Lucene search
+L

4825 matches found

Kitploit
Kitploit
added 2026/09/13 4:51 p.m.208 views

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 4:09 p.m.147 views

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

5.8AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/13 3:42 p.m.27 views

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

5.5AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 2:52 p.m.119 views

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

5.6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/13 2:09 p.m.128 views

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

5.7AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 1:55 p.m.10 views

nushell

Nushell A new type of shell. Table of Contents Status Learning About Nu Installation Configuration Philosophy Pipelines Opening files Plugins Goals Officially Supported By Contributing License Status This project has reached a minimum-viable-product level of quality. Many people use it as their...

5.9AI score
SaveExploits0References19
Kitploit
Kitploit
added 2026/09/13 12:35 p.m.8 views

CVE-2022-42176

PCSecure V5.0.8.xw - Use of Hard-coded Credentials in configuration files leads to admin panel access Summary Vendor: PCTechSoft SAS Product: PCSecure Affected versions: 5.0.8.xw CodeName: PapiQuieroPollo00 Vulnerability Type: Use of Hard-coded Credentials CWE-798 CVSSv3.1 Vector:...

7.8CVSS7.4AI score0.00332EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 12:28 p.m.277 views

rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 10:52 a.m.7 views

KeePass-CVE-2023-24055

KeePass-CVE-2023-24055 Reproducción de KeePass CVE-2023-24055 Reproducción de KeePass CVE-2023-24055 1, Preparar las máquinas: kali 192.168.232.129, windows10 192.168.232.128 2, Versión de keepass: 2.53 2, Principio: modificando el archivo de configuración de keepass KeePass.config.xml, se añade ...

5.5CVSS6.4AI score0.03691EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/13 10:17 a.m.169 views

evilginx

Evilginx v.1.1.0 THIS VERSION IS OBSOLETE. PLEASE USE THE LATEST VERSION! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx is a man-in-the-middle attack framework used for phishing credentials and session cookies of any web service. It's core runs on Nginx HTTP server, which utilizes...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 10:09 a.m.6 views

CVE-2024-36991

CVE-2024-36991 - Splunk Path Traversal Proof of Concept for CVE-2024-36991 which allows an attacker to read arbitrary files in Splunk for versions below to 9.2.2, 9.1.5, and 9.0.10 for Windows. Usage Read Splunk configuration files To read Splunk files just run the script passing the target URL...

7.5CVSS7.7AI score0.13006EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/13 6:37 a.m.152 views

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 4:56 a.m.11 views

H2-database-CVE-2022-23221

H2 Database RCE CVE-2022-23221 1. 요약 참고: https://nvd.nist.gov/vuln/detail/cve-2022-23221 H2는 관계형 데이터베이스 관리 시스템으로, SQL 엔진 안에서 Java 코드를 직접 컴파일하고 실행할 수 있는 기능을 제공한다. H2 드라이버는 JDBC URL을 파싱하여 애플리케이션과 데이터베이스 간의 연결을 설정한다. 이때 URL에 포함된 설정 파라미터를 통해 데이터베이스의 초기 상태나 동작을 제어할 수 있다. 문제가 되는 H2 2.1.210 이전 버전에는 JDBC...

10CVSS7.9AI score0.64766EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 2:28 a.m.42 views

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

5.8AI score
SaveExploits0References6
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.25 views

TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

7.5CVSS7.2AI score0.08669EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.359 views

Dahua Security - Configuration File Disclosure

A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3, DHI-HCVR51A08HE-S3, and...

9.8CVSS7.9AI score0.51418EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/12 12:31 a.m.12 views

EUVD-2026-76738

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password. A deployment that copies this example file into active configuration without running the setup routine that regenerates credentials will expose that...

9.2CVSS0.00253EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 4:21 a.m.16 views

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 3:11 a.m.36 views

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

6.5AI score
SaveExploits0References18
NVD
NVD
added 2026/09/10 7:17 a.m.5 views

CVE-2026-0303

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file...

6.3CVSS0.00128EPSS
SaveExploits1References1
Rows per page
Query Builder