GNUnet P2P Framework 0.26.2

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

drupal-cve-2026-9082-checker

DRUPAL CVE-2026-9082 CHECKER Drupal CVE-2026-9082 Blind SQL Injection Checker Installation root@kitploit: git clone https://github.com/N45HT/drupal-cve-2026-9082-checker.git cd drupal-cve-2026-9082-checker pip install -r requirements.txt References https://vulners.com/cve/CVE-2026-9082...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

CVE-2026-4480-exploit-poc

Usage: Para login anônimo: python3 exploit.py --lhost --lport -t -N it is for anonymous login Login via credenciais: python3 exploit.py --lhost --lport -t -u -p root@kitploit: ! Error: the following arguments are required: -s/--sharename Note: if user is anonymous and no password, then just add -...

Exploitarium-Detections

Copertura di rilevamento KQL di Exploitarium Regole di rilevamento KQL per Microsoft Sentinel e Defender XDR che coprono la divulgazione anonima bikini/exploitarium — un archivio personale di ricerca con oltre 15 diversi target di vulnerabilità su oltre 109 file tracciati, rilasciato senza notifi...

CVE-2024-23897

CVE-2024-23897 CVE-2024-23897 jenkins-cli Observamos o Jenkins File Leak / RCE CVE-2024-23897 sendo explorado na natureza e conseguimos reproduzi-lo. Se o seu Jenkins permite usuários anônimos ou registro de usuários, atualize-o imediatamente para a versão mais recente. java -jar jenkins-cli.jar ...

ADTrapper

ADTrapper - Piattaforma di Analisi della Sicurezza di Active Directory Piattaforma professionale di analisi della sicurezza e rilevamento delle minacce per Active Directory Trasforma i log di autenticazione di Windows in informazioni di sicurezza azionabili con rilevamento avanzato delle minacce ...

SafeText

SafeText Tool zur Bereinigung von Text, um eine sichere Verbreitung von Dokumenten aus anonymen Quellen zu ermöglichen, indem Nullbreitenzeichen und Homoglyphen entfernt werden. Einzelpersonen, die versuchen, eine E-Mail oder eine andere Textdatei durchsickern zu lassen, riskieren, durch...

CVE-2025-47812

🚀 Wing FTP Exploit - CVE-2025-47812 Exploit melhorado para Wing FTP Server CVE-2025-47812 - Execução Remota de Código RCE sem autenticação 🔧 Instalação Clone este repositório e entre no diretório: root@kitploit: git clone https://github.com/0xjuarez/CVE-2025-47812.git cd CVE-2025-47812 pip instal...

fake-mailer

Fake Mailer + Haftungsausschluss : Fake Mailer ist ein Werkzeug, um E-Mails anonym von einer anderen E-Mail-Adresse zu senden. Dieser Vorgang kann bis zu 5 Minuten dauern. Dieses Werkzeug wurde nur zu Bildungszwecken erstellt!! Ich bin nicht verantwortlich für jeglichen Missbrauch dieses...

exploit-CVE-2023-27564

Exploit per CVE-2023-27564 Questa vulnerabilità consente la lettura anonima di file in n8n. root@kitploit: import requests url = "https://example.com/rest/data/filesystem:..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd:.svg" response = requests.geturl printresponse.statuscode...

msLDAPDump

msLDAPDump LDAP-Enumerationstool implementiert in Python3 msLDAPDump vereinfacht die LDAP-Enumeration in einer Domänenumgebung, indem es die ldap3-Bibliothek von Python in eine benutzerfreundliche Oberfläche einbettet. Wie die meisten meiner Tools funktioniert auch dieses am besten unter Windows...

longfellow-zk

लॉन्गफेलो ZK अवलोकन Longfellow लाइब्रेरी विरासत पहचान सत्यापन मानकों जैसे ISO MDOC मानक, JWT मानक, और W3 Verifiable Credentials से संबंधित शून्य-ज्ञान प्रोटोकॉल के निर्माण को सक्षम बनाती है। यह कार्यान्वयन निम्नलिखित में वर्णित है: ECDSA से अनाम प्रमाण-पत्र libzk: शून्य-ज्ञान प्रमाणों के लिए एक C...

onionshare

OnionShare O OnionShare é uma ferramenta de código aberto que permite compartilhar arquivos, hospedar sites e conversar com amigos de forma segura e anônima usando a rede Tor. Instalando o OnionShare Você pode baixar o OnionShare para Windows e macOS no site do OnionShare. Para macOS, você também...

TEST-CVE-2023-32233

Use-After-Free in Netfilter nftables durante l'elaborazione di richieste batch Dettagli della vulnerabilità Il codice affetto ha origine dal kernel Linux ufficiale di https://kernel.org/ e fa parte del componente Netfilter nftables net/netfilter/nftablesapi.c. Netfilter nftables consente di...

Mongodb-Redis-scan

Mongodb-Redis-scan Script di scansione anonima mongodb-redis, supporta la scansione anonima di mongodb e redis Script di scansione anonima mongodb-redis, supporta la scansione anonima di mongodb e redis, lo script è stato scritto in precedenza per un'esigenza, ora lo condivido con tutti per studi...

EUVD-2026-66282

The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymous visitors, allowing unauthenticated attackers to run AI queries of their own choosing against the site owner's...

CVE-2026-21017-LDAP-Anonymous-Bind-Privilege-Escalation

CVE-2026-21017 – Elevazione dei privilegi tramite bind anonimo LDAP Codice del programma simulazione Python ldap3 root@kitploit: ldapanonsim.py - LDAP server allowing anonymous bind with write access from ldap3 import Server, Connection, ALL Simulated: real server would be misconfigured server =...

SiYuan - SQL Execution

SiYuan = v3.7.2 contains a SQL injection caused by passing client-supplied SQL statements verbatim to the main read-write database handle in /api/search/searchEmbedBlock, letting attackers with publish RoleReader token or anonymous access read and modify content, exploit requires publish RoleRead...

Microsoft FrontPage Extensions - Information Disclosure

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory. id: CVE-2000-0114 info: name: Microsoft FrontPage Extensions - Information Disclosure author: r3naissance,matejsmycka severity...