7979 matches found
CVE-2026-52102-PoC
CVE-2026-52102 - إثبات المفهوم للاستغلال إثبات مفهوم PoC يوضح CVE-2026-52102. الاستخدام root@kitploit: python3 CVE-2026-52102-PoC.py الأهداف أضف هدفًا واحدًا في كل سطر إلى ملف targets.txt. ملاحظة: لا تُدرج سوى الأنظمة التي تملكها أو لديك إذن صريح لاختبارها. مثال: root@kitploit:...
c2-cloud
About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...
sniffly
Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...
morpheus
Morpheus - automated ettercap TCP/IP Hijacking tool root@kitploit: Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam...
Egress-Assess
Egress-Assess Egress-Assess è uno strumento utilizzato per testare le capacità di rilevamento del traffico dati in uscita. Configurazione Per configurare, esegui lo script di setup incluso, oppure esegui i seguenti passaggi: 1. Installa pyftpdlib 2. Genera un certificato del server e salvalo come...
pwndrop
pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...
fprobe
FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...
scriptkiddi3
Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...
patoolkit
.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...
htrace.sh
Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...
react2shell-CVE-2025-55182
React2Shell Exploit CVE-2025-55182 Python-Exploit für die RCE-Schwachstelle in Next.js React Server Components mit HTTP/HTTPS-Unterstützung. 🚀 Schnellstart root@kitploit: Klonen & ausführen git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182...
CVE-2023-3452---WordPress-Canto-Plugin-RCE
CVE-2023-3452 - WordPress Canto Plugin RCE Exploit für das WordPress Canto Plugin ≤ 3.0.4 RFI-Schwachstelle. Funktioniert tatsächlich mit HTTPS — die anderen öffentlichen PoCs haben bei SSL aufgegeben. Anerkennung wo sie gebührt: Dieses CVE wurde von anderen gefunden. Ich habe nur eine Version...
http-vuln-CVE-2022-41082
LA VERSIONE AGGIORNATA CONSENTE ANCHE IL CONTROLLO HTTPS exchange-vuln-check.nse PER HTTP: nmap -p80 --script exchange-vuln-check.nse PER HTTPS: nmap -p443 --script exchange-vuln-check.nse SALVA I RISULTATI IN UN FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...
trajan
Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...
CVE-2026-53583
A flaw was found in libgit2, a C library for Git functionality. An inverted comparison in the OpenSSL backend's certificate verification logic, specifically when handling IP-literal hosts and certificate IP SubjectAltNames, allows a network attacker to intercept HTTPS connections. By presenting a...
endsfuzzer
endsfuzzer endsfuzzer ist ein einfaches Werkzeug, um eine Liste von Domains auf bestimmte Endpunkte zu fuzzen. Es prüft alle Domains in einer Liste auf einen einzelnen Endpunkt und wechselt dann zum nächsten Endpunkt. Funktionen Schnell. Nutzt Go-Routinen. Schonender für Server. Fuzzt alle Hosts...
hakoriginfinder
hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...
subjack
subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...
proxy2
proxy2 Proxy HTTP/HTTPS in un singolo script python Caratteristiche facile da personalizzare non richiede moduli esterni supporta sia IPv4 che IPv6 supporta le connessioni persistenti HTTP/1.1 supporta la generazione dinamica di certificati per l'intercettazione HTTPS Questo script funziona su...