valhalla

valhalla Valhalla trova dispositivi vulnerabili su Shodan, può anche scansionare una lista di domini per trovare vulnerabilità. INSTALLAZIONE git clone https://github.com/gotr00t0day/valhalla.git cd valhalla pip3 install -r requirements.txt chmod +x install.sh ./install.sh UTILIZZO root@kitploit:...

BlueborneDetection

BlueborneDetection Scarica Per scaricare questo strumento, devi clonare o scaricare come zip questo repository. Utilizzo Compila: root@kitploit: make Accoppia il dispositivo Android e avvia lo script: root@kitploit: ./detectBlueborne Non dimenticare di utilizzare l'indirizzo MAC del dispositivo...

ProxyShell_POC

ProxyShellPOC POC per la scansione di ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 uso: python3 Proxyshell.py ip...

urlbuster

██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

NewMachineAccount

NewMachineAccount Visão Geral NewMachineAccount.exe é uma ferramenta exe autônoma e simples para criar novas contas de máquina com senha personalizada em um domínio especificado. Uso root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Parâmetro...

aad-bofs

इस रिपॉज़िटरी में विभिन्न Azure AD हमलों के लिए BOFs का संग्रह है। सभी bofs को अभियानों के दौरान युद्ध-परीक्षित किया गया है। कृपया योगदान करने में भी संकोच न करें :...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

CVE-2024-26144-test

CVE-2024-26144-test Requisiti: Docker compose Deno root@kitploit: $ deno run --allow-run --allow-net check.ts Se desideri testare la CDN, imposta l'URL come argomento. Assicurati di aver svuotato tutta la cache prima di eseguire! root@kitploit: $ deno run --allow-run --allow-net check.ts...

mikrotik-beast

Mikrotik Beast tool Strumento di sfruttamento di massa per MikroTik WinBox, CVE-2018-14847 Questo strumento ti consente di scansionare un intervallo di host di rete CIDR contro l'exploit winbox CVE-2018-14847. Utilizzo $ python3 mikrotikbeast.py Esempi di input accettati Esempio 1: '192.168.5.0/2...

SnipRecover-CLI

SnipRecover CLI Erkennung und Wiederherstellung von PNG-Aufnahmen der Windows Snipping Tool, die für CVE-2023-28303 anfällig sind SnipRecover CLI ist ein minimales, abhängigkeitsfreies Kommandozeilen-Tool, das dazu dient: PNG-Dateien zu erkennen , die durch die Windows Snipping...

0logon

Questo repository non contiene un README...

dwn

🥽 dwn dockerpwn - un gestore di strumenti di attacco docker introduzione dwn è un "docker-compose per hacker". Utilizzando un semplice formato YAML "plan" simile a docker-compose, vengono definiti nomi di immagini, versioni e mapping di volumi/porte per configurare uno strumento per l'uso...

Pymap-Scanner

Pymap-Scanner Funzionalità root@kitploit: 1-Basic Gui 2-Speed Scan 3-Custom Services 4-User Control 5-Error Control 6-Useful parameters And More. Moduli di installazione root@kitploit: $ Pyqt4 $ Nmap Requisiti Terze parti root@kitploit: +xsltproc...

catnip

Cat-Nip Automated Basic Pentest Tool this tool will make your basic pentesting task like Information Gathering, Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone Cat-Nip git clone https://github.com/baguswiratmaadi/catnip Go Inside Cat-Nip Dir c...

CVE-2026-55580 mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCPSHELLSECCONFIGFILE is unset, main.go starts the documented bare-binary deployment without a security policy...

linux-smart-enumeration

First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...

lab-annie

lab-annie Automatisiert die Ausnutzung von CVE-2020-13160, einer kritischen Remote-Codeausführung-Schwachstelle in AnyDesk 5.5.2...

CVE-2025-55182

Next.js React Server Components RCE-Exploit Nutzt CVE-2025-55182 für Remote-Codeausführung RCE durch Prototype Pollution aus. Installation root@kitploit: uv sync Verwendung Befehlsausführung root@kitploit: source .venv/bin/activate python3 exploit.py -u https://example.com -c "id" Reverse Shell...

CVE-2026-55529

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream validateorigin method accepts requestorigin.startswithallowed, so the attacker-controlled localhost.evil.example HTTP origin matches the localhost allowlist. Without an API key, a malicious webpage can submit...

CVE-2024-58377 Nokogiri before 1.16.5 libxml2 Dependency Update

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...