Lucene search
+L

48500 matches found

Kitploit
Kitploit
added 2026/09/16 12:07 p.m.35 views

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

6AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/09/16 11:42 a.m.6 views

The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.

The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...

10CVSS6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 11:20 a.m.6 views

Telewreck

Telewreck A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248. This extension is based on the original exploit tool written by Paul Taylor @bao7uo which is available at https://github.com/bao7uo/dpcrypto. Credits and big thanks to him. A related blog post...

9.8CVSS8.3AI score0.75098EPSS
SaveExploits5References3
Kitploit
Kitploit
added 2026/09/16 10:44 a.m.7 views

whatsapp-media-decrypt

WhatsApp Media Decrypt A recent high-profile forensic investigation reported that “due to end-to-end encryption employed by WhatsApp, it is virtually impossible to decrypt the contents of the downloader .enc file to determine if it contained any malicious code in addition to the delivered video.”...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 10:40 a.m.110 views

metabigor

Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 10:07 a.m.12 views

SSH-Weak-DH

About This tool creates SSH connections to a server and goes through different client configurations to check if the server permits a Diffie-Hellman DH key exchange using a weak group. We aim for our tool to help assess SSH servers for weak DH key exchange settings. Please be aware that this tool...

6AI score
SaveExploits0
Cvelist
Cvelist
added 2026/09/16 9:55 a.m.6 views

CVE-2026-73440 Security Advisory 0178

On affected platforms running Arista EOS with Simple Network Management Protocol SNMP configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An authenticated user who gains access to thi...

4.2CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/16 9:52 a.m.32 views

sh4d0wup

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 9:49 a.m.4 views

cookiemonster

🍪 CookieMonster CookieMonster is a command-line tool and API for decoding and modifying vulnerable session cookies from several different frameworks. It is designed to run in automation pipelines which must be able to efficiently process a large amount of these cookies to quickly discover...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 9:15 a.m.76 views

hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/16 9:01 a.m.53 views

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

6.8AI score
SaveExploits0References5
EUVD
EUVD
added 2026/09/16 8:58 a.m.3 views

EUVD-2026-80316

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret belonging to ...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/16 8:56 a.m.65 views

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 8:54 a.m.13 views

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:51 a.m.10 views

PanOsExploitMultitool

PanOsExploitMultitool Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474 During early exploitation of CVE-2024-0012 and CVE-2024-9474's Remote Code Execution vulnerabilities, I acquired a shell and began identifyin...

9.8CVSS8.5AI score0.99718EPSS
SaveExploits18References1
Kitploit
Kitploit
added 2026/09/16 8:41 a.m.9 views

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS Authentication bypass Mass exploitation /api/v2/cmdb/system/admin/ "ssh-public-key1": "" root@kitploit: ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H 'Forwarded:...

9.8CVSS8.6AI score0.99984EPSS
SaveExploits25References2
Kitploit
Kitploit
added 2026/09/16 8:39 a.m.248 views

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/16 8:36 a.m.11 views

Blacklist3r

Blacklist3r The goal of this project is to accumulate the secret keys / secret materials related to various web frameworks, that are publicly available and potentially used by developers. These secrets will be utilized by the Blacklist3r tools to audit the target application and verify the usage ...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:34 a.m.7 views

bluez

BlueZ - Bluetooth protocol stack for Linux Copyright C 2000-2001 Qualcomm Incorporated Copyright C 2002-2003 Maxim Krasnyansky [email protected] Copyright C 2002-2010 Marcel Holtmann [email protected] Compilation and installation In order to compile Bluetooth utilities you need followin...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 8:28 a.m.6 views

JWT_Brute

JWTBrute Example eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9.56wwCrB9tIgmUnYpLPxkO8GYj1soCjuuskTlbHGg8 root@kitploit: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9 base64 decode "alg":"HS256","typ":"JWT" eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9 base64 decode...

6AI score
SaveExploits0
Rows per page
Query Builder