Passhunt

Passhunt Passhunt es una herramienta simple para buscar credenciales predeterminadas en dispositivos de red, aplicaciones web y más. Busca entre 523 proveedores y sus 2084 contraseñas predeterminadas. Captura de pantalla Requisitos previos Asegúrate de tener instalado lo siguiente: root@kitploit:...

CVE-2017-8225

CVE-2017-8225 Install Python3 root@kitploit: apt-get install git pip3 install requests pip3 install colorama sudo apt update apt-get install python3 Installation: root@kitploit: git clone https://github.com/kienquoc102/CVE-2017-8225.git Code Exploit: root@kitploit: cd CVE-2017-8225 python3...

CVE-2018-18852

CERIO router Authenticated RCE backdoor vendor creds CVE-2018-18852 Python PoC hook-s3c github.com/andripwn, @andripwn on twitter Working Python PoC for CVE-2018-18852, originally appearing on; https://github.com/andripwn/CVE-2018-18852 What's up CERIO Router models and variants of, DT300N, DT100...

Wordpress-Default-Password

Wordpress Default U/P python 2.7 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614 Encrypt By Azim !...

CVE-2025-4602

eMagicOne Store Manager para WooCommerce = 1.2.5 - Lectura Arbitraria de Archivos No Autenticada El plugin Administrador de Tienda eMagicOne para WooCommerce expone un punto final de protocolo de gestión remota ?connector=bridge que permite operaciones de eliminación de archivos en el servidor. E...

CVE-2025-4603

eMagicOne Store Manager para WooCommerce = 1.2.5 - Eliminación Arbitraria de Archivos sin Autenticación El plugin eMagicOne Store Manager para WooCommerce expone un endpoint de protocolo de gestión remota ?connector=bridge que permite operaciones de eliminación de archivos en el servidor. El...

Zena-CVE-2021-45026

Zena - Stored XSS to RCE Exploit POC Exploit POC for Rocket Software's Zena application v. 4.2.1 - Stored XSS to RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html POC Process: Logs into Zena's webconfig page using default credentials Drops Stored XSS...

CVE-2026-55579

CVE-2026-55579 — Pheditor Contraseña Predeterminada Hardcodeada RCE -critical TL;DR: Pheditor todas las versiones se distribuye con una contraseña de administrador predeterminada hardcodeada admin incrustada en su código fuente. No se fuerza el cambio de contraseña en el primer inicio de sesión,...

HIKRAVEN

HIKRAVEN 🛡️ Advanced Hikvision Security Assessment Platform - Professional Edition Features • Quick Start • Installation • Usage • Documentation • Disclaimer ⚠️ IMPORTANT LEGAL NOTICE ! THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ! Unauthorized access to computer systems is illegal and...

LinksysLeaks

LinksysLeaks Python3 script to scan for Linksys smart wifi devices that are vulnerable to CVE-2014-8244 This script was created to help me find vulnerable smart wifi devices that leak sensitive information,known as CVE-2014-8244. You have the option to either scan a single ip or a text file with...

EUVD-2026-77484

novel-plus through 5.3.3 contains an insecure default cache-management password in the CacheController.refreshCache endpoint that allows anonymous attackers to invalidate portal caches by supplying the hardcoded default value in the URL path. Attackers can trigger unauthorized cache invalidation ...

CVE-2022-25581

CVE-2022-25581 Can't find it anywhere on the web, leaving a backup, Python exploit script , used to automate the following steps: ✅ Script Functionality Objectives 1. Log in to the backend obtain csrf and token 2. Construct a malicious request packet to upload a compressed archive containing a...

CVE-2017-7921

CVE-2017-7921 Hikvision unauthorized access detection poc and password detection Usage： root@kitploit: Usage: -a 加载Poc模块 -b 加载密码爆破模块 -e 加载Exp模块 -f string 文件名称 默认为空 -i string 输入ip地址 eg:192.0.0.1-192.0.0.255 -p string 密码 default:12345 default "12345" -s string 协议 eg:http default "http" -t int 线程数量...

wp-def

wp-def Wordpress Default User + Pass Python 2.7 Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Use? Install Python 2.7 Download Here python file.py...

CVE-2020-5903

CVE-2020-5902 RCE /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=delete+cli+alias+private+list /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=create+cli+alias+private+list+command+bash...

CVE-2023-26258-ArcServe

The TL; DR; If you are in the network you can scan for instances configured by default using ArcServeRadar.py. I tried to port it to C but couldn't, feel free to do it if you know how : root@kitploit: c:\Users\vagrant\Desktoppython ArcServeRadar.py "Ethernet 2" 6969 192.168.56.20 -= ArcServe Find...

CVE-2025-57428

⚠️ Este repositorio se mantiene solo como referencia para CVE-2025-57428. Para otros avisos y actualizaciones, consulte: security-advisories. CVE-2025-57428 - Interfaz de depuración Telnet habilitada por defecto permite acceso de bajo nivel a flash/registros Producto afectado Proveedor/Marca: Each...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 RCE autenticado Este repositorio contiene una prueba de concepto del exploit para CVE-2021-43857 , una vulnerabilidad de ejecución remota de código que afecta a Gerapy -p -L -P Requisitos 1. Python 3.x 2. requests y pyfiglet pip install requests pyfiglet 3. Netcat nc...

CVE-2026-90498

A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to use of default credentials. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor...

EUVD-2026-76972

A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to use of default credentials. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor...