Lucene search
+L

47236 matches found

Kitploit
Kitploit
added 2026/08/26 10:14 p.m.2 views

CVE-2024-415770-ssrf-rce

CVE-2024-415770-SSRF-RCE Beschreibung Dieses Skript interagiert mit dem Teamserver. Aktualisieren Sie das Skript mit Ihrer Teamserver-URL. Es führt mehrere Schritte durch, um einen Agenten zu registrieren, einen Socket zu öffnen und einen SSH-Schlüssel in die authorizedkeys-Datei des Ziels...

5.2AI score
SaveExploits1
Kitploit
Kitploit
added 2026/08/26 10:01 p.m.2 views

CVE-2022-21449

CVE 2022 21449 python implementation Questo progetto permette di: Tracciare una curva ellittica con i parametri desiderati, su un corpo finito o no Generare una coppia di chiavi a partire da una curva ellittica data Crittografare / Decrittografare un messaggio con ECIES Firmarlo / verificarlo...

7.5CVSS7.2AI score0.60336EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/26 9:42 p.m.2 views

Telewreck

Telewreck Un'estensione per Burp per rilevare e sfruttare versioni di Telerik Web UI vulnerabili a CVE-2017-9248. Questa estensione è basata sul tool exploit originale scritto da Paul Taylor @bao7uo, disponibile su https://github.com/bao7uo/dpcrypto. Crediti e un grande ringraziamento a lui. Un...

9.8CVSS8.8AI score0.75098EPSS
SaveExploits5References3
Kitploit
Kitploit
added 2026/08/26 9:41 p.m.2 views

SSH-Snake

SSH-Snake:基于SSH的自动网络遍历 🐍 SSH-Snake 是一款强大的工具,旨在利用系统上发现的SSH私钥执行自动网络遍历,目标是创建完整的网络及其依赖关系地图,识别从特定系统出发,使用SSH和SSH私钥能在多大程度上入侵网络。 SSH-Snake 能自动揭示通过SSH连接的各个系统之间的关系,而手动完成这项工作通常需要大量的时间和精力。 换句话说,SSH-Snake 自动且递归地执行以下任务: 1. 在当前系统上,查找所有SSH私钥, 2. 在当前系统上,查找私钥可能被接受的所有主机或目标(user@host), 3. 尝试使用所有发现的私钥SSH登录至所有目标, 4...

5.5AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/26 9:39 p.m.2 views

Lock-Picking-Robot

🔑 Unlocked 🔑 Einleitung Hintergrund Ein Open-Source-Schlossknackroboter. Grundsätzlich sind viele Skelettschlüssel im Einsatz das häufigste Beispiel ist der TSA 007, der schlecht ist. Ein Schlüssel, der VIELE verschiedene Schlösser öffnen kann, insbesondere ohne dass die Schlosseigentümer wissen,...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 9:38 p.m.2 views

driftwood

Driftwood ⚠️ Driftwood CLI 工具已不再受支持。请改用 TruffleHog!⚠️ Driftwood 是一个工具,可以让你查找某个私钥是否被用于 TLS 或作为某个用户的 GitHub SSH 密钥等用途。 Driftwood 使用计算出的公钥进行查找,因此私钥永远不会离开你运行工具的地方。此外,它还支持对加密密钥进行一些基础的密码破解。 你可以在此阅读更多相关信息 安装 三种简单的入门方式。 使用 Docker 运行 root@kitploit: cat private.key | docker run --rm -i...

5.3AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/26 9:36 p.m.2 views

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA निजी कुंजी प्रतिरूपण ============= Ruby openssl में एक कमजोरी है जब एक सार्वजनिक कुंजी निजी कुंजी लिखने से पहले जारी की जाती है और स्क्रिप्ट के दौरान पुनः खोली जाती है तो यह CA निजी कुंजी का प्रतिरूपण करती है। PoC स्क्रिप्ट https://gist.github.com/10446549 Mitre:...

5.8CVSS8.1AI score0.05349EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/26 9:35 p.m.2 views

lsawhisper-bof

LSA Whisperer BOF Un porting di LSA Whisperer come Cobalt Strike Beacon Object File BOF — lo strumento che parla direttamente con i pacchetti di autenticazione di Windows tramite l'interfaccia client LSA attendibile/non attendibile, senza toccare la memoria del processo LSASS anche quando PPL e...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 9:35 p.m.3 views

CVE-2025-10294

Exploit: Bypass de Autenticação via ownidsharedsecret Vazio Falsificação de JWT 1 Forje um JWT válido usando uma chave HMAC vazia root@kitploit: SUB= SUB="$SUB" python3 - /tmp/jwt.txt import base64, hmac, hashlib, json, time, os b64u = lambda b: base64.urlsafeb64encodeb.rstripb'='.decode header =...

