Lucene search
+L

64489 matches found

CVE
CVE
•added 2026/09/30 4:30 p.m.•2 views

CVE-2026-103233

A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This impacts an unknown function of the file /admin/ of the component Admin Area. Such manipulation of the argument ID leads to authorization bypass. The attac...

6.5CVSS5.3AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/30 3:59 p.m.•15 views

dex

dex - A federated OpenID Connect provider Dex is an identity service that uses OpenID Connectopenid-connect to drive authentication for other apps. Dex acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or...

6.3AI score
SaveExploits0References9
Cvelist
Cvelist
•added 2026/09/30 3:15 p.m.•7 views

CVE-2026-103229 AdithyaYelloju Restaurant-Management-System Unauthenticated Action Script delete1.php mysqli_query sql injection

A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqliquery of the file admin/delete1.php of the component Unauthenticated Action Script. Performing a manipulation of the argument ID results i...

7.5CVSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/30 2:46 p.m.•18 views

paniclock

PanicLock is a macOS menu bar utility that instantly disables Touch ID and locks the screen with a single click or closing your laptop lid. PanicLock fills a gap macOS leaves open: there is no built-in way to instantly disable Touch ID when it matters. Biometrics are convenient day-to-day, and...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/30 2:46 p.m.•13 views

SMSOTPBOT

ghost-OTPBOT ghost-OTPBOT is the most advanced and versatile OTP & SMS capture bot that is capable of getting OTP & SMS codes from victims by impersonating a company or bank. You can use this to get OTP for logins, banks, credit cards, apple pay, and more. Join...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 2:29 p.m.•17 views

apimspray

apimspray apimspray is a specialized Entra ID Passwordspraying Toolkit designed for authorized security research and Red Teaming. It utilizes Azure API Management APIM gateways as a distributed, rotating proxy layer for IP Rotating. Read Blog Post for more Details about this project Prerequisites...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 1:36 p.m.•19 views

BrowserBox

BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience 🖥️ NEW in v18.10.0 — the BrowserBox desktop app BETA BrowserBox now ships with a desktop app for running your BrowserBox without the command line. Start and stop sessions, pick how people reach it direct...

5.7AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/30 1:28 p.m.•46 views

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

6AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/30 1:05 p.m.•19 views

EvilMist

EvilMist EvilMist is a collection of scripts and utilities designed to support cloud security configuration audit, cloud penetration testing & cloud red teaming. The toolkit helps identify misconfigurations, assess privilege-escalation paths, and simulate attack techniques. EvilMist aims to...

6.1AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/30 12:09 p.m.•22 views

Maestro

Maestro Maestro is a post-exploitation tool designed to interact with Intune/EntraID from a C2 agent on a user's workstation without requiring knowledge of the user's password or Azure authentication flows, token manipulation, and web-based administration console. Maestro makes interacting with...

6.6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/30 12:08 p.m.•22 views

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ / \ \ / / // / '/ - / ////// / // /,////\// ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do. oo=|= ╬╬┤ ╠╬╬...

6.3AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 12:02 p.m.•22 views

TokenFlare

TokenFlare Serverless AITM Phishing Simulation Framework for Entra ID / M365 Features Lean: Core logic in src/worker.js only 530 lines of JavaScript. Modular: Supports a number of OAuth flows, with Intune Conditional Access bypass support out of the box Easily tweaked: Set up client branding, URL...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/30 11:40 a.m.•14 views

iDictPy

iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 11:22 a.m.•42 views

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

5.9AI score
SaveExploits0References13
Kitploit
Kitploit
•added 2026/09/30 10:47 a.m.•17 views

CVE-2025-59501

CVE-2025-59501 POC that abuses SCCM's AdminService API when Entra ID integration is enabled to elevate to Full Administrator and takeover an SCCM hierarchy. More details can be found in this blog Requirements uv Install git clone https://github.com/garrettfoster13/CVE-2025-59501.git cd...

4.8CVSS6.1AI score0.03038EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 10:00 a.m.•11 views

m33tfinder

M33tfinder is a tool to detect active conference ID ranges in a Cisco Meeting Server server. M33tbreak is a tool to test weak passcodes against a conference in Cisco Meeting Server server. Pins.txt contains, for example, 4 digits passcodes. This tools are intended to check if the server is...

7.5CVSS6.7AI score0.02184EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 9:34 a.m.•29 views

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation $ sudo pip install...

6AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/30 9:26 a.m.•18 views

EntraFalcon

EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 9:24 a.m.•785 views

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

9.3CVSS6AI score0.99991EPSS
SaveExploits42References3
Kitploit
Kitploit
•added 2026/09/30 9:23 a.m.•16 views

RedTeamCCode

RedTeamCCode Red Team C code repo Want to know what is the syscall ID been used by your system getsyscall.exe ntdll.dll NtProtectVirtualMemory ntdll.dll!NtProtectVirtualMemory at 0x00007FFDE568D010 NtProtectVirtualMemory syscall ID 0x00000050 80 CrowdStrike hooked ntdll.dll APIs...

6.3AI score
SaveExploits0
Rows per page
Query Builder