DraculaOS

Kali Linux based OVA file for OSINT investigations and Cyber Intelligence. DOWNLOAD The download link for the DRACULA Os OVA can be found at the following link. The DraculaOs OVA download file is 8 GB in size. https://easyupload.io/o1y3jt...

CVE-2025-29556

CVE-2025-29556 – ExaGrid Security Officer Account Creation Bypass 📝 Overview Vulnerability Title : Unauthorized Creation of Security Officer Account Product : ExaGrid EX10 Backup Appliance Version Affected : Tested on current version at disclosure Versions Affected : 6.3 – 7.0.1.P08 CVE ID :...

CVE-2023-1671-POC

Dork fofa title="Sophos Web Appliance" || app="Sophos-Web-Appliance" && title!="Sophos Web Appliance：错误请求" ZoomEye title:"Sophos Web Appliance"-title:"Sophos Web Appliance: Forbidden"-title:"Sophos Web Appliance: Bad Request" Shodan title:"Sophos Web Appliance" Usage root@kitploit: python...

tsharkVM

💡 Update: tshark-opensearch More recent application tshark-opensearch is now available. You can find it in the https://github.com/h21-lab/apps-collection-info repository. 👉 Get Access tshark ELK VM appliance This project builds virtual machine which can be used for analytics of tshark -T ek ndjso...

CVE-2007-3830

CVE-2007-3830 IBM Proventia Sensor Appliance - Multiple Input Validation Vulnerabilities Exploit-db publication at https://www.exploit-db.com/exploits/30290/ Exploit-db paper at : https://www.exploit-db.com/docs/english/13081-having-fun-with-proventia-gx5108-&-gx5008-insecurities.pdf Git repo at...

CVE-2019-9596-and-CVE-2019-9597

CVE-2019-9596-and-CVE-2019-9597 Darktrace CSRF exploit https://www.peerlyst.com/posts/exploiting-two-zero-days-in-a-darktrace-appliance-cve-2019-9596-and-cve-2019-9597-gerwout-van-der-veen https://seclists.org/bugtraq/2019/May/54...

CVE_2024_20356

CVE-2024-20356 Esta es una prueba de concepto para CVE-2024-20356, una vulnerabilidad de inyección de comandos en Cisco CIMC. Escrito por Aaron y oxidado por SherllyNeo Los detalles técnicos completos se pueden encontrar en...

Ivanti Cloud Services Appliance - Path Traversal

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. id: CVE-2024-8963 info: name: Ivanti Cloud Services Appliance - Path Traversal author: johnk3r severity: critical description: | Path Traversal in the Ivanti CSA befo...

F5 BIG-IP Appliance Mode - Command Injection

When running in Appliance mode, an authenticated user assigned the Administrator role may bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. id: CVE-2022-41800 info: name: F5 BIG-IP Appliance Mode - Command Injection author: dwisiswant0 severity: high description...

ibmsecurity

IBM Sample Code Este repositorio contiene código Python para gestionar IBM Security Appliances mediante sus respectivas API REST. El appliance ISAM es el que tiene el código más maduro. El código para el appliance ISDS está en desarrollo. El código para el appliance ISVG es nuevo probado solo con...

ioc-scanner-CVE-2019-19781

Escáner de Indicadores de Compromiso para CVE-2019-19781 Este repositorio contiene una utilidad para detectar compromisos de los dispositivos Citrix ADC relacionados con CVE-2019-19781. La utilidad, y sus recursos, codifican indicadores de compromiso recopilados durante las investigaciones de...

CVE-2025-31644

CVE-2025-31644: Inyección de Comandos en Appliance mode en F5 BIG-IP El parámetro “file” del comando “save” es vulnerable a un ataque de inyección de comandos, permitiendo que un atacante autenticado con privilegios de administrador a la API web “/mgmt” o al shell SSH “tmsh”, obtenga ejecución...

CVE-2019-19781

CVE-2019-19781 Citrix ADC Remote Code Execution python usage: python CVE-2019-19781.py http://192.168.3.244 0x01 download NSVPX-ESX-13.0-47.22nc64.zip https://www.citrix.com/downloads/citrix-gateway/ configure static networ...

Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software is vulnerable to local file inclusion due to directory traversal attacks that can read sensitive files on a targeted system because of a lack of proper input validation of URLs in HTTP requests processe...

nbox-pwnage

nbox-pwnage root@kitploit: Here comes the paintrain! . lol . lol . lol o o ==== OO|nn. || | nbox | oo oo oo 'oo OOOO-| oo\ | +--+--+--+--+--+--+--+--+--+-$1-+--+--+--+--+--+--+ 1. Crea tu propio appliance de nbox: vagrant up 2. Accede por SSH al appliance con vagrant ssh 3. Comprueba algunas de...

check-your-pulse

check-your-pulse This utility can help determine if indicators of compromise IOCs exist in the log files of a Pulse Secure VPN Appliance for CVE-2019-11510. The Cybersecurity and Infrastructure Security Agency CISA has seen many organ izations breached despite patching their appliance because of...

ioc-scanner-CVE-2019-19781

Escáner de indicadores de compromiso para CVE-2019-19781 Este repositorio contiene una utilidad para detectar compromisos de los dispositivos Citrix ADC relacionados con CVE-2019-19781. La utilidad y sus recursos codifican indicadores de compromiso recopilados durante las investigaciones de FireE...

CVE-2025-40602

CVE-2025-40602 📌 Overview CVE-2025-40602 is a local privilege escalation vulnerability affecting SonicWall Secure Mobile Access SMA 1000 series appliances. The flaw exists in the Appliance Management Console AMC due to insufficient authorization checks , allowing an authenticated low-privileged...

Quest KACE System Management Appliance 8.0.318 - Remote Code Execution

The '/common/downloadagentinstaller.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. id: CVE-2018-11138 info: name: Quest KACE System Management Appliance 8.0.318 - Remote Code Executi...

CVE-2021-44529

CVE-2021-44529 Vendor Homepage: https://www.ivanti.com/ Software Link: https://forums.ivanti.com/s/article/Customer-Update-Cloud-Service-Appliance-4-6 Version: CSA 4.6 4.5 - EOF Aug 2021 Execute root@kitploit: python3 exploit.py Example root@kitploit: python3 exploit.py 'https://x.x.x.x' 'ls'...