9.8CVSS8.9AI score0.00765EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 9:32 p.m.3 views

aws-key-disabler

AWS Lambda - IAM Access-Key-Deaktivierer Der AWS-Key-Deaktivierer ist eine Lambda-Funktion, die AWS-IAM-Benutzerzugriffsschlüssel nach einer festgelegten Zeit deaktiviert, um das Risiko alter Zugriffsschlüssel zu verringern. AWS-Lambda-Architektur SysOps-Ausgabe für Endbenutzer Entwickler-Toolcha...

5.5AI score
SaveExploits0
CVE
CVE
added 2026/08/26 9:31 p.m.9 views

CVE-2026-77611

SeaweedFS (a distributed storage system for files and blobs) contains an object-scope bypass in its S3 PutObjectAcl handler, affecting versions prior to 4.40 . An authenticated S3 principal with permissions scoped to a nested key (e.g., allowed/protected.txt) can overwrite a different object outs...

7.1CVSS5.4AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/26 9:31 p.m.26 views

CVE-2026-77611 SeaweedFS: Authenticated S3 object-scope bypass in PutObjectAcl allows overwriting a different object with the same basename

SeaweedFS is a distributed storage system for files and blobs. In versions prior to 4.40, an authenticated S3 principal with permissions scoped to a nested object key can overwrite a different object outside that scope by calling PutObjectAcl on the key it is allowed to access. The handler...

7.1CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 9:30 p.m.2 views

Pinkerton

🕵️ Pinkerton Investigare file JavaScript dal 1850 Progetto Python per eseguire la scansione di file JavaScript e cercare segreti come chiavi API, token di autorizzazione, password hardcoded o dati correlati. ⚡ Per iniziare Una rapida guida su come installare e usare Pinkerton. 1. Clona il...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 9:30 p.m.2 views

CVE-2024-5764

CVE-2024-5764 Questo repository contiene uno script Python in grado di sfruttare CVE-2024-5764 decifrando i dati cifrati con la chiave di cifratura statica. L'annuncio di Sonatype è disponibile qui. Utilizzo root@kitploit: usage: cve-2024-5764.py -h -e ENCRYPTEDPAYLOAD -p PASSPHRASE Decrypt data...

6.5CVSS5.4AI score0.00392EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 9:29 p.m.2 views

CVE-2022-41544

CVE-2022-41544 Script di Exploit Questo repository contiene uno script per sfruttare la vulnerabilità CVE-2022-41544 in GetSimple CMS. Lo script esegue diversi passaggi per verificare la presenza di vulnerabilità, divulgare le chiavi API, impostare i cookie, ottenere i token CSRF, caricare una...

9.8CVSS8.5AI score0.10409EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/26 9:28 p.m.2 views

whatsapp-census

Hey! Du nutzt WhatsApp Dies ist das GitHub-Repository für die erweiterte Version des Papers Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy. Zusammenfassung WhatsApp ist mit 3,5 Milliarden aktiven Konten Stand Anfang 2025 die größte...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 9:28 p.m.2 views

peetch

peetch peetch è una raccolta di strumenti pensati per sperimentare con diversi aspetti di eBPF al fine di bypassare le protezioni del protocollo TLS. Attualmente, peetch include tre sottocomandi. Il primo chiamato dump ha lo scopo di sniffare il traffico di rete associando informazioni sul proces...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 9:25 p.m.3 views

CVE-2021-21239

Technischer Bericht zu CVE-2021-21239: SAML-Authentifizierungsschwachstelle in Redash Einführung in SAML Security Assertion Markup Language SAML ist ein offener Standard für den Austausch von Authentifizierungs- und Autorisierungsdaten zwischen Parteien in einem föderierten Identitätssystem. Er...

6.5CVSS6.9AI score0.0118EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/08/26 9:23 p.m.2 views

pwned

pwned Uno strumento da riga di comando per interrogare il servizioHave I been pwned? di Troy Hunt utilizzando il modulo Node.js hibp. Installazione Scarica e installa Node.js, poi installa pwned globalmente usando npm: root@kitploit: npm install pwned -g In alternativa, puoi eseguirlo su richiest...

5.5AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/26 9:22 p.m.2 views

hershell

Hershell HINWEIS: Das Projekt wurde in dieses Repository geforkt, dort finden Sie alle weiteren Entwicklungen. Hershell ist eine einfache TCP-Reverse-Shell, geschrieben in Go. Es verwendet TLS zur Sicherung der Kommunikation und bietet eine Funktion zum Pinnen des Fingerabdrucks des öffentlichen...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder