naabu-action

Naabu Action makes it easy to orchestrate naabu with GitHub Action. Example Usage GitHub Action running naabu on list of hosts root@kitploit: - name: 💥 Naabu - Port Scanner uses: projectdiscovery/naabu-action@main with: host: example.com GitHub Action running naabu with custom port scan...

poc-CVE-2020-5902

PoC for CVE-2020-5902 this just sample PoC to demonstrated the issue Limitation Only scan HTTPS for now, it can be configure to scan HTTP or any custom ports. Usage Proof...

HeartBleed

Vulnerabilidad HeartBleed en docker 1. git clone https://github.com/Saymeis/HeartBleed.git 2. cd HeartBleed 3. sudo docker build -t heartbleed -f Dockerfile . 4. sudo docker run -p 80:80 -p 443:443 -d heartbleed...

spoilerwall

Beware! Spoilers ahead! Spoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports! Firewall? How about Fire'em'all! Stop spending thousand of dollars on big teams that you don't need! Just fire up the Spoilers Server and...

Gradio - Server Side Request Forgery

An SSRF Server-Side Request Forgery vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the...

cve-2021-38647

cve-2021-38647 Un exploit PoC para CVE-2021-38647 RCE en OMI. Ejecuta un solo comando usando ExecuteShellCommand en el puerto HTTPS predeterminado: root@kitploit: python cve-2021-38647.py -s 10.10.10.10 shell id Ejecuta un solo comando usando ExecuteShellCommand en el puerto HTTP predeterminado:...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: root@kitploit: sudo python usbkill.py or root@kitploit: sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver:...

aquatone

AQUATONE Aquatone is a tool for visual inspection of websites across a large amount of hosts and is convenient for quickly gaining an overview of HTTP-based attack surface. Installation 1. Install Google Chrome or Chromium browser -- Note: Google Chrome is currently giving unreliable results when...

portSpider

██████╗ ██████╗ ██████╗ ████████╗███████╗██████╗ ██╗██████╗ ███████╗██████╗ ██╔══██╗██╔═══██╗██╔══██╗╚══██╔══╝██╔════╝██╔══██╗██║██╔══██╗██╔════╝██╔══██╗ ██████╔╝██║ ██║██████╔╝ ██║ ███████╗██████╔╝██║██║ ██║█████╗ ██████╔╝ ██╔═══╝ ██║ ██║██╔══██╗ ██║ ╚════██║██╔═══╝ ██║██║ ██║██╔══╝ ██╔══██╗ ██║...

sonar v0.4.1

root@kitploit: ███████╗ ██████╗ ███╗ ██╗ █████╗ ██████╗ ██╔════╝██╔═══██╗████╗ ██║██╔══██╗██╔══██╗ ███████╗██║ ██║██╔██╗ ██║███████║██████╔╝ ╚════██║██║ ██║██║╚██╗██║██╔══██║██╔══██╗ ███████║╚██████╔╝██║ ╚████║██║ ██║██║ ██║ ╚══════╝ ╚═════╝ ╚═╝ ╚═══╝╚═╝ ╚═╝╚═╝ ╚═╝ Know what's running on your...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

CVE-2025-55182-NSE

Nmap scripting engine .nse for CVE-2025-55182 https://nvd.nist.gov/vuln/detail/CVE-2025-55182 ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣠⣤⠴⠶⠶⠒⠒⠒⠒⠒⠶⠶⣤⣄⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⣀⣤⠶⠛⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠛⢶⣄⠀⣠⠴⠚⠛⠳⣦⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⢀⣴⠛⠉⠛⣶⠞⠉⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠦⣄⠀⠀⠀⠀⠀⠀⠈⠻⡅⠀⠀⠀⠀⠈⢷⡀⠀⠀⠀⠀⠀⠀⠀⠀...

ALPC-Enumerator

PPL-Aware ALPC Port Enumerator A Windows userland tool for enumerating and classifying Advanced Local Procedure Call ALPC ports, including those owned by PPL Protected Process Light processes where standard handle duplication fails. Standard enumeration tools often skip protected or access-denied...

CVE-2026-20212

A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute code with root privileges. This vulnerability exists because TCP ports 43210 and 43211 are accessible in the default Layer 3 L3 virtual routing and...

CVE-2026-20212

CVE-2026-20212 affects the Silicon One Hardware Abstraction Layer (S1HAL) in Cisco Nexus 9000 Series Switches . The root cause is that TCP ports 43210 and 43211 are accessible in the default Layer 3 VRF, allowing an unauthenticated, remote attacker to send crafted input that executes code with ro...

PT-2026-84805

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switches affected versions not specified Description A flaw in the Silicon One integration for specific Cisco Nexus 9000 Series Switches allows an unauthenticated remote attacker to execute code with root privileges. Th...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

RHEL 8 : kernel (RHSA-2026:61310)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:61310 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv4: free...

Binding to an Unrestricted IP Address

Overview Affected versions of this package are vulnerable to Binding to an Unrestricted IP Address through the ForwardPorts path in pkg/cmd/codespace/ports.go. An attacker can reach a forwarded Codespaces service from other hosts on the victim’s network by having the user run gh codespace ports...

Binding to an Unrestricted IP Address

Overview github.com/cli/cli/cmd/gh is a GitHub on the command line. It brings pull requests, issues, and other GitHub concepts to the terminal next to where you are already working with git and your code. Affected versions of this package are vulnerable to Binding to an Unrestricted IP Address...