Lucene search
+L

10280 matches found

Kitploit
Kitploit
added 2026/08/30 2:21 p.m.42 views

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/30 2:20 p.m.37 views

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 1:38 p.m.3 views

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto File Write Exploit This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400 Use with Caution Made with educational Purpouses only Usage: root@kitploit: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt Shoda...

10CVSS7.4AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
added 2026/08/30 12:19 p.m.131 views

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: root@kitploit: ▶...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 11:41 a.m.2 views

CVE-2024-28397-js2py-Sandbox-Escape

Introduction 中文 Analysis Chinese Analysis English js2py is a popular python package that can evaluate javascript code inside python interpreter. It is used by various web scrapers to parse javascript code on the website. There exists a vulnerability in the implementation of a global variable insi...

5.3CVSS6.7AI score0.04548EPSS
SaveExploits22References3
Kitploit
Kitploit
added 2026/08/30 9:57 a.m.2 views

CVE-2020-2034-POC

CVE-2020-2034-POC Determine the Version Running on the Palo Alto Network Firewall for the Global Protect Portal Recently a lot of critical vulnerabilities were announced by Palo Alto Networks here: https://security.paloaltonetworks.com/?severity=CRITICAL&product=PAN-OS&sort=-date This is a PoC to...

9.3CVSS7.3AI score0.07152EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/30 8:06 a.m.53 views

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 6:39 a.m.2 views

DrMITM

...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.80 views

Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting

Oracle Secure Global Desktop Administration Console 4.4 contains a reflected cross-site scripting vulnerability in helpwindow.jsp via all parameters, as demonstrated by the sgdadmin/faces/comsunwebui/help/helpwindow.jsp windowTitle parameter. id: CVE-2018-19439 info: name: Oracle Secure Global...

6.1CVSS6.3AI score0.12842EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.315 views

PAN-OS - Reflected Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link.The...

6.9CVSS6.6AI score0.46401EPSS
SaveExploits8References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.90 views

Rukovoditel <= 3.2.1 - Cross Site Scripting

A stored cross-site scripting XSS vulnerability in the Global Lists feature /index.php?module=globallists/lists of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add". id:...

5.4CVSS6.2AI score0.00918EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.108 views

Rukovoditel <= 3.2.1 - Cross Site Scripting

A stored cross-site scripting XSS vulnerability in the Global Entities feature /index.php?module=entities/entities of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter after clicking "Add New Entity"...

5.4CVSS6.2AI score0.00918EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.76 views

Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update

The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obtained from pages edited by the plugin, to update the...

8.6CVSS7.1AI score0.01594EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.57 views

Atlassian Jira <7.13.3/8.0.0-8.1.1 - Incorrect Authorization

Atlasssian Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 is susceptible to incorrect authorization. The ManageFilters.jspa resource allows a remote attacker to enumerate usernames via an incorrect authorization check, thus possibly obtaining sensitive information, modifyi...

5.3CVSS6.4AI score0.12719EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.67 views

Ally – Web Accessibility & Usability <= 4.0.3 - SQL Injection

The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user-supplied URL parameter in the getglobalremediations method, where it is directly concatenated...

7.5CVSS6.9AI score0.02331EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/30 5:46 a.m.71 views

WordPress FluentForms <= 5.1.16 - Broken Access Control

The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST API endpoint in all versions up to, and including,...

7.5CVSS5.8AI score0.0123EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/29 9:32 p.m.102 views

apkleaks

APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi root@kitploit: $ pip3 install apkleaks from Sourc...

5.7AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/08/29 7:30 p.m.3 views

Mindmaps

Mappa mentale per il pentesting di Azure Ottieni l'accesso di Global Admin 💥 con questa mappa mentale per i test di penetrazione di Azure. Sentiti libero di aprire una pull request con le tue tecniche! ❤️ Sviluppato da Alexis Danizan Rilasciato come open source da Synacktiv 🥷 📖 Risorse Risorse...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/29 4:19 p.m.1 views

CVE-2024-28397-js2py-Sandbox-Escape

Introduzione Cinese js2py è un popolare pacchetto Python che consente di valutare codice JavaScript all'interno dell'interprete Python. Viene utilizzato da vari scraper web per analizzare il codice JavaScript presente sui siti web. C'è una vulnerabilità nell'implementazione delle variabili global...

5.3CVSS6.7AI score0.04548EPSS
SaveExploits22References4
Kitploit
Kitploit
added 2026/08/29 2:54 a.m.152 views

pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

5.4AI score
SaveExploits0References1
Rows per page
Query Builder