2422 matches found
telegram-c2
Telegram C2 Command and control a server via telegram bots. Installation Tutorial Video Create a telegram bot Edit main.py, set BOTAPIKEY to the bot's api key and telegramuserid to your telegram id Install the following dependencies root@kitploit: pip install -r requirements.txt Compile to...
CVE-2022-29464
Exploit CVE-2022-29464 Este repositorio contiene un script para explotar la vulnerabilidad CVE-2022-29464, que permite subir archivos a servidores vulnerables. Úsalo únicamente en entornos autorizados y con fines educativos. Requisitos Python 3.8 o superior Instalación Paso 1: Clonar el repositor...
sidedoor
sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...
wotop
Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...
sshtunnel
|CircleCI| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...
whoc
whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...
yasuo
YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...
CVE-2025-63408
CVE-2025-63408 path-traversal.py: A re-implementation of https://github.com/eric-m-holub/double-agent/blob/main/doubleagent.py Uses uuids as part of the requested filename to avoid remote server crashing after first path traversal exploitation. run.py / shell.py: wrapper on top of podman to run...
CVE-2014-6271
Probador de CVE-2014-6271 Bash Shellshock y Aftershock para Ansible 1. Instalar Ansible http://docs.ansible.com/introinstallation.html 2. Agregar servidores al archivo de inventario ejemplo: root@kitploit: username@ip 3. Copiar tu clave pública a .ssh/authorizedkeys de los servidores remotos 4...
CVE-2023-39141-LFI-enumerator
Enumerar archivos de servidor remoto explotando CVE-2023-39141 Ver POC: https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e...
CVE-2023-23752
Binarios para CVE-2023-23752 Solo con fines éticos y educativos 😉 Uso root@kitploit: CVE-2023-23752 -u http://someserverexample.com Compilar desde el código fuente Go Si tienes Go instalado, haz: root@kitploit: git clone https://github.com/gunzf0x/CVE-2023-23752.git cd CVE-2023-23752 go run main....
CVE-2025-6514
mcp-remote Conecta un Cliente MCP que solo soporta servidores locales stdio a un Servidor MCP Remoto, con soporte de autenticación: Nota: esto es una prueba de concepto funcional pero debe considerarse experimental. ¿Por qué es necesario? Hasta ahora, la mayoría de los servidores MCP existentes s...
EUVD-2026-81696
In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion encodelayoutstatsmaxsz budgets XDRQUADLENPNFSLAYOUTSTATSMAXSIZE, i.e. 256 bytes, for the layoutupdate4 body written by the layout driver. The flexfiles record can exceed that...
OESA-2026-3733 git security update
Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...
Astra Linux - Vulnerability in Squid
A vulnerability was discovered in Squid 4.x versions prior to 4.15 and 5.x versions prior to 5.0.6. If a remote server sends a specific response header via HTTP or HTTPS, it results in a denial of service. This header could plausibly occur in normal network traffic...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
A flaw was discovered in Python. Improper handling of HTTP responses in the Python HTTP client code may allow a remote attacker, who controls the HTTP server, to cause the client script to enter an infinite loop, consuming CPU resources. The greatest threat of this vulnerability is to system...
CVE-2026-78254
A flaw was found in Apache Ant. The ftp and scp tasks, used for downloading files, are vulnerable to a path traversal issue. A malicious remote server can exploit this by providing specially crafted relative paths, allowing it to write files outside the intended download directory. This could lea...
CVE-2026-78254 Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the...
