Fortinet-PoC-Auth-Bypass

Fortinet-PoC-Auth-Bypass Bash Proof of Concept PoC for Fortinet Authentication Bypass - CVE-2022-40684 Usage: root@kitploit: Usage: ./poc.sh Example: ./poc.sh 10.10.10.120 8443 Available in Exploit-db: https://www.exploit-db.com/exploits/51092...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test This script is designed for detection of vulnerable servers CVE-2014-0224. in a wide range of configurations. It attempts to negotiate using each affected protocol version SSLv3, TLSv1, TLSv1.1, and TLSv1.2 advertising a comprehensive set of ciphers. Changes: v0.1 - Update...

WerkGhost

WerkGhost Werkzeug -p -d --timeout -t 예시 root@kitploit: python werkghost.py -u http://127.0.0.1:8000 -p CON -d download --timeout 3 -t 100...

citrix-2025

Detection Script for Citrix NetScaler appliances Author: NCSC-NL !WARNING Some of these checks are meant to hunt for compromises, while other checks verify if you are compromised. Disclaimer These scripts are provided without any guarantees regarding its effectiveness. The detection capabilities ...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...

CVE-2022-0540-RCE

Atlassian Jira Seraph 인증 우회 RCE CVE-2022-0540 English • 中文 익스플로잇 상세 작성자의 블로그에서 볼 수 있듯이, Atlassian은 영향을 받는 플러그인의 긴 목록을 제공했으며대부분 거짓 양성이었음, 작성자는 몇 가지 실제 영향을 받는 플러그인을 나열했습니다. 제시된 조건에 따라, Jira용 WBS Gantt-Chart 공식 문서와 결합하면 본질적으로, 작업 스케줄러 모듈 Task의 Beanshell Script를 사용한 RCE이며, 익스플로잇 세부 사항은 다음과 같습니다. 1. 수...

CVE-2007-2447

CVE-2007-2447 — username map script «Функциональность MS-RPC в smbd в Samba 3.0.0–3.0.25rc3 позволяет удалённым злоумышленникам выполнять произвольные команды через метасимволы оболочки с участием функции 1 SamrChangePassword, когда включена опция smb.conf «username map script», а также позволяет...

Compromised-Org-Chart-Generator

Compromised Org Chart Generator Overview Active Directory is used by organization as the identity provider. It contains information of all employees including their names, job titles, departments, and their managers. Password audits can help to discover weaknesses and risks. You might try passwor...

VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972

VMwarevCenterUNAuthorizedRCECVE-2021-21972 zoomeye dork：app:"VMware vCenter" 使用pocsuite3编写的无害检测脚本VMwarevCenterUNAuthorizedRCE.py，使用近一年的数据进行探测： 成功率约为：1551 / 3998 = 39%...

PySCTChecker

PySCTChecker Description This is a Quick and dirty Python script for checking if a domain properly implements Certificate Transparency. If so, it is possible to observe how Certificate Transparency is implemented on the server side. When a server implements Certificate Transparency, it must offer...

CVE-2025-25612

CVE-2025-25612: FS S3150-8T2F Switch Stored Cross Site Scripting XSS CVE-2025-25612 FS Inc S3150-8T2F prior to version S3150-8T2F2.2.0D135103 is vulnerable to Cross Site Scripting XSS in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious...

CVE-2017-5638

CVE-2017-5638 This script is intended to validate Apache Struts 2 vulnerability CVE-2017-5638, AKA Struts-Shock. This is a completely harmless as it does not inject any malicious payload, only inject an HTTP header named 'STRUTS2-VALIDATION' in order to be able to validate whether is vulnerable...

CVE-2024-6387

CVE-2024-6387 check if your server exist CVE-2024-6387 by below one line bash script: root@kitploit: curl -fsSL https://dub.sh/cve-2024-6387-CN |bash...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

CVE-2024-3094

CVE-2024-3094 Credit: https://gist.github.com/Sn0w3y This script detects if it's likely that the ssh binary on a system is vulnerable to CVE-2024-3094. Unlike the detection script originally written by Vegard Nossum, this one doesn't use hexdump as it needs to be installed separately on most dist...

CVE-2023-4166

CVE-2023-4166 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u single URL target file python3 CVE-2023-4165.py -f url.txt Then just verify the address...

Grafana_POC-CVE-2021-43798

Grafana-Poc Этот инструмент не должен использоваться для незаконных целей. 1. Способ использования: python3 grafanahole.py Введите ip:port в domain.txt 2. Область воздействия уязвимости Затронутые версии: Grafana 8.0.0 - 8.3.0 Безопасные версии: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

CVE-2021-21975

CVE-2021-21975 Nmap script to check vulnerability CVE-2021-21975 Vulnerability References: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html Blog...

CVE-2025-0108

Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...

Airopy

Airopy - Wireless Packet Capture Get clients and access points. With Alfa cards this script works correctly. Dependencies To run this script first install requirements as follows: root@kitploit: sudo pip3 install -r requirements.txt How to use In the examples I don't add 'sudo', but to execute th...