pwndb

pwndb.py pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Usage root@kitploit: usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help message and exit --target...

pathprober

pathprober Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration...

Maryam

OWASP Maryam OWASP Maryam is a modular open-source framework based on OSINT and data gathering. It is designed to provide a robust environment to harvest data from open sources and search engines quickly and thoroughly. Installation Supported OS Linux FreeBSD Darwin OSX root@kitploit: $ pip insta...

widevine-l3-decryptor

Deprecation Warning This repository used to contain code to circumvent Widevine L3 DRM in Chrome on Windows machines. It's not working anymore as of May 31st 2021, but you can read the reversing writeup. Update Google issued a DMCA takedown request against most forks of this repository. The...

socialhunter

socialhunter !IMPORTANT This tool is no longer working, and we won't be able to fix it as it has become difficult to bypass social media protections. Crawls the given URL and finds broken social media links that can be hijacked. Broken social links may allow an attacker to conduct phishing attack...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

haxx

haxx Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1. Based on CoreTrustDemo, also please note that certificates are not copyrightable. Usage Note: requires macOS + existing jailbreak Get up and running This method works on 14.0-14.6. 14.7 14.7b1-14.8.1 requires launch...

osinteye

This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: root@kitploit: $ git clone...

cisco-SNMP-enumeration

Cisc0wn - Script SNMP de Cisco Script de enumeración SNMP de Cisco, fuerza bruta, descarga de configuración y descifrado de contraseñas. Probado y diseñado para funcionar con switches y routers Cisco IOS. Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por...

metasploitavevasion

Metasploit AV Evasion Metasploit payload generator that avoids most Anti-Virus products. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/metasploitavevasion Released under AGPL see...

RP_Import_RCE

Real Player 'external::Import': descarga arbitraria de archivos, vulnerabilidades de Directory Traversal que conducen a ejecución remota de código demo en video: https://youtu.be/CONlijEgDLc Real Player utiliza la funcionalidad de Microsoft Internet Explorer y expone propiedades y métodos a travé...

zeek-caldera-detector

zeek-caldera-detector zeek-caldera-detector es un paquete basado en Zeek para detectar balizas beacons de Caldera y descargas de agentes. Está diseñado para identificar actividades sospechosas asociadas con los frameworks C2 de Caldera, incluyendo Sandcat, Ragdoll y Manx. Este paquete proporciona...

CVE-2026-81052

Dell ThinOS 10, versions prior to 260510.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2026-81275

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

selenium-node-takeover-kit

Metasploit Exploits Este proyecto se ha movido. Para obtener la última versión, haga pull desde https://codeberg.org/JonStratton/selenium-node-takeover-kit Esto combina algunos de los ejemplos siguientes para subir archivos a, descargar archivos de, y ejecutar código en un nodo Selenium a través...

CVE-2026-81275 WordPress Youzify plugin <= 1.3.7 - Arbitrary File Download vulnerability

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

CVE-2026-81275

The WordPress Youzify plugin (versions

EUVD-2026-75514

Subscriber Arbitrary File Download in Youzify = 1.3.7 versions...

WordPress Direct Download for WooCommerce plugin <= 1.19 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Spy0x7 in WordPress Plugin Direct Download for WooCommerce versions = 1.19...

CVE-2018-13379

CVE-2018-13379 - FortiGate SSL-VPN 路径遍历 PoC 描述 针对 CVE-2018-13379 的概念验证脚本，该漏洞是 Fortinet FortiGate SSL VPN Web 门户中的一个严重路径遍历漏洞。攻击者无需认证即可通过特制的 HTTP 资源请求下载系统文件，可能导致包含敏感信息的会话文件泄露。 漏洞详情 CVE ID ：CVE-2018-13379 CVSS 评分 ：9.8（严重） 受影响版本 ：FortiOS 6.0.0 至 6.0.4、5.6.3 至 5.6.7、5.4.6 至 5.4.12 漏洞端点 ：/remote/fgtlan...