contributors Developer's Note Project Poster Project Description What is PENIOT? PENIOT is a penetration testin...

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

badkeys

badkeys Herramienta y biblioteca para comprobar claves públicas criptográficas en busca de vulnerabilidades conocidas ¿Qué? badkeys comprueba claves públicas en varios formatos en busca de vulnerabilidades conocidas. Puedes encontrar una versión web en badkeys.info. instalación badkeys se puede...

Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

enumy

Enumy Enumy es un ejecutable portátil ultrarrápido que puedes colocar en una máquina Linux objetivo durante una prueba de penetración o CTF en la fase posterior a la explotación. Ejecutar enumy enumerará la máquina en busca de vulnerabilidades de seguridad comunes. Instalación Puedes descargar el...

enumy

Enumy Enumy is an ultra fast portable executable that you drop on target Linux machine during a pentest or CTF in the post exploitation phase. Running enumy will enumerate the box for common security vulnerabilities. Installation You can download the final binary from the release x86 or x64 tab...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

tactical-exploitation

tactical-exploitation "The Other Way to Pen-Test" -- HD Moore & Valsmith I've always been a big proponent of a tactical approach to penetration testing that does not focus on exploiting known software vulnerabilities, but relies on old school techniques such as information gathering and brute...

pygoat

PyGoat Aplicación web intencionalmente vulnerable de Seguridad en Django. Nuestra hoja de ruta construye una aplicación web intencionalmente vulnerable en Django. Las vulnerabilidades pueden basarse en el top ten de OWASP. Tabla de contenidos pygoat Instalación Desde el código fuente Contenedor...

cve-2019-7192-check

Comprobador de RCE root sin autenticación en QNAP CVE-2019-7192 CVE-2019-7195 Uso: root@kitploit: pip install requests ./CheckerforQNAPRCEcve2019719295.py /path/to/ip-port.txt Ejemplo de archivo de entrada: root@kitploit: 1.2.3.4 8080 2.3.4.5 443 Esta herramienta toma una lista de IPs y puertos d...