Lucene search
+L

1894 matches found

Kitploit
Kitploit
added 2026/09/13 8:03 a.m.7 views

vallumd

vallumd This program allows you to centralize and distribute IP blacklists. If you maintain a server on the Internet, it's very likely you encountered one or more brute force attacks. Not a problem, just install fail2ban. Done. But if you're running multiple servers, each of them running their...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 3:54 a.m.6 views

esp_wifi_repeater

espwifirepeater A full functional WiFi NAT router and now also a WiFi repeater aka. L2 bridge NEW 2026: 10 years after the first release it has finally become, what it ever pretendend to be:a true WiFi Repeater. In order not to break any existing docs and links, the standard edition still remains...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/12 11:50 p.m.67 views

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/12 11:07 p.m.9 views

LazyMesh

LazyMesh Mesh routing system that supports using an OpenDHT proxy as the backend, so that nodes can communicate directly via the internet. Very early pre alpha, proof of concept, might not actually work, etc. This is meant for both hobby/HAM use cases, and more typical consumer/commercial IoT wor...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 11:00 p.m.26 views

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 9:39 p.m.7 views

mqxss

mqxss v0.2 mqxss acts as a client to communicate with hooked browsers over MQTT The benefit to using this over beef or xsshunter is that besides hosting the js payload there is no infra setup, you can use a public broker however currently uses obfuscation, encryption is in the works. Hooked...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:54 p.m.4 views

st

ST Smart Things ST Smart Things Sentinel es una herramienta de seguridad avanzada diseñada específicamente para examinar y detectar amenazas dentro de los intrincados protocolos utilizados por los dispositivos IoT Internet de las cosas. En el panorama en constante expansión de los dispositivos...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:39 p.m.7 views

the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt

CVE-2026-71960 — Hard-coded JWT Secret in Cudy WR3000 2.0 Mesh MQTT Broker PoC tooling for the Hunt-Benito article "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...

9.3CVSS5.9AI score0.03051EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 11:39 a.m.6 views

sparkplugFuzzer

Fuzzer de Seguridad MQTT Sparkplug B Una herramienta integral de evaluación de seguridad para probar implementaciones del protocolo MQTT Sparkplug B. El fuzzer prueba sistemáticamente todos los campos del protocolo en los 9 tipos de mensaje, descubre dispositivos activos en la red y genera...

5.9AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/10 11:22 p.m.6 views

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

7.5CVSS0.00512EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/10 4:34 p.m.8 views

netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header

A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory...

7.5CVSS0.00512EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/09 2:09 a.m.9 views

CVE-2025-52136

CVE-2025-52136 root@kitploit: https://github.com/ricardojoserf/emqx-RCE The original exploitation method uploads an EMQX plugin and adds Erlang os module calls in the plugin template code to execute system commands for RCE. In an outbound network environment, curl is available by default, so you...

3CVSS5.9AI score0.00276EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 6:49 p.m.5 views

CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow

CVE-2026-2222 – MQTT 브로커 CONNECT 패킷 힙 오버플로우 프로그램 코드 C + Python root@kitploit: // mqttbrokersim.c - Simulated vulnerable MQTT broker include include include struct mqttconnect char protocolname8; uint8t protocollevel; uint8t flags; uint16t keepalive; // remaining length field misinterpreted ; void...

4.8CVSS5.7AI score0.00213EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/08 6:02 p.m.7 views

MqttAttack

Este repositorio no tiene un README...

5.8AI score
SaveExploits0
NVD
NVD
added 2026/09/04 8:17 p.m.6 views

CVE-2026-79391

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...

9.8CVSS0.00389EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/04 8:17 p.m.6 views

CVE-2026-79389

Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing. An attacker with network access can replay or modify captured MQTT messages, including security-related nonce, timestamp, and signature fields, and the device accepts the modified messages and executes the...

0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/04 8:17 p.m.4 views

CVE-2026-79390

Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational...

7.5CVSS0.00258EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/04 12:00 a.m.8 views

EUVD-2026-71741

Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational...

5.3AI score0.00258EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/04 12:00 a.m.11 views

PT-2026-86252

No authentication exists in the MQTT service of Trueview 6.0.23.4. The MQTT broker accepts client connections on TCP port 1883 without requiring authentication, allowing a remote attacker with network access to establish an MQTT session and perform unauthorized publish or subscribe operations...

5.5AI score0.00389EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/04 12:00 a.m.16 views

CVE-2026-79391

Trueview 6.0.23.4 contains an unauthenticated MQTT broker that accepts client connections on TCP port 1883 without requiring any authentication. A remote attacker with network access can establish an MQTT session and perform unauthorized publish or subscribe operations , impacting confidentiality...

9.8CVSS5.5AI score0.00389EPSS
SaveExploits0References1
Rows per page
Query Builder