Lucene search
+L

35380 matches found

Kitploit
Kitploit
added 2026/08/27 12:53 a.m.4 views

CVE-2020-16846-Saltstack-Salt-API

CVE-2020-16846-Saltstack-Salt-API Vulnerabilidade explicada: Um problema foi descoberto no SaltStack Salt até a versão 3002. O envio de requisições web especialmente elaboradas para a API do Salt, com o cliente SSH habilitado, pode resultar em injeção de shell. Os detalhes sobre esta...

9.8CVSS8.3AI score0.99585EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/08/27 12:51 a.m.4 views

phpstress

phpstress Night Lion Security – Proof-of-Concept Denial-of-Service / Stress-Tester für PHP-Websites, die mit Apache- und NGINX-Systemen PHP-FPM und PHP-CGI betrieben werden. Mit einer handelsüblichen Kabel-/DSL-Verbindung kann dieser Angriff die CPU und den RAM eines Linux-Webservers mittels...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:42 a.m.1 views

ReverseHttp

ReverseHttp Backdoor em Python que usa requisições http post/get para se comunicar Requisitos Python 2.7 Cherrypy pip install cherrypy Requests pip install requests Uso: Inicie o script listener, depois o controlador, envie o arquivo backdoor e aguarde por conexões Captura de tela...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:38 a.m.2 views

MalleableC2Profiles

Profils Malleable C2 Profils Malleable C2 pour Cobalt Strike version 3.6+ bingsearchgetonly.profile - Profil de recherche web Bing, utilise uniquement des requêtes GET cnnvideogetonly.profile - Profil de diffusion vidéo en direct MSNBC, utilise uniquement des requêtes GET...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.4 views

CVE-2026-21962

🚨 CVE-2026-21962 - Vulnerabilidade Crítica de Bypass de Autenticação 🧾 Resumo 🔥 Uma vulnerabilidade de severidade máxima 10.0 que permite acesso remoto não autenticado a sistemas Oracle middleware. root@kitploit: CVE ID : CVE-2026-21962 Severity : CRITICAL Published : 2026-01-20 Category :...

10CVSS8.8AI score0.4202EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.4 views

CVE-2025-55182

CVE-2025-55182 Schwachstellenerkennungs- und Ausnutzungswerkzeug Projektbeschreibung Dieses Tool ist ein GUI-Tool, das auf Java Swing basiert und zur Erkennung und Ausnutzung der Schwachstelle CVE-2025-55182 entwickelt wurde. Diese Schwachstelle ist ein Sicherheitsproblem im Next.js-Framework, da...

10CVSS7.4AI score0.99802EPSS
SaveExploits385
Kitploit
Kitploit
added 2026/08/27 12:32 a.m.24 views

inforfinder

Inforfinder =========== Inforfinder is a tool made to collect information of any domain pointing at a server ip,domain,range,file. Requires python libs: pyRequests, lxml and py3DNS You can do the installation, with pip or you can install the inforfinder app as a package using python setup.py...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:29 a.m.2 views

CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit é uma ferramenta de teste de segurança baseada em Python que automatiza a detecção de potenciais condições de RCE em aplicações web sob ambientes autorizados. Ela envia requisições POST elaboradas para alvos, analisa as respostas do servidor em busca de...

10CVSS7.5AI score0.99802EPSS
SaveExploits385
Kitploit
Kitploit
added 2026/08/27 12:17 a.m.3 views

cve-2023-30800-multithread-doser

cve-2023-30800-multithread-doser 用于 CVE-2023-30800 的多线程 DoS Python 脚本 ⚠️ 注意:本人对使用此工具造成的任何损害不承担责任,该工具仅作为测试工具提供,仅可用于授权网络。 用法: dos.py --address IP-ADDRESS --threads THREAD-COUNT 依赖: Python 3.6 及以上 Requests 安装依赖: pip install requests CVE: "https://nvd.nist.gov/vuln/detail/CVE-2023-30800" POC:...

7.5CVSS7.4AI score0.01704EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/27 12:17 a.m.2 views

Re2Pcap

Re2Pcap: PCAP-Datei aus roher HTTP-Anfrage oder -Antwort in Sekunden erstellen Re2Pcap ist eine Abkürzung für Request2Pcap und Response2Pcap. Community-Nutzer können schnell PCAP-Dateien mit Re2Pcap erstellen und sie gegen Snort-Regeln testen. Re2Pcap ermöglicht es Ihnen, schnell PCAP-Dateien für...

