43630 matches found
PhoneSploit-Pro
PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...
PaperCut-CVE-2026-81578-82078
Professional security research tool for PaperCut NG/MF vulnerability assessment & authorized exploitation root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ PAPERCUT SECURITY TOOL – POWER MODE ║ ║ CVE-2026-81578 · CVE-2026-82078 · v3.1.0 ║ ║ ⚡ powered by yora 19...
Ruijie RG-EW1200G Router Background - Login Bypass
A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely. The exploit has been disclosed to t...
Cobbler 'XML-RPC' - Authentication Bypass
Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. utils.getsharedsecret always returns -1, which allows anyone to connect to cobbler...
PHPGurukul Hospital Management System 4.0 - SQL Injection
PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain sensitive database information. id: CVE-2020-22165 info: name: PHPGurukul Hospital Management System 4.0 - SQL Injection...
Hongjing e-HR 2020 - SQL Injection
A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...
WeiYe-Jing datax-web <= 2.1.2 - OS Command Injection
A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection...
Discuz! X5.0 - Authentication Bypass
Discuz! X5.0 20260320 through 20260501 contains an authentication bypass caused by exploitation of a shared cryptographic key and encryption oracle in dbbak.php and loggingctl::loggingmore, letting unauthenticated remote attackers access database backup and restore functions, exploit requires...
ComoDoS
技术细节 见：https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html...
webdav_exploit
webdavexploit 针对 Microsoft IIS 6.0 CVE-2017-7269 的利用工具 基于 https://github.com/edwardz246003/IISexploit，但可远程工作 用法 root@kitploit: python exploit.py -d http://www.eliuha.com/eliuha...
CVE-2017-12615-EXP
CVE-2017-12615-EXP root@kitploit: .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !:...
cve-2006-6184
CVE-2006-6184 这是一个基于 Python 的独立漏洞利用程序，针对 CVE-2006-6184。该漏洞利用程序在 Allied Telesyn TFTP Server AT-TFTP 1.9 及可能更早版本中触发基于栈的缓冲区溢出，允许远程攻击者造成拒绝服务或执行任意代码。 使用说明（2020 年更新） 必须对 payload 进行定制，使其包含您自己的 IP 地址和监听端口，因此您需要手动生成它。 为此，请按照以下步骤操作： 1. 输入以下命令，以创建需要从堆栈指针中减去的量（3500）的十六进制文件： root@kitploit: perl -e 'print...
vmacache_CVE-2018-17182
漏洞利用 远程 & 本地 漏洞利用...
CVE-2020-0796
CVE-2020-0796 远程溢出 POC 用于检测 CVE-2020-0796 / "SMBGhost" 的 POC 使用方法 确保已安装 Python，然后运行 cve-2020-0796.py。...
Cable-modems
对支持WiFi的ISP调制解调器的分析 概述 SEARCH-LAB Ltd评估了五款家庭网关型号，所有这些型号均被全球许多互联网服务提供商使用，但实际设备由匈牙利有线电视运营商之一UPC Magyarország（https://www.upc.hu/）运营。该分析针对商用设备和可公开获取的固件镜像执行，这些固件镜像通过ISP网络的自动固件更新机制获得。 我们于2015年6月开始对Ubee EVW3226调制解调器进行分析，在发现几个严重问题后，我们联系了UPC Hungary及其母公司Liberty Global,...
CVE-2018-7600
Drupal-CVE-2018-7600 Usage: root@kitploit: python3 exploitdrupalcve-2018-7600.py...
CVE-2024-25897
参数 ip、puerto、ruta exploit 的输出 帮助面板 exploit 说明 以下是代码的 Markdown 格式说明： 代码说明 此脚本旨在利用 Jenkins 中的特定漏洞（CVE-2024-23897）。它允许从 Jenkins 服务器下载 JAR 文件并执行 payload 以连接 Jenkins 节点。下面解释代码的每个部分： 模块导入 root@kitploit: import argparse import requests import os import subprocess import sys argparse：用于处理命令行参数。...
CVE-2019-0604
一、解说k8gege的cve-2019-0604-exp.py k8gege的脚本 https://github.com/k8gege/CVE-2019-0604 老实说k8gege的py脚本有点花哨，一大堆的16进制字符串，分成 payload1,2,3, 好坏呀 python脚本远程post的payload,反序列化之后是一个xml数据体 root@kitploit: cmd /c echo ^%@ Page Language="Jscript" %^^%var pwd="tom";var uastr=Request.UserAgent;if uastr.Substring0,...
node-cve-2018-4407
node-cve-2018-4407 针对 CVE-2018-4407 的 Node.js PoC 利用代码 作者：Sam Decrock 该脚本基于 Zuk 提供的 scapy 脚本： iOS 12 / OS X 远程内核堆溢出 CVE-2018-4407 POC 在一则推文中： pip install scapy sudo scapy sendIPdst="Target IP",options=IPOption"A"8/TCPdport=2323,options=19, "1"18,19, "2"18 — Zuk @ihackbanme 2018年11月1日 它会导致运行 iOS 1...