port-scan-automation

LazyMap - Script di Scansione NMAP Automatico Automatizza le scansioni NMAP e le politiche Nessus personalizzate. Sviluppato da Daniel Compton https://github.com/commonexploits/port-scan-automation.git Rilasciato sotto AGPL, consulta LICENSE per maggiori informazioni Installazione root@kitploit:...

apkSneeze

apkSneeze v2.0.0 Uno strumento che automatizza le attività banali del penetration testing di app Android. Lo strumento attualmente fornisce le seguenti funzionalità: 1. Decompila il file apk fornito. 2. Converte il file apk fornito in un file Jar. 3. Cerca nei file decompilati stringhe...

dlkploit600

DLKPloiT600.py Einfaches Python-Skript für D-Link Schwachstellenscan und -test CVE-2019-13101 https://nvd.nist.gov/vuln/detail/CVE-2019-13101 https://www.cvedetails.com/cve/CVE-2019-13101/ https://us.dlink.com/en/security-advisory https://www.dlink.com/en/security-bulletin Voraussetzungen:...

device-pharmer

device-pharmer Apri simultaneamente i risultati di ricerca di Shodan, un IP specificato, un intervallo di IP, un dominio o un elenco di IP da un file di testo e stampa lo stato e il titolo della pagina, se applicabile. Aggiungi le opzioni -u e -p per tentare l'accesso alla pagina: cerca prima un...

ble_proxy

BLE HTTP Proxy System Ein Bluetooth Low Energy BLE basiertes HTTP-Proxy-System, das den Web-Browser-Verkehr über ein iOS-Gerät leitet. Dies ermöglicht das Surfen im Internet über die Internetverbindung des iOS-Geräts unter Verwendung von BLE als Transportschicht. Architekturübersicht root@kitploi...

CVE-2024-5420-XSS

Descrição Uma vulnerabilidade foi encontrada no utnserver Pro, utnserver ProMAX e INU-100 versão 20.1.22 e anteriores, afetando o parâmetro de descrição do dispositivo na interface web. Essa falha permite cross-site scripting XSS armazenado, possibilitando que atacantes injetem código JavaScript....

COMahawk

COMahawk Escalação de Privilégios: Armando CVE-2019-1405 e CVE-2019-1322 Demonstração em Vídeo https://vimeo.com/373051209 Uso Compilar ou Baixar do Release https://github.com/apt69/COMahawk/releases 1. Execute COMahawk.exe 2. ??? 3. Esperançosamente, lucro ou 1. COMahawk.exe "comando personaliza...

CVE-2026-22005-OAuth-2.0-Device-Code-Phishing-Short-Interval-

CVE-2026-22005 – Phishing del Codice Dispositivo OAuth 2.0 Intervallo Breve Codice Programma Python root@kitploit: devicecodeserver.py - Authorization server with too-fast polling import time, secrets codes = @app.route'/device/code' def devicecode: code = secrets.tokenurlsafe16 codescode =...

NetProbe

NetProbe: Netzwerksonde NetProbe ist ein Tool, mit dem Sie Geräte in Ihrem Netzwerk scannen können. Das Programm sendet ARP-Anfragen an IP-Adressen in Ihrem Netzwerk und listet die IP-Adressen, MAC-Adressen, Hersteller und Gerätemodelle der antwortenden Geräte auf. Funktionen Geräte in einem...

DahuaConsole

Dahua Console Version: Pre-alpha Bugs: Allerdings TODO: Jede Menge Zeug Installationsanforderungen root@kitploit: sudo pip3 install -r requirements.txt Argumente root@kitploit: -h, --help show this help message and exit --rhost RHOST Remote Target Address IP/FQDN --rport RPORT Remote Target Port...

awesome-flipperzero

Una raccolta di risorse fantastiche per il dispositivo Flipper Zero. 👋 Nuovo su Flipper Zero? Hai domande? Dai un'occhiata al Documento FAQ❗ | 🚫 Non affiliato con Flipper Devices Inc. ---|--- Indice dei contenuti Espandibile Database e dump Generale Sub-GHz NFC/RFID Infrarossi BadUSB Musica Altro...

Palo Alto Expedition - SQL Injection

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...

TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass

TOTOLINK EX1200T 4.1.2cu.5215 is susceptible to authentication bypass. An attacker can bypass login by sending a specific request through formLoginAuth.htm, thus potentially being able to obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-42887 info:...

Emerson Dixell XWEB-500 - Arbitrary File Write

Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...

WAVLINK - Access Control

Wavlink WN530HG4, WN531G3, WN533A8, and WN551K are susceptible to improper access control via /cgi-bin/ExportAllSettings.sh, where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform...

LB-LINK Routers - Unauthenticated Command Injection

LB-LINK X-PRO 1.0.22-20231206 contains a hardcoded credentials vulnerability caused by manipulation of an unknown function in /etc/shadow, letting remote attackers use hardcoded credentials, exploit requires high complexity id: CVE-2026-19900 info: name: LB-LINK Routers - Unauthenticated Command...

AnythingLLM - Information Disclosure

AnythingLLM suffers from an information disclosure vulnerability through the /api/setup-complete API endpoint. By accessing this endpoint, a remote and unauthenticated attacker can access sensitive configuration of the target AnythingLLM instance. This detection is included in the AI and LLM...

LOYTEC LGATE-902 6.3.2 - Local File Inclusion

LOYTEC LGATE-902 6.3.2 is susceptible to local file inclusion which could allow an attacker to manipulate path references and access files and directories including critical system files that are stored outside the root folder of the web application running on the device. This can be used to read...

Brother MFC-L9570CDW - Information Disclosure

An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...

Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console. id: CVE-2019-7276 info: name: Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console author: daffainfo severity: critical description: | Optergy Proton/Enterprise devices allow Remote Root Cod...