Dr0p1t-Framework

Not maintained currently Wait for the next version Dr0p1t-Framework Have you ever heard about trojan droppers ? In short dropper is type of malware that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks Trust me :D ...

F5-BIG-IP-POC

F5-BIG-IP POC go语言编写CVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC集合 后续会增加F5其他POC author:160team.west9B 仅限用于安全研究人员在授权的情况下使用，遵守网络安全法，产生任何问题，后果自负，与作者无关。 01-基本介绍 F5 POC合集： CVE-2020-5902：F5 BIG-IP远程代码执行漏洞 CVE-2021-22986：F5 BIG-IP iControl REST未授权远程命令执行漏洞 CVE-2022-1388：身份验证绕过远程命令执行 02-使用说明 usage:...

HERCULES

HERCULES HERCULES is a customizable payload generator that can bypass antivirus software. root@kitploit: VERSION 3.0.5 INSTALLATION SUPPORTED PLATFORMS:...

CVE-2026-21003-JWT-none-Algorithm-Bypass-via-kid-Header-Omission

CVE-2026-21003 – Bypass del algoritmo "none" de JWT mediante la omisión del encabezado kid Código del programa Node.js root@kitploit: // jwtverifyserver.js - Vulnerable JWT verification const jwt = require'jsonwebtoken'; const express = require'express'; const app = express; app.useexpress.json;...

CVE-2026-18964

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.5.9 due to insufficient input sanitization and...

CVE-2026-12215

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

-CVE-2019-14287-SUDO-bypass-vulnerability

This repository does not have a README...

Sudo-Security-Bypass-Vulnerability

此存储库没有 README。...

SpookFlare

SpookFlare SpookFlare has a different perspective to bypass security measures and it gives you the opportunity to bypass the endpoint countermeasures at the client-side detection and network-side detection. SpookFlare is a loader/dropper generator for Meterpreter, Empire, Koadic etc. SpookFlare h...

Veil

Veil Veil Logo Veil is a tool designed to generate metasploit payloads that bypass common anti-virus solutions. Veil is current under support by @ChrisTruncer Software Requirements: The following OSs are officially supported: Debian 8+ Kali Linux Rolling 2018.1+ The following OSs are likely able ...

CVE-2026-18964 Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button <= 3.5.9 - Reflected Cross-Site Scripting

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.5.9 due to insufficient input sanitization and...

EUVD-2026-75931

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.5.9 due to insufficient input sanitization and...

EUVD-2026-75928

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

CVE-2026-12215

OTP Login & Register Woocommerce (WordPress plugin) is vulnerable to unauthenticated authentication bypass via OTP brute force in all versions up to and including 2.7.2 . The root cause is threefold: the OTP rate-limit counter is keyed exclusively on the attacker-controlled xoo_ml_user_ip_data co...

CVE-2026-12215 OTP Login & Register Woocommerce <= 2.7.2 - Unauthenticated Authentication Bypass via Brute Force

The OTP Login & Register Woocommerce plugin for WordPress is vulnerable to Authentication Bypass via OTP Brute Force in all versions up to, and including, 2.7.2. The vulnerability exists because the OTP rate-limit attempt counter in processotpform is keyed exclusively on the attacker-controlled...

firefox_tunnel

firefoxtunnel 使用 Firefox 建立隧道以进行远程通信的方法。 有效载荷的输入输出使用 cookie.sqlite 和带有自动提交功能的 HTML 与 JavaScript，浏览器以隐藏模式运行。 阅读文档： https://medium.com/code-fighters/firefox-tunnel-to-bypass-any-firewall-bc6f8b432980 运行 PoC 的步骤：...

CVE-2026-45034

🧨 Explotación de Deserialización Phar de PHPSpreadsheet Bypass deprohibitWrappers + Ejecución Remota de Código RCE en phpoffice/phpspreadsheet Este repositorio proporciona un exploit de prueba de concepto PoC para una vulnerabilidad crítica en la popular librería PHP PHPSpreadsheet. El ataque...

nginxpwner

Nginxpwner Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities. Install: root@kitploit: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh Install using Docker root@kitploit: git clone...

MeterPwrShell

非活跃工具 - 原因：忙于其他事务 root@kitploit: . . . / \ / | \ \ / /| | | | | | \ \ / \ / / \ / \ \ | / / | \ \ | | / | | | | / / / Y \ /| | \ /| | / | \ / | | / | Y \ /| || |/ \ | /\ | \ | || // || / /|| /\ /| / / / / / / / / MeterPwrShell2 自动化工具，可生成能在 Metasploit 上创建 Meterpreter Shell 的...

CFUnmitigate

CFUnmitigate UAM Bypass only by using CloudScraper requests. Install root@kitploit: git clone https://github.com/Mrakovic-ORG/CFUnmitigate cd CFUnmitigate npm install node CFUnmitigate.js Disclaimer We are not responsible for any damage done with this script, its has been made for educational...