ofbiz-poc

ofbiz-poc CVE-2020-9496 e CVE20209496 utilizzano dnslog per la verifica batch di poc ed exp delle vulnerabilità OFBizCVE20209496.py e OFBizCVE202126295.py sono per la verifica di singole vulnerabilità ofbizpoc.py è per la verifica batch di due vulnerabilità, salva i siti da verificare in batch in...

Magento Server Mass Importer - Cross-Site Scripting

Magento Server Mass Importer plugin contains multiple cross-site scripting vulnerabilities which allow remote attackers to inject arbitrary web script or HTML via the 1 profile parameter to web/magmi.php or 2 QUERYSTRING to web/magmiimportrun.php. id: CVE-2015-2068 info: name: Magento Server Mass...

Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite

Hoppscotch self-hosted backend = 2026.4.1 contains a broken authentication caused by mass assignment via unauthenticated POST /v1/onboarding/config endpoint, letting unauthenticated attackers overwrite JWTSECRET to forge tokens and fully compromise the server, exploit requires attacker to access...

pwn-vbulletin

Mass-Pwn-vBulletin Identifique instâncias vulneráveis RCE do vBulletin 5.0.0 - 5.5.4 usando o Shodan CVE-2019-16759 Bulletin Demo Requisitos: Python = 3.5.3 asyncio = 3.4.3 aiohttp = 3.6.1 ipaddress termcolor = 1.1.0 tqdm = 4.36 pyfiglet click = 7.0 IPy = 1.0 Coletando Hosts: Esta ferramenta iter...

UPGer

UPGer | CVE-2022-4060 - User Post Gallery Ferramenta automática em massa para verificar vulnerabilidade no CVE-2022-4060 - Plugin WordPress: User Post Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

CVE-2018-7600-Masschecker

CVE-2018-7600-Masschecker Strumento per verificare la vulnerabilità CVE-2018-7600 su diversi URL...

knockbleed

knockbleed Test di massa di CVE-2014-0160 contro i sottodomini Requisiti: Knock Subdomain Scan di Gianni 'guelfoweb' Amato - https://github.com/guelfoweb/knock check-ssl-heartbleed di Steffen Ullrich - https://github.com/noxxi/p5-scripts perl python Uso: root@kitploit: sid@sweethome:$...

CVE-2022-40684-POC

CVE-2022-40684-POC FortiProxy / FortiOS bypass dell'autenticazione Sfruttamento di massa /api/v2/cmdb/system/admin/ "ssh-public-key1": "" root@kitploit: ffuf -c -w hosts.txt -u FUZZ/api/v2/cmdb/system/admin/admin -X PUT -H 'User-Agent: Report Runner' -H 'Content-Type: application/json' -H...

HAFNIUM-Microsoft-Exchange-0day

Risorse interessanti CheckMyOWA Cos'è? Abbiamo creato questo sito per facilitare la notifica alle vittime basata su elenchi di server Exchange compromessi con Outlook Web Access OWA abilitato, ottenuti dai responsabili di questo evento di violazione di massa. Include IP/dominio interessati, nonch...

Mass-CVE-2023-28121-kdoec

CVE-2023-28121 WooCommerce Payments 5.6.2 - Nicht authentifizierte Privilegienausweitung Massenhinzufügen von Admin-Benutzern Verwendung Dieses Skript verwendet Python3. Installieren Sie die Abhängigkeiten pip install -r requirements.txt Referenzen...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Masscanner para Laravel phpunit RCE CVE-2017-9841 deps root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Usage root@kitploit: usage: tool -h --file --range , --single SINGLE argumentos opcionais: -h, --help...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack ये कुछ स्क्रिप्ट हैं जिनका उपयोग आप Apache Struts भेद्यता CVE-2017-5638 का पता लगाने और उसका शोषण करने के लिए कर सकते हैं। MassScanner और Exploiter उपलब्ध हैं, आप URL की सूची को मास स्कैन करने के लिए स्कैनर का उपयोग कर सकते हैं और फिर Exploiter द्वारा उनका शोषण कर सकते...

fubucker

Fubucker | CVE-2022-1386 - Fusion Builder Strumento automatico di massa per verificare la vulnerabilità in CVE-2022-1386 - Fusion Builder install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Installa JQ Linux : comando apt-get install jq -y Windows ...

Mass-exploit-CVE-2022-29464

Miau Miau Miau! Nur ein Massenexploit basierend auf einem Python PoC für WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE-Fehler CVE-2022-29464. Miau Miau Miau? Anforderungen? Python3 Shodan Zoomeye Ein Gehirn Was ist dieses Tool? Dies ist ein Massen-Autoscan-Exploit für CVE-2022-29464 basierend au...

CVE-2025-55182-Terminal

Scanner de Vulnerabilidade RSC do Next.js CVE-2025-66478 / CVE-2025-55182 Uma ferramenta leve e multithread de Prova de Conceito PoC projetada para detectar e demonstrar a vulnerabilidade de Execução Remota de Código nos React Server Components RSC do Next.js React2Shell. Esta ferramenta permite...

WordPressMassExploiter

WordPressMassExploiter Massen-Exploiter von CVE-2015-1579 für WordPress CMS Dieser Massen-Exploiter basiert auf CVE-2015-1579, entdeckt von CLAUDIO VIVIANI https://www.exploit-db.com/exploits/36554/ So funktioniert es: 1 - Ich verwende das Selenium-Framework, um die Suche bei Google durchzuführen...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

CVE-2024-4358_Mass_Exploit

CVE-2024-4358MassExploit Modifizierte Werkzeuge von @sinsinology für Massenexploit. Voraussetzungen Python 3.x Installation root@kitploit: git clone https://github.com/Sk1dr0wz/CVE-2024-4358MassExploit.git cd CVE-2024-4358MassExploit pip intstall -r requirements.txt Ausführung root@kitploit: usag...

mikrotik-beast

Mikrotik Beast tool Strumento di sfruttamento di massa per MikroTik WinBox, CVE-2018-14847 Questo strumento ti consente di scansionare un intervallo di host di rete CIDR contro l'exploit winbox CVE-2018-14847. Utilizzo $ python3 mikrotikbeast.py Esempi di input accettati Esempio 1: '192.168.5.0/2...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...