CVE-2025-29927

Next.js Middleware Bypass Checker | CVE-2025-29927 Automated Bash tool to detect Next.js applications vulnerable to the middleware bypass CVE-2025-29927 , based on research by Zhero Web Security. Requirements bash whatweb curl Install them on Debian/Ubuntu with: root@kitploit: sudo apt install...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

Clutch

Clutch Clutch is a high-speed iOS decryption tool. Clutch supports the iPhone, iPod Touch, and iPad as well as all iOS version, architecture types, and most binaries. Clutch is meant only for educational purposes and security research. Clutch requires a jailbroken iOS device with version 8.0 or...

NextJS-CVE-2025-29927-Docker-Lab

root@kitploit: 🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to...

security-research

Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 46 CVEs across 15 projects , 2023 to 2026. Where a public reproducer exists it is linked. Each one is a minimal, self-contained project that demonstrates the issue and...

awesome-list

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

MSRC-Security-Research

Intro This project hosts security research from the Microsoft Security Response Center MSRC. Contributing At this time, this project does not accept external contributions, but we hope to do so in the future. Most contributions require you to agree to a Contributor License Agreement CLA declaring...

semgrep-rules

semgrep-rules di elttam Benvenuti nel repository pubblico di regole semgrep...

CVE-2026-27145

cve-id ⚡ Uso Simples Use este projeto apenas em ambientes seguros e autorizados, como: Máquinas virtuais locais Contêineres Docker Configurações de laboratório isoladas Ambientes de teste de penetração autorizados Configuração de exemplo: root@kitploit: git clone cd Exemplo de uso: root@kitploit:...

pipe-primitive

pipe-primitive An exploit primitive in linux kernel inspired by DirtyPipe CVE-2022-0847. A while ago, like many security veterans, I studied and reproduced the DirtyPipe CVE-2022-0847 vulnerability, and deeply felt how useful this bug is. It starts from an uninitialized memory issue and ends with...

PaperCut-CVE-2026-81578-82078

Professionelles Sicherheitsforschungstool für die Bewertung von PaperCut NG/MF-Schwachstellen und autorisierte Ausnutzung root@kitploit: ╔══════════════════════════════════════════════════════════════════╗ ║ PAPERCUT SECURITY TOOL – POWER MODE ║ ║ CVE-2026-81578 · CVE-2026-82078 · v3.1.0 ║ ║ ⚡...

CVE-2017-0213

CVE-2017-0213: Vulnerabilità di elevazione dei privilegi COM di Windows Descrizione Autore: Google Security Research CVE: 2017-0213 EDB-ID: 42020 Riferimenti: Project-Zero Microsoft Exploit-Database Video: Youtube Prodotti interessati Prodotto| Versione| Aggiornamento| Build| Testato...

CVE-2026-3102

⚠️ Ricerca sulla Sicurezza e Disposizioni Legali 📌 Scopo di Questo Repository Questo repository è fornito esclusivamente per scopi educativi, accademici e di ricerca autorizzata sulla sicurezza informatica. È inteso a supportare la comprensione di: Vulnerabilità di sicurezza e concetti di...

CVE-2024-52011

cve-id ⚡ Einfache Verwendung Verwenden Sie dieses Projekt nur in sicheren und autorisierten Umgebungen, z. B.: Lokale virtuelle Maschinen Docker-Container Isolierte Laborumgebungen Autorisierte Penetrationstest-Umgebungen Beispiel-Setup: root@kitploit: git clone cd Project use python follow below...

tomcat_CVE-2018-1304_testing

Questo repository non contiene un README...

CVE-2026-31525

cve-id ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati come: Macchine virtuali locali Contenitori Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Configurazione di esempio: root@kitploit: git clone cd Esempio di utilizzo...

CVE-2026-0273

cve-id ⚡ Utilizzo Semplice Usa questo progetto solo in ambienti sicuri e autorizzati come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Esempio di configurazione: root@kitploit: git clone cd Project use python follow...

CVE-2026-8732

cve-id ⚡ Einfache Verwendung Verwenden Sie dieses Projekt nur in sicheren und autorisierten Umgebungen wie: Lokalen virtuellen Maschinen Docker-Containern Isolierten Laborumgebungen Autorisierten Penetrationstest-Umgebungen Beispiel-Setup: root@kitploit: git clone cd Beispielverwendung:...

CVE-2026-9560

cve-id ⚡ Utilizzo Semplice Utilizza questo progetto solo in ambienti sicuri e autorizzati, come: Macchine virtuali locali Container Docker Configurazioni di laboratorio isolate Ambienti di test di penetrazione autorizzati Configurazione di esempio: root@kitploit: git clone cd Esempio di utilizzo:...

CVE-2023-20938-Public

README Dieses Repository enthält einen Bug-Trigger für CVE-2023-20938 , der dazu dient, das Verhalten der Schwachstelle zu demonstrieren und zu untersuchen. QEMU-Emulation : Der Bug-Trigger zur Nachstellung des Problems unter QEMU befindet sich im Verzeichnis libdevbinder/. Echte Geräte : Der...