26492 matches found
seeker
Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...
beef
=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...
umap
umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...
shodan
Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...
grype
Grype A vulnerability scanner for container images and filesystems...
cve-2024-3400
cve-2024-3400 Python exploit and checker script for CVE-2024-3400 Palo Alto Command Injection and Arbitrary File Creation root@kitploit: usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploi...
PXEThief
PXEThief PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr,...
wig
wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...
shellsploit-framework
We'll back in several years. update...
zelos
Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...
windows
Windows Docker 컨테이너 안의 Windows. 기능 ✨ Docker 컨테이너 안에서 Windows 실행 자동 다운로드 및 무인 설치 최신 및 구형 Windows 버전 지원 KVM 가속을 통한 네이티브에 가까운 성능 CPU, 메모리 및 스토리지 할당 사용자 지정 메모리 벌루닝을 통한 동적 메모리 할당 USB 패스스루 및 호스트 폴더 공유 NAT, user-mode, macvlan 및 macvtap 네트워킹 지원 동영상 📺 사용법 🐳 Docker Compose: root@kitploit: services: windows...
Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal
The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...
sar2html <=3.2.2 Plot Parameter - Remote Code Execution
sar2html version 3.2.2 and prior contains an OS command injection vulnerability in the plot parameter of index.php. A remote, unauthenticated attacker can append shell metacharacters to the plot parameter and execute arbitrary operating system commands. id: CVE-2025-34030 info: name: sar2html...
Web-Check < 2.0.1 Screenshot API - OS Command Injection
Lissy93/web-check contains a command injection caused by unsanitized user input in the screenshot API, letting attackers execute arbitrary system commands, exploit requires sending crafted url parameters. id: CVE-2025-32778 info: name: Web-Check 2.0.1 Screenshot API - OS Command Injection author:...
ROOT-OS-DEBIAN-11-CVE-2026-11940 CVE-2026-11940 in python3.9 - Patched by Root
Root has patched CVE-2026-11940 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-3644 CVE-2026-3644 in python3.11 - Patched by Root
Root has patched CVE-2026-3644 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
atomic-operator
license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...
MangoPunch-CVE-2022-31898
🥭 MangoPunch：CVE-2022-31898 GL.iNet 设备认证后的操作系统命令注入 root@kitploit: | / | | \ | | | \ / | | | | | | | |/| |/ | ' \ / |/ | / | | | ' \ / | ' \ | | | | | | | | | | | | | | || | | | | | | | | || ||,|| ||, |/|| ,|| |||| || / | |/ 🔍 漏洞概述 本仓库包含针对 GL.iNet MT300N-V2（Mango）及运行固件版本低于 3.215...
CVE-2026-4129
There is an improper access control vulnerability in NI SystemLink that may allow an authenticated user with limited privileges to access host operating system files and directories that should be restricted. This vulnerability affects NI SystemLink and NI SystemLink Server 2026 Q3 and prior...