CVE-2025-15474

BLE Smart Lock Denial-of-Service DoS Vulnerability An unauthenticated Bluetooth Low Energy BLE connection flood can reliably prevent legitimate users from unlocking the device by interrupting keypad input and forcing repeated lockout states. 📌 Summary This repository documents a Denial-of-Service...

CVE-2012-1803

CVE-2012-1803 Critical vulnerability in Siemens RuggedCom ROS devices allowing attackers to derive a hidden factory account password from the device MAC address and gain unauthorized administrative access via TELNET, rsh, or serial interfaces. Affects ROS 3.10.x and earlier...

MacMaster

MacMaster: Advanced Network Interface Management and Monitoring MacMaster is a comprehensive command-line tool crafted for network professionals and enthusiasts alike. It stands out as a powerful utility for manipulating the MAC addresses of network interfaces on various systems. Designed with bo...

crestron_getsudopwd

crestrongetsudopwd Based on Ricky Lawshae discovery on Crestron TSW-X60 and MC3 devices, this tool aims to exploit the CVE-2018-13341. Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to r...

NetProbe

NetProbe: Network Probe NetProbe is a tool you can use to scan for devices on your network. The program sends ARP requests to any IP address on your network and lists the IP addresses, MAC addresses, manufacturers, and device models of the responding devices. Features Scan for devices on a...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

n0Mac

n0Mac Yet Another Mac Changer!!! This script changes the MAC address of the network interface to a randomly generated address on system startup using crontab. It then uses the macchanger command to generate a list of MAC address vendors and selects one at random and then combines that vendor pref...

CVE-2026-51624

Incorrect access control in the getStationMacByIp function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain a client MAC address via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2017-9476

CVE-2017-9476 AP nascosto con credenziali deterministiche. Compilazione root@kitploit: cc xhscmmac2psk.c -o xhscmmac2psk Utilizzo root@kitploit: ./xhscmmac2psk L'algoritmo è stato anche aggiunto a PSKracker. Riferimenti CVE-2017-9476 Bastille-18.home-security-wifi-network.txt whitepaper del DEFCO...

CVE-2026-51624

CVE-2026-51624 is an incorrect access control vulnerability in the getStationMacByIp function of the TOTOLINK T6 wireless router, firmware version 4.1.5cu.748_B20211015 . An unauthenticated attacker can obtain a client MAC address by sending a crafted POST request to /cgi-bin/cstecgi.cgi, enablin...

pwnfb50

pwnfb50 Trasferisci la proprietà di qualsiasi smart lock FB50 a te stesso CVE-2019-13143 Video PoC Utilizzo root@kitploit: $ python3 pwnfb50.py id mac Dove id è il tuo ID utente e mac è l'indirizzo MAC della tua serratura...

macchanger

GNU MAC Changer GNU MAC Changer è un'utilità che rende più facile la manipolazione degli indirizzi MAC delle interfacce di rete. Sito web: http://www.gnu.org/software/macchanger Repository: http://github.com/alobbs/macchanger Cordiali saluti, Alvaro Lopez Ortega [email protected]...

CVE-2018-13797

node-macaddress Recupera gli indirizzi MAC in Linux, OS X e Windows. Un equivoco comune sugli indirizzi MAC è che ogni host abbia un indirizzo MAC, mentre un host può avere più indirizzi MAC – poiché ogni interfaccia di rete può avere il proprio indirizzo MAC. Questa libreria consente di...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Vulnerabilità DoS di soppressione RADIUS in Cisco ISE 🌐 ⚠️ Panoramica 🚨 Vulnerabilità di denial-of-service DoS ad alta gravità in Cisco Identity Services Engine ISE! 💥 Un attaccante remoto non autenticato può bloccare il dispositivo con pacchetti RADIUS appositamente predisposti...

CVE-2024-57366

Exploit CVE-2024-57366 Un exploit robusto per CVE-2024-57366 che consente l'esecuzione remota di codice su router vulnerabili attraverso il bypass della convalida dell'indirizzo MAC e l'iniezione di comandi. Questo è un exploit post-autenticazione che richiede che la funzione "Controllo remoto" d...

CVE-2018-13341

CVE-2018-13341 Questo strumento mira a sfruttare la CVE-2018-13341; utilizzando l'indirizzo MAC del dispositivo target, è possibile recuperare la password dell'account nascosto "crengsuperuser" che ha privilegi elevati e consente di eseguire comandi SUDO. Il protocollo Crestron Toolbox CTP può...

cve-2020-35498-flag

cve-2020-35498-flag Segnala l'attacco cve-2020-35498 Build Compilazione Richiede gcc e go. root@kitploit: make Filter Filtro Il filtro è stato costruito con bpfasm e inserito in filter.c. Rileva la vulnerabilità con root@kitploit: sudo ./target/catch Attiva con Attiva la vulnerabilità attraverso...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i40e: Fixed potential invalid access when the MAC list is empty. The listfirstentry function never returns NULL—if the list is empty, it still returns a pointer to an invalid object, resulting in potential invalid memory access...