CVE-2023-4197

CVE-2023-4197 это простой скрипт из CVE-2023-4197, который был немного изменён, так как изначально он не работал с машиной broadlight из HTB, что означает, что нам нужно немного модифицировать скрипт, а затем использовать его, как описано в документации...

CVE-2019-12840-NodeJs-Exploit

CVE-2019-12840 root@kitploit: sudo node exploit.js...

CVE-2021-41773

ApacheRCE ApacheRCE is a small little python script that will allow you to input the apache version 2.4.49-2.4.50 and then input a list of ip addresses from a text file and mass run the exploit on them, this can be useful if you are running mutiple websites and you want to see if they can all be...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 WebLogic: неавторизованный доступ, загрузка произвольных файлов/RCE уязвимость проверочный скрипт...

MemITM

What's the MemITM tool? The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

CVE-2023-30190-FOLLINA

CVE-2023-30190-EXPLOIT.py...

VBoxCloak

VBoxCloak A PowerShell script that attempts to help malware analysts hide their VirtualBox Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings by at least a few points ; The script accomplishes this by doing the following: Renames several...

polyshell

PolyShell: полиглот для Bash/Batch/PowerShell Что это такое PolyShell — это скрипт, который одновременно корректен в Bash, Windows Batch и PowerShell т.е. полиглот. Это делает PolyShell полезным шаблоном для тестирования на проникновение, так как его можно выполнять на большинстве систем без...

CVE-2024-46538

This post is a research article published by EQSTLab. Thanks tophysicszq, who discovered this vulnerability. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS lead to Arbitrary Code Execution PoC ★ https://github.com/user-attachments/assets/f41d0945-b7f4-4f88-bac5-265904256aae Description...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

Sudomy

Sudomy Subdomain Enumeration & Analysis Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing advanced automated reconnaissance framework. This tool can also be used for OSINT Open-source intelligence activities. Features ! For recent time, Sudomy has these...

katoolin

katoolin Automatically install all Kali linux tools Features Add Kali linux repositories Remove kali linux repositories Install Kali linux tools Requirements Python 2.7 An operating system tested on Ubuntu Installation sudo su git clone https://github.com/LionSec/katoolin.git && cp...

elite-proxy-finder

elite-proxy-finder This script was not working for a few months. I just fixed it 7/6/15. Only uses gatherproxy.com now. Finds elite anonymity L1 HTTP proxies then tests them all in parallel. Tests each proxy against 3 IP checking URLs including one which is HTTPS to make sure it can handle HTTPS...

cve-2020-0601-plugin

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: root@kitploit: 1579043477.791522 CHhAvVGS1DHFjwGM9...

CVE-2020-8825

CVE-2020-8825 Publish: CVE-2020-8825 Vendor: root@kitploit: PHP VanillaForum Description: root@kitploit: The vulnerability exists due to insufficient sanitization of user-supplied data passed to "index.php?p=/dashboard/settings/branding" URL. A remote attacker can permanently inject and execute...

-cve-2025-55182

CVE-2025-55182 Mass / Single URL Detection Script image An efficient CVE-2025-55182 vulnerability detection tool, supporting single URL quick detection and batch URL detection, automatically generating detailed Excel detection reports, and outputting complete log files. 🔥 Core Features Supports...

maskphish

👨‍💻️ Автор : jaykali 🔥 MaskPhish MaskPhish не является фишинговым инструментом. Это лишь доказательство концепции «Технологии создания URL». Это простой Bash-скрипт для сокрытия фишинговой ссылки под ссылкой, выглядящей как обычная google.com или facebook.com. Его можно интегрировать в фишинговые...

ezsploit

ezsploit Alt text Metasploit용 Linux bash 스크립트 자동화 Metasploit 기능 자동화를 위한 명령줄 스크립트 Metasploit 서비스를 확인하고 없으면 시작 Windows, Linux, Android 및 Mac용 meterpreter reversetcp 페이로드를 쉽게 제작 여러 meterpreter reversetcp 리스너 시작 기본 지속성 옵션 및 스크립트 구축 지원 Armitage 런처 Msfconsole로 진입 기타 재미있는 기능들 : 할 일 페이로드/리스너에 더 많은 기능 추가:...

kalitorify

Kali Linux용 Tor를 통한 투명 프록시 kalitorify 소개 kalitorify 는 Kali Linux용 셸 스크립트로, iptables 설정을 사용하여 Tor 네트워크를 통한 투명 프록시 를 생성합니다. 이 프로그램은 또한 Tor 종료 노드즉, Tor 프록시 아래에 있을 때의 공인 IP 주소 확인이나 서비스 및 네트워크 설정을 확인하여 Tor가 올바르게 구성되었는지 검사하는 등 다양한 검사를 수행할 수 있습니다. 간단히 말해, kalitorify를 사용하면 Kali Linux 운영 체제의 모든 트래픽을 Tor...