CVE-2023-26256

CVE-2023-26255 CVE-2023-26256 PoC root@kitploit: FOFA: body="JIRA" && body="2.0.50" root@kitploit: Uso: python3 CVE-2023-26256.py -h...

CVE-2022-41099-Fix

I take no Liability & Warranty on this script please fully test before use. CVE-2022-41099-Fix Update WINRE.WIM file to fix CVE-2022-41099 REF: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099 Microsoft Catalog: https://www.catalog.update.microsoft.com/Search.aspx?q=kb5022282...

CVE-2017-8570

CVE-2017-8570Exp.py Reference:https://github.com/rxwx/CVE-2017-8570 Changes: Usage: root@kitploit: python2 CVE-2017-8570Exp.py -s write.sct -e write.exe -o write.rtf + RTF file written to: write.rtf...

CVE-2020-12625

CVE-2020-12625: Cross-Site Scripting via Malicious HTML Attachment in Roundcube Webmail A Cross-Site scripting XSS vulnerability exists in Roundcube versions before 1.4.4, 1.3.11 and 1.2.10. By leveraging the "" XML element in a mail with a "text/html" attachment, an attacker can bypass the...

CVE-2020-5902-Scanner

CVE-2020-5902-Scanner Automated script for F5 BIG-IP scanner CVE-2020-5902 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. root@kitploit: CentOS & Fedora sudo yum install g...

noPac-detection

About Detection script for CVE-2021-42278 and CVE-2021-42287 Usage root@kitploit: The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h, --help show th...

xencrypt

Xencrypt Cifrador de PowerShell v 1.0 Autores Xentropy @SamuelAnttila SecForce @SECFORCELTD Si quieres leer sobre el diseño detrás de esta herramienta y cómo hacer tu propio cifrador, hay un artículo que escribí al respecto aquí: Escribe un cifrador en cualquier idioma Nota No seas un script...

ElectronVulnerableVersion

Encuentra aplicaciones Electron vulnerables a CVE-2023-4863 / CVE-2023-5129 Este script de PowerShell descarga Sysinternals Strings, busca recursivamente cadenas en todos los archivos .exe en todas las unidades, y compara la versión de Electron encontrada con las versiones parcheadas conocidas a...

twitterBFTD

twitterBFTD Twitter back from the death looks in a user tweets history for domain names that are available for registration. See blogpost: How I hijacked top celebrities tweets including Katy Perry, Shakira… pip install pythonwhois tweepy Usage: Just run it at the root of the folder and it will...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically...

pentmenu

pentmenu 中文说明 A bash select menu for quick and easy network recon and DOS attacks Sudo is implemented where necessary. Tested on Debian and Arch. Contributions and pull requests are most welcome! Requirements: bash sudo curl netcat must support '-k' option, openbsd variant recommended hping3 or...

CVE-2022-36804

CVE-2022-36804 You can find a python script to exploit the vulnerability on Bitbucket related CVE-2022-36804. root@kitploit: .,;;. .:lll:. 'clllllc. ,llolllooc' 'loooooooool, .;ooooooooooo;. .:;..;odddddddddo:. 'ldo:. ,llccoddddddc. ,oddddc. .. .:dddddddl' .;dxxxxxxc. .;dxxxxxxo, .:dxxxxxxo'...

PadBuster

PadBuster - Automated script for performing Padding Oracle attacks Author: Brian Holyfield - Gotham Digital Science [email protected] Credits to J.Rizzo and T.Duong for providing proof of concept web exploit techniques and S.Vaudenay for initial discovery of the attack. Credits also to James...

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228. Deployment To deploy this project run root@kitploit: sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Running Tests To run tests, run the following...

CVE-2007-2447

CVE-2007-2447 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2007-2447 root@kitploit: python3 smb3.0.20.py -lh localhost -lp local port -t target Error The error you're encountering indicates that the Python script is trying to import a module named smb, but it is not installed on your system. The smb module is part of...

CVE-2020-5902

CVE-2020-5902 POC code for checking for this vulnerability. Since the code has been released, I decided to release this one as well. Patch Immediately! root@kitploit: Usage: python3 CVE-2020-5902.py -u https://big-ip.com -o check 2/dev/null...

CVE-2021-44228---detection-with-PowerShell

CVE-2021-44228 detection with PowerShell 1 Open automatedscan.ps1, set variable $ResultsCSV and $Directory 2 Save and close the file 3 Open PowerShell as administrator and run the following command: powershell.exe -noprofile -executionpolicy bypass -file .\automatedscan.ps1...

xz_cve-2024-3094_detection

xzcve-2024-3094detection Script to detect CVE-2024-3094. Credit goes to: https://github.com/cyclone-github/scripts/blob/main/xzcve-2024-3094-detect.sh...

CVE-2023-36163

Exploit Title: BuildaGate5library - Reflected Cross-Site Scripting XSS Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: None Version: 5 Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: An attacker needs to find the vulnerable parameter mc= and inject the JS code like: 'di...

Malbait

Malbait TCP/UDP Honeypot program implemented in Perl README for malbait, 2/10/17 btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses:...