oracle-xxe-sqli

oracle-xxe-sqli Automated Oracle CVE-2014-6577 exploitation via SQLi Usage: root@kitploit: oracle-xxe-sqli.py -h -i IP -p PORT --disable-server --custom-headers CUSTOMHEADERS -f PAYLOADFILE url Options positional arguments: url URL to inject. Use as the injection marker, just once. optional...

OFBiz-Attack

OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack Test Environment vulhub/ofbiz:18.12.09 Usage Start root@kitploit: java -jar OFBiz-Attack.jar There are three modules: Vulnerability Detection Just enter the target URL. Do not add extra routes, otherwise it will affect subsequent module...

CVE-2024-24919

Badges License MIT Installation 1. Install Python3 and pip If you can't figure this out, you shouldn't really be using this...

CVE-2022-22947

Introduction Inject Godzilla memory shell via CVE-2022-22947. Since the tools I found didn't have proxy functionality, I built my own wheel. Usage root@kitploit: main -u http://127.0.0.1:8080 Using proxy root@kitploit: main -u http://127.0.0.1:8080 -p http://10.0.0.1:8080 Reference...

CVE-2020-0688-GUI

一、Project Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...

CVE-2025-54068

CVE-2025-54068 A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APPKEY of the Livewire project is known. This tool is a recoded version of the original project by Synacktiv : Livepyre — https://github.com/synacktiv/Livepyre The core concept and methodology are based o...

CVE-2020-17453

Badges License MIT Installation Install CVE-2020-17453 with npm root@kitploit: npm install cve-2020-17453 -g Usage Example for single url root@kitploit: CVE-2020-17453 -u http://example.com Usage Example for list of urls...

Fortinet-CVE-2022-40684

Fortinet-CVE-2022-40684 Tool Introduction Quick exploitation tool for CVE-2022-40684, beginner code, feel free to submit issues if you find any Usage main -t http://127.0.0.1 -u admin -f path-of-ssh-key.pub Disclaimer This tool is only intended for legally authorized enterprise security practices...

ActiveMQ_Crack

ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...

CVE-2018-15877-RCE

CVE-2018-15877-RCE RCE via the Planview Activity Monitor plugin for wordpress. Requirements: Python3 Selenium Usage: root@kitploit: ./exploit.py...

Vegile

Vegile - Ghost In The Shell Vegile is a tool for Post exploitation Techniques in linux. Post Exploitation techniques will ensure that we maintain some level of access and can potentially lead to deeper footholds into our targets trusted network. Donate If this project is very helpful to your...

PeekABoo

PeekABoo PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. The tool only works if WinRM is enabled. Since Windows Server 2012 WinRM is enabled by default on all Window...

cve-2022-21882-poc

cve-2022-21882-poc lpe poc for cve-2022-21882...

oauth-client-exploit

This repository does not have a README...

NetRipper

Description NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after...

twoplustwo

twoplustwo Implementing CVE-2020-0601...

enumy

Enumy Enumyは、ペンテストやCTFのポストエクスプロイテーションフェーズでターゲットのLinuxマシンにドロップする、超高速なポータブル実行可能ファイルです。enumyを実行すると、一般的なセキュリティ脆弱性がないかボックスを列挙します。 インストール x86またはx64タブのリリースから最終バイナリをダウンロードできます。 muslに静的にリンク 最終的なenumyバイナリをターゲットマシンに転送します。 最新リリース root@kitploit: ./enumy 誰がEnumyを使うべきか ペンテスターはターゲットマシン上で実行し、報告書のための発見事項を生成できます。...

fuxploider

fuxploider Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any...

CVE-2023-23752

Binaries for CVE-2023-23752 For ethical and educational purposes only 😉 Usage root@kitploit: CVE-2023-23752 -u http://someserverexample.com Build from source Go If you have Go installed, do: root@kitploit: git clone https://github.com/gunzf0x/CVE-2023-23752.git cd CVE-2023-23752 go run main.go -u...

redsails

Redsails About A post-exploitation tool capable of: maintaining persistence on a compromised machine subverting many common host event logs both network and account logon generating false logs / network traffic Based on PyDivert https://github.com/ffalcinelli/pydivert, a Python binding for...