Lucene search
+L

71228 matches found

Kitploit
Kitploit
added 2026/09/11 11:11 a.m.4 views

Oh365UserFinder

Oh365 User Finder v1.1.2 Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 9:27 a.m.10 views

ctf-party

ctf-party What it is...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 8:33 a.m.7 views

wvctf

WebVulnCTF WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way. Through a rewards system, the user must search for a set of flags in the vulnerable application, that correspond to frequent...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 7:06 a.m.6 views

Debuggable-App-Exploit

CVE-2024-31317 Debuggable App Exploit A Python-based exploit for CVE-2024-31317 Android Zygote Injection that makes any installed Android app debuggable by injecting malicious zygote arguments through the hiddenapiblacklistexemptions setting. Includes optional Frida gadget injection for runtime...

7.8CVSS7.5AI score0.00779EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/11 7:05 a.m.6 views

cookiescanner

cookiescanner Tool for check the cookie flag in multiple sites. Intro Tool created to do more easy the process of check the cookie flag when we are analyzing multiple web servers. If you want to know for why could be useful this tools? https://www.owasp.org/index.php/SecureFlag...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 7:02 a.m.8 views

page_table_walk

Capture the Flag in Physical Memory You've read about paging. The diagrams make sense. Four levels, 9 bits each, page frame, offset. Sure. But then you hit a challenge that requires actually walking page tables, and you realize you don't know it. You know about it. Big difference. What worked for...

7.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:00 a.m.7 views

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - Android Update Ownership Trust Bypass PoC A complete Android laboratory environment for reproducing and studying CVE-2026-0023. This repository demonstrates how CVE-2026-0023 allows a regular installer to influence an internal Android installation flag that should only be controll...

7.8CVSS6.3AI score0.00084EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 5:58 a.m.11 views

BIT-TOMCAT-2026-65927 Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.0 through 10.1.57, from 9.0.0 through 9.0.120. Th...

7.5CVSS5.8AI score0.00779EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 3:24 a.m.6 views

CVE-2023-42860

CVE-2023-42860 Exploit for CVE-2023-42860 for research purposes only. This exploit works for versions of macOS earlier to 13.3, even though Apple´s changelog says it was fixed in version 14.1. Steps 1. Download the InstallAssistant.pkg 2. Modify the variable TARGETFILE on the exploit.sh file to a...

7.7CVSS7.1AI score0.00488EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 3:15 a.m.6 views

ctf-party

ctf-party What it is A library to enhance and speed up script/exploit writing for CTF players or security researchers, bug bounty hunters, pentesters but mostly focused on CTF by patching the String class to add a short syntax of usual code patterns. The philosophy is also to keep the library to ...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 1:22 a.m.160 views

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

5.5AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 12:48 a.m.13 views

zipbrk

zipbrk 2.2.0 Zip break is a tool to disect, modify, and reassemble zip files for a variety of tasks. It is designed to be cross-platform and as simple as possible to port between varied systems. It has been tested on Windows 9x/2k/XP, Windows Vista/7/8, Fedora 23/24/25/26/27, Kali, Debian 8/9,...

7.8CVSS6.6AI score0.65764EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/11 12:39 a.m.20 views

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 12:12 a.m.7 views

CVE-2018-16509

CVE-2018-16509 Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities Run root@kitploit: $ docker run -d --name cve-2018-16509 -p 9000:9000 cve-2018-16509...

9.3CVSS7.5AI score0.92499EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 11:11 p.m.166 views

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

5.6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/09/10 10:51 p.m.6 views

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

Summary With -l/--links, rclone's local backend recreates a source .rclonelink object as a real symlink at the destination verbatim preserved by design for faithful backups. Directory-metadata application, however, does not go through the os.Root sandbox and does not use NOFOLLOW syscalls. A loca...

7.1CVSS0.00216EPSS
SaveExploits0References6Affected Software1
Kitploit
Kitploit
added 2026/09/10 8:20 p.m.7 views

CTFd

What is CTFd? CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. Features Create your own challenges, categories, hints, and flags from the Admin Interface Dynamic...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 8:04 p.m.6 views

APT-Individual-Combat-Guide

APT-Individual-Combat-Guide Many people think it is difficult to launch an APT attack because they do not know how the APT attack occurs. In fact, with the development of automation tools, the APT attack can be easily launched. 切换 切换到中文版 Background This warehouse is the code and command warehouse...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 7:24 p.m.6 views

firepwner

CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example o...

6.8CVSS6AI score0.02634EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 5:45 p.m.7 views

MAL-009

MAL-009: Insecure Chaining of Flags T and TT in Zip for Linux In Zip for Linux, the “-TT” flag can be used to run arbitrary system commands. Due to the dangerous nature of this flag, it must always be used at the same time as the “-T” flag. By using a flag chaining attack, attackers that should...

6.9AI score
SaveExploits0References4
Rows per page
Query Builder