-CVE-2019-9053

CVE-2019-9053 This repository contains the corrected code for CVE: 2019-9053 How to use this? Inside the terminal you can deploy this by root@kitploit: python3 exploit2019.py this will ask you to add the URL etc.. after it starts running u can follow those steps to run it and get the Username and...

CVE-2022-41401

OpenRefine = v3.5.2 SSRF OpenRefine v=3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure. The root cause of this vulnerability lies ...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

mongobleed-detector

MongoBleed Detector Offline MongoDB Analysis Tool for CVE-2025-14847 MongoBleed A standalone Linux command-line tool that analyzes MongoDB data to identify likely exploitation of CVE-2025-14847 using multiple detection modules. Table of Contents Overview Detection Modules Requirements Installatio...

red-kube

Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...

policymaker

policymaker Generate a real vulnerability-disclosure policy — VDP, safe harbor, security.txt & DNS Security TXT — in minutes. No lawyer required...

Solr-GRAB

Solr-GRAB Steal Apache Solr instance Queries with or without a username and password. DISCLAIMER : This project should be used for authorized testing and educational purposes only. Download root@kitploit: git clone https://github.com/GnosticPlayers/Solr-GRAB Usage You can search for Apache Solr...

scanginx

Scanginx Scanner For Nginx - Remote Integer Overflow Vulnerability Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

CVE-2023-26258-ArcServe

The TL; DR; If you are in the network you can scan for instances configured by default using ArcServeRadar.py. I tried to port it to C but couldn't, feel free to do it if you know how : root@kitploit: c:\Users\vagrant\Desktoppython ArcServeRadar.py "Ethernet 2" 6969 192.168.56.20 -= ArcServe Find...

CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability root@kitploit: USAGE: python3 CVE-2019-11510.py...

CVE-2023-23752

CVE-2023-23752 Exploit for CVE-2023-23752 4.0.0 GET /api/index.php/v1/config/application?public=true HTTP/1.1 Host: 10.9.49.205 User-Agent: curl/7.68.0 Accept: / Mark bundle as not supporting multiuse HTTP/1.1 200 OK Date: Mon, 20 Mar 2023 15:14:05 GMT Server: Apache/2.4.41 Ubuntu x-frame-options...

pub

❤ Sé un héroe, invita una 🍺 🙂 ⟶ Ƀ : 1AZMeGVfCBbYwVYyG9s79pJDyocTZgiApa | Ξth : 0x438B38E30eF117C15fBfF833f9C2c70182925815 PoCs de exploits y herramientas para vulnerabilidades divulgadas por tintinweb. pub root@kitploit: police line - do not cross ==== police line - do not cross ==== police line ...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Jellyfin arbitrary file read Wker script, batchable. The logic is very simple, it checks for the existence of win.ini via GET: root@kitploit: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ define info = CVE-2021-21402...

CVE-2026-56139

camel-undertow Rest DSL muteException 堆栈跟踪泄露复现工具 CVE-2026-56139 本项目演示 Apache Camel 的 camel-undertow Rest DSL 消费者中的一个信息泄露 问题，编号为 CVE-2026-56139 。muteException 选项控制是否将未捕获处理异常的详细信息返回给 HTTP 客户端。在普通 undertow 端点上，该选项有效——但 undertow Rest DSL 在创建其响应绑定时将 muteException 硬编码为 false ，并且从不复制所配置的值，因此 muteExcepti...

cve-2025-5054

CVE-2025-5054 Vulnerability Detection Tool A Python tool to check if your Ubuntu system is vulnerable to CVE-2025-5054, a race condition in Apport that allows local information disclosure. This tool performs a series of checks to determine your system's status and provides recommendations if you...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Local File Inclusion Description : Customer Support System 1.0 is vulnerable to Local File Inclusion. An authenticated user has the capability to access and read PHP files from the operating system by exploiting a Local File Inclusion LFI vulnerability...

RepoReaper

RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server 和 Confluence Data Center 存在一个严重的未认证远程代码执行漏洞，被标识为 CVE-2022-26134，根据 Atlassian 于 2022 年 6 月 2 日发布的安全公告。该漏洞在 6 月 2 日公布时尚未被修补，并已在野外被利用。截至 6 月 3 日，已有补丁和临时解决方案可用。 本仓库仅用于实验和教育目的。 依赖项 Docker Nuclei 易受攻击的 Confluence 环境 运行易受攻击的环境 root@kitploit: docker-compose up...

Ctirix_RCE-CVE-2019-19781

CtirixRCE-CVE-2019-19781 Citrix ADC RCE cve-2019-19781 Vídeo Síguenos Vulnmachines YouTube Twitter Facebook...

CVE-2020-14179

CVE-2020-14179 通过 /secure/QueryComponent!Default.jspa 端点泄露敏感数据 优先级：高 受影响版本：8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 受影响版本的 Atlassian Jira Server 和 Data Center 允许远程、未认证的攻击者通过 /secure/QueryComponent!Default.jspa 端点的信息泄露漏洞查看自定义字段名称和自定义 SLA 名称。 据我所知，9.11.0、9.7.1... 也受影响 😂 CVE-2020-14179Finder....