PoC---CVE-2023-26482-RCE-LAB-Nextcloud

Next cloud Proof of Concept & Analysis Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

EUVD-2026-66818

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

ipa-scope

IPA-SCOPE v.2 IPA-SCOPE es una herramienta de análisis estático que apunta a aplicaciones iOS y extrae información importante como enlaces, archivos interesantes .json, .cer, .der, .api y es muy útil para mostrar buenos resultados cuando se realiza pentesting en aplicaciones iOS Novedades en esta...

jwt-reauth

JWT Re-auth إضافة برنامج Burp لتخزين رموز المصادقة من عنوان "auth" مؤقتًا، ثم إضافتها كترويسات على جميع الطلبات الموجهة إلى نطاق معين. الميزات تتيح الإضافة إرسال الإعدادات إليها عبر القوائم السياقية من قوائم متعددة. يتضمن ذلك استخدام طلب مُلتقط بالكامل للحصول على رموز مصادقة جديدة. يمكن التحكم في...

brutto

brutto Easy brute forcing to whatever you want, Its magic increasing values and direct. Implementation Clone git clone https://github.com/jofpin/brutto.git Download the latest version Install with Python: python setup.py install root@kitploit: So you import the library from bruttoeasy import Brut...

progress-burp

Progress Tracker Burp Suite extension to track vulnerability assessment progress. Features Capturing items unique requests from the Burp Suite tools Proxy, Repeater, Target. Request unique key is defined as follows: target host, port, protocol, path and method. Items have following editable...

SCOPE

SCOPE: Security Cloud Ops Purple Engagement SCOPE runs AWS purple-team workflows with deterministic Python inventory and bounded AI agents. It audits AWS resources, validates attack paths, generates review-only exploit playbooks, produces controls, and guides Splunk investigations. How It Works R...

CVE-2025-6554

CVE-2025-6554 root@kitploit: function leakhole let x; delete x?.y?.a; return y; let y; function pwn let hole = leakhole; %DebugPrinthole; pwn; Bug Uma variável y foi acessada antes da declaração. Normalmente, isso deveria disparar um ReferenceError TDZ, mas em versões antigas do V8, quando...

CVE-2026-77611

SeaweedFS (a distributed storage system for files and blobs) contains an object-scope bypass in its S3 PutObjectAcl handler, affecting versions prior to 4.40 . An authenticated S3 principal with permissions scoped to a nested key (e.g., allowed/protected.txt) can overwrite a different object outs...

Vulnerability-Disclosures

Divulgazioni di vulnerabilità Mandiant Questo repository descrive in dettaglio le vulnerabilità divulgate da Mandiant. Queste vulnerabilità sono state scoperte tramite ricerca interna, valutazioni Red Team o riscontrate in uso in the wild. I proof of concept PoC possono essere forniti o meno. Le...

CVE-2026-55228

Weblate versions prior to 2026.7 contain a WebIDOR (Insecure Direct Object Reference) vulnerability in the GroupViewSet REST API endpoint. The API did not properly enforce the scope of project- and workspace-scoped teams, allowing an authenticated user with project-manager privileges to submit un...

CVE-2021-4034

CVE-2021-4034 Vulnerabilità di privilegi locali in polkit pkexec per aggiungere comandi personalizzati cambiare in https://github.com/signfind/CVE-2021-4034 Annulla la shell interattiva /bin/sh Adatta per l'esecuzione di comandi su una sola riga in casi particolari Build root@kitploit: gcc...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

APTS

Cos'è OWASP APTS? Uno standard di governance per piattaforme di penetration testing autonome. Definisce cosa questi sistemi devono fare per operare in modo sicuro, trasparente e entro confini definiti, siano essi forniti da vendor, operati come servizio o costruiti internamente da team di sicurez...

project-black

Project Black Controllo dell'ambito, scanner dell'ambito e tracciatore di progressi per lavorare più facilmente su un progetto di bug bounty o pentest Anatoly Ivanov di Positive Technologies A cosa serve questo strumento? Lo strumento incoraggia un lavoro più metodico su pentest/bugbounty,...

bbscope

bbscope.com Interfaccia web e API per aggregare gli ambiti dei programmi di bug bounty da HackerOne, Bugcrowd, Intigriti e YesWeHack. Avvio rapido Docker root@kitploit: cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d...

CVE-2026-32593

Winter CMS (Laravel-based PHP CMS) versions up to 1.2.12 are vulnerable to SQL injection in the backend Filter widget (Backend\Widgets\Filter) when the numberrange scope type is configured with a conditions key. Filter values are interpolated into the conditions statement without parameter bindin...

CVE-2026-32593 Winter: SQL Injection in Backend Filter Widget numberrange Scope via numbersFromAjax

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the backend Filter widget is vulnerable to SQL injection through the numberrange scope type when that scope is configured with a conditions key, allowing an authenticated backend...

bbot

BEE·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...