Pymap-Scanner

Pymap-Scanner Funzionalità root@kitploit: 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. Moduli di installazione root@kitploit: $ Pyqt4 $ Nmap Requisiti Terze parti root@kitploit: +xsltproc...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

CVE-2026-55580 mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCPSHELLSECCONFIGFILE is unset, main.go starts the documented bare-binary deployment without a security policy...

linux-smart-enumeration

First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...

lab-annie

lab-annie Automatisiert die Ausnutzung von CVE-2020-13160, einer kritischen Remote-Codeausführung-Schwachstelle in AnyDesk 5.5.2...

CVE-2025-55182

Next.js React Server Components RCE-Exploit Nutzt CVE-2025-55182 für Remote-Codeausführung RCE durch Prototype Pollution aus. Installation root@kitploit: uv sync Verwendung Befehlsausführung root@kitploit: source .venv/bin/activate python3 exploit.py -u https://example.com -c "id" Reverse Shell...

libget_user_exploit

Questa libreria legge nella memoria del kernel tramite l'exploit CVE-2013-6282...

tomcat-cve-2020-1938-check

tomcat-cve-2020-1938-check...

CVE-2024-58377 Nokogiri before 1.16.5 libxml2 Dependency Update

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...

aclpwn.py

aclpwn.py Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms to find the most efficient ACL based privilege escalation path. Aclpwn.py is similar to the...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

CVE-2021-34527-Scanner-Based-On-cube0x0-POC

Questo è uno scanner per il servizio Windows-Print-Spooler a rischio Basato sul PoC della CVE-2021-34527 creato originariamente da cube0x0...

CVE-2026-55529

PraisonAI (a multi-agent teams system) has an origin validation bypass in its MCP HTTP Stream transport. The _validate_origin method uses request_origin.startswith(allowed), so an attacker-controlled origin like http://localhost.evil.example matches the http://localhost allowlist entry via prefix...

PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server

Summary PraisonAI's MCP HTTP Stream transport uses an unsafe prefix match when validating the Origin header. The default localhost allowlist includes origins such as http://localhost, and the validation accepts any origin that starts with an allowed value. As a result, an attacker-controlled orig...

CVE-2026-19650-CVE-2026-19478

cve-id Spenden Unterstütze die Pflege dieses Projekts mit PayPal oder durch Scannen des QR-Codes unten. ⚡ Einfache Verwendung Verwende dieses Projekt nur in sicheren und autorisierten Umgebungen wie: Lokalen virtuellen Maschinen Docker-Containern Isolierten Laborumgebungen Autorisierten...

ARTAXERXES

ARTAXERXES 🚀 Framework avanzato di stress test multi-tecnologia Strumento educativo di cybersecurity per test di rete ad alte prestazioni 📋 Indice 🎯 Panoramica ⚡ Confronto delle prestazioni 🛠️ Stack tecnologico 📊 Architettura 🚀 Avvio rapido ⚙️ Installazione 💡 Esempi di utilizzo 🔧 Configurazione...

cve-2018-15473

CVE-2018-15473 This is part of Cved: a tool to manage vulnerable docker containers. Questo fa parte di Cved: uno strumento per gestire contenitori docker vulnerabili. Cved: https://github.com/git-rep-src/cved Sorgente immagine: https://github.com/cved-sources/cve-2018-15473 Autore immagine:...

godehashed

Godehashed Ein Golang-Tool, das die dehashed.com-API verwendet, um nach kompromittierten Assets zu suchen. Die Ergebnisse können dann in eine CSV-Datei für die weitere Analyse zusammengestellt werden. Bildschirmfoto Dehashed API Du musst dem Tool einen API-Schlüssel zur Verfügung stellen. Siehe...

UnderlayCopy

UnderlayCopy UnderlayCopy é um utilitário PowerShell para aquisição NTFS de baixo nível e extração de artefatos de sistema protegidos e bloqueados por exemplo: SAM , SYSTEM , NTDS.dit , hives do registro e outros arquivos normalmente inacessíveis enquanto o Windows está em execução. Ele suporta...