CVE-2021-39165

CVE-2021-39165 Dieses Python-Skript ermöglicht es, CVE-2021-39165 in Cachet vor und einschließlich Version 2.3.18 automatisch auszunutzen. Referenzen : https://github.com/fiveai/Cachet/security/advisories/GHSA-79mg-4w23-4fqc https://nvd.nist.gov/vuln/detail/CVE-2021-39165...

CVE-2023-4220

RCE für Chamilo LMS CVE-2023-4220 unter Verwendung einer Web Shell Dieses Projekt automatisiert die Ausnutzung der Remote Code Execution-Schwachstelle CVE-2023-4220 in Chamilo LMS. Mit einer Web Shell ermöglicht das Tool die automatisierte Ausnutzung der Schwachstelle, um die Kontrolle über...

CVE-2023-4220

autopwn Autopwn é uma ferramenta de ataque automatizada projetada para auxiliar testadores de penetração e caçadores de recompensas em reconhecimento e exploração. A ferramenta suporta vários protocolos, incluindo SSH, SMB, FTP, RDP, WinRM, MySQL, MSSQL, PostgreSQL, MongoDB, Redis e VNC. Ela tamb...

WIndows-7-automated-exploitation-using-metasploit-framework-

Dieses Repository hat keine README-Datei...

nodexp

NodeXP - Ferramenta de Detecção e Exploração para Serviços Node.js! NodeXP é uma ferramenta integrada, escrita em Python 2.7, capaz de detectar possíveis vulnerabilidades em serviços Node.js bem como explorá-las de forma automatizada, baseada no ataque ServerSideJavascriptInjection! Primeiros...

harbor

مقدمة عن الفريق فريق تشونغتشينغ جيوقونغجي الأمني ملتزم بمشاركة أدوات الأمن مفتوحة المصدر، وتغطي اتجاهات البحث مجالات متعددة مثل تمارين الفريق الأحمر/الأزرق، أمن الويب، أمن الأجهزة المحمولة، تطوير الأمن، بناء الأمن المؤسسي، أمن إنترنت الأشياء/أمن التحكم الصناعي/الذكاء الاصطناعي/الأمن الكمي وغيرها...

metateta

Metateta Ferramenta Automatizada Metateta Para Escanear e Explorar Protocolos de Rede Usando Metasploit Para testes de penetração mais rápidos em grandes redes O Que Você Pode Fazer Escanear com todos os módulos do metasploit para um protocolo de rede específico como smb, smtp, snmp Executar todo...

jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

CVE-2024-3400

CVE-2024-3400 Autor: wa6n3r | GitHub | Web Beschreibung Werkzeug zur automatisierten Ausnutzung der Schwachstelle CVE-2024-3400 in Palo Alto Networks PAN-OS-Geräten. Unterstützt mehrfädige Scans, automatischen Download von Artefakten und detaillierte Protokollierung. !!!Wichtig : Verwenden Sie es...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

Mass-Assigner

Mass Assigner Mass Assigner ist ein leistungsstarkes Tool, das entwickelt wurde, um Mass Assignment-Schwachstellen in Webanwendungen zu identifizieren und auszunutzen. Dies wird erreicht, indem zunächst Daten von einer angegebenen Anfrage abgerufen werden, z. B. durch Abrufen von...

oracle-xxe-sqli

oracle-xxe-sqli استغلال آلي لثغرة Oracle CVE-2014-6577 عبر SQLi الاستخدام: root@kitploit: oracle-xxe-sqli.py -h -i IP -p PORT --disable-server --custom-headers CUSTOMHEADERS -f PAYLOADFILE url الخيارات الوسائط الموضعية: url \tعنوان URL للحقن. استخدم كعلامة الحقن، مرة واحدة فقط. الوسائط الاختيارية...

CVE-2025-2304

CVE-2025-2304 - Escalação de Privilégios no Camaleon CMS Este repositório contém um script Python que automatiza a exploração da vulnerabilidade de escalação de privilégios CVE-2025-2304 no Camaleon CMS. Ele foi testado na versão 2.9.0. Uso root@kitploit: python exp.py http://target.exmaple user...

Exploit for CVE-2026-10795

CVE-2026-10795 UpdraftPlus Auto-Exploit & Mass Scanner Au...

PT-2026-46364

Unauthenticated Local File Inclusion in Gita = 1.11 versions...

PT-2026-46326

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

PT-2026-46376

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

PT-2026-46371

Unauthenticated Local File Inclusion in Eros = 1.3 versions...

📄 WordPress AI Engine 3.1.3 Mass Enumeration

This advisory documents a fully automated PHP-based exploitation framework designed to perform mass enumeration, plugin detection, token extraction, and automated account creation targeting vulnerable WordPress MCP-related REST API endpoints...

From Exposure to Exploitation: How AI Collapses Your Response Window

We’ve all seen this before: a developer deploys a new cloud workload and grants overly broad permissions just to keep the sprint moving. An engineer generates a "temporary" API key for testing and forgets to revoke it. In the past, these were minor operational risks, debts you’d eventually pay do...