CVE-2026-47874 Reactor Netty HTTP Server Denial of Service With Pipelined Requests

The vulnerability occurs when a client sends HTTP/1.1 pipelined requests over a single connection, causing the Reactor Netty HTTP server to consume an excessive amount of memory. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier...

Http11Probe

Http11Probe Http11Probe è un test di conformità e sicurezza per server HTTP/1.1. Invia richieste malformate, ambigue e sovradimensionate a un server tramite socket TCP grezzi e verifica come risponde rispetto a quanto effettivamente richiesto dalle RFC 9110 e RFC 9112. Questi sono i casi scomodi...

S3BucketList

S3BucketList Cerca, elenca e controlla i bucket S3 trovati nelle richieste di rete mentre navighi. Funzionalità Filtra i bucket S3 Estrae le autorizzazioni ACL Scarica i bucket registrati Gestisci i bucket registrati Registrazione bucket specifica per scheda Rileva bucket non rivendicati / in...

log4j-scan

1 Instruções de Uso Ferramenta de detecção da vulnerabilidade RCE CVE-2021-44228 no log4j 2.x, que faz uma solicitação GET ao URL de destino e utiliza DNSlog para verificar se há retorno root@kitploit: $ python3 log4j-scan.py -h Usage: python log4j-scan.py -u Options: -h, --help show this help...

CVE-2021-27905

CVE-2021-27905 N.| Titolo ---|--- 1| Panoramica 2| Causa principale 3| Prova di concetto 4| Mitigazione 8.8.2+ 5| Riferimenti Solo per scopi educativi e di ricerca. Non utilizzare questo codice su sistemi che non possiedi o per i quali non hai un'autorizzazione esplicita al test. Non sono...

CVE-2022-24112

CVE-2022-24112 CVE-2022-24112: Apache APISIX apisix/batch-requests RCE nuclei template: CVE-2022-24112.yaml Эта уязвимость по своей сути аналогична CVE-2021-45232 — обе обходят авторизацию или работают без неё, чтобы выполнить вредоносный код через filterfunc или script в маршруте route. Примечан...

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation root@kitploit: $ sudo...

reversemap

reversemap Analyse SQL injection attempts in web server logs The program can either be run in batch mode or interactive mode. In batch mode the program will accept Apache web server logs and will deobfuscate requested URLs from the logs. In interactive mode the program will prompt for user input...

CVE-2024-36401

CVE-2024-36401 Strumento di sfruttamento della vulnerabilità GeoServer Introduzione alla vulnerabilità CVE-2024-36401 è una vulnerabilità di esecuzione remota di comandi in GeoServer. Un attaccante può eseguire comandi arbitrari senza autorizzazione costruendo specifiche richieste WFS Web Feature...

CVE-2018-18820

CVE-2018-18820 Checker per server Icecast per CVE-2018-18820 Nessuna necessità di informazioni aggiuntive, tutto il contesto è all'interno del file main.py. Richiede solo requests, che abbiamo già tutti...

probequest

ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Toolkit che consente di snifare e visualizzare le richieste di probe Wi-Fi che transitano vicino alla tua interfaccia wireless. Le richieste di probe vengono inviate ...

CVE-2022-1592

CVE-2022-1592 POC root@kitploit: pip install requests --break-system-packages root@kitploit: CVE-2022-1592.py https://tatget.com/...

cve-2023-2745

Verwendung Speichern Sie die Datei als checkcve-2023-2745.py und machen Sie sie ausführbar: chmod +x checkcve-2023-2745.py Installieren Sie die Abhängigkeit einmal: python3 -m pip install requests Start: python3 checkcve-2023-2745.py https://example.com...

CVE-2022-24816

Verwendung des CVE-2022-24816-Skripts Voraussetzungen 1. Repository klonen : root@kitploit: git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git cd CVE-2022-24816 2. Abhängigkeiten installieren : Stelle sicher, dass Python 3 installiert ist. Installiere dann die erforderlichen Abhängigkeite...

CVE-2022-46364-Poc

CVE-2022-46364 Exploit Apache CXF SSRF tramite MTOM XOP:Include | CVSS 9.8 CRITICO Vulnerabilità Apache CXF -s -d -t, --target - Endpoint SOAP CXF vulnerabile obbligatorio -s, --ssrf-url - URL interno da esfiltrare obbligatorio -d, --domain - Dominio di destinazione predefinito: localhost...

CVE-2007-2447-Exploit

Exploit para CVE-2007-2447 Este repositório contém um exploit para Samba smbd 3.0.20 CVE-2007-2447 que permite execução remota de comandos por meio de solicitações SMB maliciosas. Pré-requisitos Este exploit requer Python 3 e algumas dependências. Recomenda-se configurar um ambiente virtual antes...

CVE-2023-26209

CVE-2023-26209 Exploit Automation（教育目的）🚨 📌 説明 これは、ログインエンドポイントへの自動化されたリクエスト送信をテストできる、グラフィカルインターフェース（Tkinter）を備えたPythonスクリプトです。目的は、サーバーがさまざまなペイロードサイズにどのように応答するかをシミュレートし、潜在的な障害を分析することです。 ⚠️ このコードは、厳密に教育および学習目的のためのものです。不正使用は違法となる可能性があり、セキュリティポリシーに反する場合があります。作者は、不適切な使用について一切の責任を負いません。 🛠 機能 ✅...

CVE-2023-26208

CVE-2023-26208 أتمتة الاستغلال لأغراض تعليمية 🚨 📌 الوصف هذا سكربت بلغة Python مع واجهة رسومية Tkinter يسمح للمستخدم باختبار إرسال طلبات آلية إلى نقطة نهاية تسجيل الدخول. الهدف هو محاكاة كيفية استجابة الخوادم لأحجام مختلفة من الحمولات payloads وتحليل الأخطاء المحتملة. ⚠️ هذا الكود مخصص بشكل صارم...

CVE-2024-21644-Poc

PoC для CVE-2024-21644 Установка модулей: pip install requests pip.install colorama...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...