5.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/08/27 12:15 a.m.4 views

CVE-2026-59295

A flaw was found in Micrometer Instrumentation for Apache HttpAsyncClient. When asynchronous requests fail before receiving a response, such as due to connection resets or timeouts, the system can leak memory unboundedly. This continuous memory leak leads to heap exhaustion and OutOfMemoryError...

5.9CVSS5AI score0.0025EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/27 12:15 a.m.2 views

Blackash-CVE-2025-55182

🚨 CVE-2025-55182 — ثغرة حرجة في خادم React 🧠 ما هي؟ ⚛️ ثغرة أمنية حرجة في React Server Components RSC 🧨 ناتجة عن إلغاء تسلسل غير آمن 🌐 قابلة للاستغلال عبر طلبات الشبكة 🔓 لا تتطلب مصادقة ☠️ يمكن أن تؤدي إلى تنفيذ تعليمات برمجية عن بُعد RCE ✅ هذا يعني أن المهاجمين قد يتمكنون من تنفيذ تعليمات برمجية...

10CVSS7.5AI score0.99802EPSS
SaveExploits385
Kitploit
Kitploit
added 2026/08/27 12:12 a.m.2 views

extended-xss-search

Extended XSS Searcher and Finder Pesquisador e Localizador de XSS Estendido Esta é a versão estendida baseada na ideia inicial já publicada como "xssfinder". Esta versão privada permite que um atacante realize requisições não apenas GET, mas também POST. Além disso, é possível fazer proxy de cada...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:07 a.m.3 views

CVE-2019-17662

CVE-2019-17662 Изменён код CVE Использован Prepared Requests, так как в модуле python3 requests нормализуется ../ в URL, например: Для кода: root@kitploit: r = requests.get"http://123.123.123.123/../../../../../../test" printstrr.statuscode Результат: root@kitploit: GET /test HTTP/1.1 Host:...

9.8CVSS8.7AI score0.96758EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/08/27 12:06 a.m.2 views

CVE-2022-24112

CVE-2022-24112 Apache APISIX apisix/batch-requests RCE...

9.8CVSS8.8AI score0.96001EPSS
SaveExploits16
CVE
CVE
added 2026/08/26 11:49 p.m.27 views

CVE-2026-47874

CVE-2026-47874 affects the Reactor Netty HTTP server. When a client sends HTTP/1.1 pipelined requests over a single connection, the server can consume excessive memory, leading to a denial of service . The affected version ranges are 1.3.0–1.3.6 , 1.1.0–1.2.18 , and 1.0.52 and earlier . The vulne...

5.3CVSS5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 11:42 p.m.2 views

Http11Probe

Http11Probe Http11Probe è un test di conformità e sicurezza per server HTTP/1.1. Invia richieste malformate, ambigue e sovradimensionate a un server tramite socket TCP grezzi e verifica come risponde rispetto a quanto effettivamente richiesto dalle RFC 9110 e RFC 9112. Questi sono i casi scomodi...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 11:30 p.m.2 views

S3BucketList

S3BucketList Cerca, elenca e controlla i bucket S3 trovati nelle richieste di rete mentre navighi. Funzionalità Filtra i bucket S3 Estrae le autorizzazioni ACL Scarica i bucket registrati Gestisci i bucket registrati Registrazione bucket specifica per scheda Rileva bucket non rivendicati / in...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 11:27 p.m.2 views

padding-oracle-attacker

padding-oracle-attacker Strumento da riga di comando e libreria per eseguire facilmente attacchi padding oracle, con supporto per richieste di rete concorrenti e un'interfaccia elegante. Installazione Assicurati che Node.js sia installato, quindi esegui root@kitploit: $ npm install --global...

5.5AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/08/26 11:23 p.m.5 views

hfinger

Hfinger - fingerprinting delle richieste HTTP dei malware Strumento per il fingerprinting delle richieste HTTP dei malware. Basato su Tshark e scritto in Python3. Stadio di prototipo funzionante :- Il suo obiettivo principale è fornire rappresentazioni uniche fingerprint delle richieste dei...

5.4AI score
SaveExploits0References2
Rows per page
Query Builder