CVE-2026-39107

CVE-2026-39107: Cross-Site Scripting XSS in Kimi AI v1.0 Description A Cross-Site Scripting XSS vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI model. When a user switches...

CVE-2021-34527

PrintNightmare CVE-2021-34527 This version of the PrintNightmare exploit is based on the code created by Cube0x0, with the following features: Ability to target multiple hosts. Built-in SMB server for payload delivery, removing the need for open file shares. Exploit includes both MS-RPRN & MS-PAR...

PhantomEvasion

PHANTOM EVASION 3.0 Phantom-Evasion es una herramienta de evasión de antivirus escrita en Python compatible tanto con Python como con Python3 capaz de generar ejecutables casi totalmente indetectables incluso con los payloads más comunes de x86 msfvenom. Los siguientes SOs soportan oficialmente l...

HopLa

HopLa - Burp copilot 💥 All the power of PayloadsAllTheThings, without the overhead. This extension enhances Burp Suite with intelligent autocompletion and built-in payloads to simplify intrusion testing. It supports integration with AI providers like Ollama, OpenAI, and Gemini to offer advanced...

njRAT-0.7d-Stub-CSharp

This repository does not have a README...

CVE-2025-55184-POC-Expolit

🔥 CVE-2025-55184 Advanced Exploitation Tool Professional React Server Components DoS Exploitation Framework "KEEP LEARNING KEEP HACKING" - CyberTechAjju 🚀 Quick Start • 📖 Documentation • 💻 Features • ⚠️ Disclaimer 🎯 About CVE-2025-55184 CVE-2025-55184 is a high-severity Denial of Service DoS...

-EXPLOIT-CVE-2023-36025

EXPLOIT CVE-2023-36025 - Description Windows SmartScreen Security Feature Bypass Vulnerability Usage NOTE handler waiting for tcp request for target P.S configure CVE-2023-36025.vbs file to change the ip and port to machine ip and port that is being used for the TCP handler configure reverse TCP...

bxss

Bxss - Blind XSS Scanner 🚀 Description...

LitterBox

LitterBox A self-hosted payload-analysis sandbox for red teams. Upload a sample, run static / dynamic / EDR analysis against it, get a Detection Score and a triggering-indicators breakdown — decide whether the payload is field-ready before it leaves the lab. LitterBox can also dispatch payloads t...

Kitsune

Kitsune Kitsune es un Comando y Control polimórfico. Esta herramienta te permite obtener una versión gráfica de tus herramientas de hacking favoritas, como NetExec, Villain o Evil-WinRM entre otras. Además, trae muchas mejoras como reconexión automática, informes, historial y algunas funciones...

Research_Successful_Errors

Successful Errors: New Code Injection and SSTI Techniques !NOTE This is the second version of the whitepaper based on the results I presented before releasing SSTImap version 1.3.1. Further improvements would be adapted for this format as version 1.2 of the research at a later date. Payloads...

rpi-hunter

rpi-hunter Automatizar la detección y entrega de payloads en Raspberry Pi's de la LAN mediante ssh O, el título honesto: Automatizando sshpass para la entrega de comandos. Rpi-hunter es útil cuando hay múltiples Raspberry Pi's en tu LAN con credenciales predeterminadas o conocidas, para automatiz...

Beleth

Beleth Cracker SSH basado en diccionarios root@kitploit: Usage: ./beleth OPTIONS -c payload Ejecutar payload en el servidor remoto una vez iniciada sesión -h Mostrar esta ayuda -l threads Limitar hilos al número dado. Por defecto: 4 -p port Especificar puerto remoto -P password Usar un único...

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228. Deployment To deploy this project run root@kitploit: sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Running Tests To run tests, run the following...

wePWNise

wePWNise wePWNise is proof-of-concept Python script which generates VBA code that can be used in Office macros or templates. It was designed with automation and integration in mind, targeting locked down environment scenarios. The tool enumerates Software Restriction Policies SRPs and EMET...

Empire

...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

citrix-honeypot

Citrix ADC NetScaler Honeypot Detects and logs payloads for CVE-2019-19781 Shitrix / Citrixmash Logs failed login attempts Serves content and headers taken from real appliance in order to increase chance of indexing on search engines e.g. google, shodan etc. Installation Precompiled Precompiled...

DNSStager

¿Qué es DNSStager? DNSStager es un proyecto de código abierto basado en Python que se utiliza para ocultar y transferir tu payload usando DNS. DNSStager creará un servidor DNS malicioso que maneja las solicitudes DNS a tu dominio y devuelve tu payload como respuesta a solicitudes de registros...

CVE-2025-1302_jsonpath-plus_RCE

CVE-2025-1302 JSONPath-Plus RCE PoC PoC Script Name: poc.py A proof-of-concept exploit script for CVE-2025-1302, which targets an RCE vulnerability in the jsonpath-plus library. When run against a vulnerable service endpoint, the script attempts to trigger remote code execution via a JSONPath...