Lucene search
+L

18308 matches found

Kitploit
Kitploit
•added 2026/09/28 3:56 p.m.•15 views

primefaces

From the Table to the Code: A Journey Through the RCE Vulnerability in POS for Restaurants This time we accidentally came across a vulnerability present in several POS applications for restaurants XETUX, which is a solution for restaurant monitoring and automation. In Panama, it is a widely used...

9.8CVSS8.5AI score0.94104EPSS
SaveExploits6References3
Kitploit
Kitploit
•added 2026/09/28 3:06 p.m.•13 views

SocksOverRDP

Socks Over RDP / Socks Over Citrix This tool adds the capability of a SOCKS proxy to Terminal Services or Remote Desktop Services and Citrix XenApp/XenDesktop. It uses Dynamic Virtual Channel that enables us to communicate over an open RDP/Citrix connection without the need to open a new socket,...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 2:25 p.m.•19 views

drltrace

Drltrace Compilación de prueba de Windows Compilación de prueba de Linux Drltrace es un trazador dinámico de llamadas API para aplicaciones Windows y Linux. Drltrace está construido sobre el framework de instrumentación binaria dinámica DynamoRIO. Drltrace fue implementado inicialmente por Derek...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 2:25 p.m.•261 views

drltrace

Drltrace Windows test build Linux test build Drltrace is a dynamic API calls tracer for Windows and Linux applications. Drltrace is built on top of DynamoRIO dynamic binary instrumentation framework. Drltrace was initialy implemented by Derek Bruening and distributed with DynamoRIO and DrMemory...

6AI score
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/28 2:13 p.m.•13 views

Groovy-scripting-engine-CVE-2015-1427

ElasticSearch Groovy Sandbox Bypass && Code Execution Vulnerability CVE-2015-1427 Test Environment jre version: openjdk:8-jre elasticsearch version: v1.4.2 Principle Reference articles: http://cb.drops.wiki/drops/papers-5107.html...

9.8CVSS9.1AI score0.99906EPSS
SaveExploits19References1
Kitploit
Kitploit
•added 2026/09/28 2:11 p.m.•10 views

CVE-2023-4911-PoC

GNU C Library's Dynamic Loader Vulnerability CVE-2023-4911 Overview The GNU C Library glibc serves as the C library in the GNU system and is integral to Linux-based systems. At its core, glibc defines essential functionalities for programs, including system calls and common functions like open,...

7.8CVSS7.5AI score0.81422EPSS
SaveExploits28References1
Kitploit
Kitploit
•added 2026/09/28 1:05 p.m.•39 views

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...

5.6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 1:05 p.m.•19 views

whonow

Servidor DNS Whonow Un servidor DNS malicioso para ejecutar ataques de DNS Rebinding sobre la marcha. whonow te permite especificar respuestas DNS y reglas de rebinding dinámicamente usando las propias solicitudes de dominio. root@kitploit: responder a consultas DNS para este dominio con...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 12:23 p.m.•24 views

gef

GEF pronunciado ʤɛf - "Jeff" es un conjunto de comandos para x86/64, ARM, MIPS, PowerPC y SPARC para ayudar a desarrolladores de exploits e ingenieros inversos cuando usan el clásico GDB. Proporciona funcionalidades adicionales a GDB mediante la API de Python para asistir durante el proceso de...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 12:20 p.m.•16 views

AndroTickler

AndroTickler Una herramienta Java que ayuda a realizar pentesting en aplicaciones Android de manera más rápida, fácil y eficiente. AndroTickler ofrece muchas funciones de recopilación de información, análisis estáticos y dinámicos que cubren la mayoría de los aspectos del pentesting de aplicacion...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 12:05 p.m.•13 views

Awesome-Android-Reverse-Engineering

Awesome Android Reverse Engineering A curated list of awesome Android Reverse Engineering training, resources, and tools. How to Use Awesome-Android-Reverse-Engineering is an amazing list for people who work in taking apart Android applications, systems, or components. Simply press ctrl + F to...

6AI score
SaveExploits0References52
Kitploit
Kitploit
•added 2026/09/28 11:49 a.m.•188 views

sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

5.6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 11:44 a.m.•46 views

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

6.4AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/28 11:19 a.m.•14 views

NimGetSyscallStub

NimGetSyscallStub Obtén Syscalls frescas de una copia nueva de ntdll.dll. Este código puede usarse como alternativa a las ya publicadas y fantásticas herramientas NimlineWhispers y NimlineWhispers2 de @ajpc500 o ParallelNimcalls. La ventaja de obtener Syscalls dinámicamente es que la firma de los...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/28 10:22 a.m.•13 views

fuzzuli

fuzzuli Motivación • Antecedentes • Instalación • Uso • Ejecutar fuzzuli • Página de la herramienta fuzzuli es una herramienta de fuzzing de URL que tiene como objetivo encontrar archivos de respaldo críticos creando una lista de palabras dinámica basada en el dominio. Motivación...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/28 10:18 a.m.•11 views

CVE-2023-32571-POC

Dynamic Linq injection to RCE - CVE-2023-32571 About Dynamic Linq injection to RCE CVE-2023-32571 Recently, members of the NCC Group discovered a vulnerability in Dynamic Linq that allows attackers to call C functions through a Linq Injection, thus making it possible to obtain RCE. Even with the...

9.8CVSS8.6AI score0.34904EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/28 9:17 a.m.•15 views

AndroPyTool

AndroPyTool ¡Actualización! Las imágenes de DroidBox fueron corregidas. El análisis dinámico ya funciona. Esta es una herramienta para extraer características estáticas y dinámicas de APKs de Android. Combina diferentes herramientas de análisis de aplicaciones Android conocidas como DroidBox,...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/28 9:10 a.m.•19 views

svg_phishing_tools

SVG Security Analysis Toolkit - Tool Documentation This toolkit contains specialized Python tools for analyzing potentially malicious SVG files and detecting security mechanisms. Overview The toolkit consists of four main tools: 1. extract.py - Static analysis for obfuscated URL extraction 2...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 8:56 a.m.•13 views

CVE-2025-6440

CVE-2025-6440 — WordPress WooCommerce Dynamic Pricing & Discounts Plugin Overview This repository contains a Python proof-of-concept PoC script for testing an unauthenticated file upload vulnerability affecting the WordPress WooCommerce Dynamic Pricing & Discounts plugin. ⚠️ This project is...

9.8CVSS8.5AI score0.33345EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/28 8:54 a.m.•22 views

VMProtect-devirtualization

VMProtect Devirtualization An experimental dynamic approach to devirtualize pure functions protected by VMProtect 3.x TL;DR Introduction The approach Example 1: A simple bitwise operation protected Example 2: A MBA operation protected Example 3: More than one basic block Conclusion and limitation...

5.9AI score
SaveExploits0
Rows per page
Query Builder