CVE-2026-78379

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

EUVD-2026-42717

@arikusi/deepseek-mcp-server: Missing Authentication on Self-Hosted HTTP MCP Endpoint...

Metaforge

Metaforge "Uno strumento OSINT che analizza i metadati e crea report dinamici" https://chriswmorris.github.io/Metaforge/ Progetto Senior Design 2019 - Di Chris Morris e Collin Mockbee Un'applicazione Python3 per sistemi operativi basati su Unix Nota: Metaforge richiede almeno python versione 3.5...

hacktronian

Pentesing Tools That All Hacker Needs. HACKTRONIAN Menu : Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation Install The HACKTRONIAN Information Gathering: Nmap Setoolkit Port Scanning Host To IP wordpre...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: root@kitploit: ▶ cat domains.txt | waybackurls urls Install: root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was...

tofu

tofu A modular tool for hacking offline Windows filesystems and bypassing login screens. Can do hashdumps, OSK-Backdoors, user enumeration and more. How it works : When a Windows machine is shut down, unless it has Bitlocker or another encryption service enabled, it's storage device contains...

NotProxyShellHunter

NotProxyShellHunter NotProxyShell CVE-2022-40140 & CVE-2022-41082 के लिए जाँच करें...

valhalla

valhalla Valhalla trova dispositivi vulnerabili su Shodan, può anche scansionare una lista di domini per trovare vulnerabilità. INSTALLAZIONE git clone https://github.com/gotr00t0day/valhalla.git cd valhalla pip3 install -r requirements.txt chmod +x install.sh ./install.sh UTILIZZO root@kitploit:...

BlueborneDetection

BlueborneDetection Scarica Per scaricare questo strumento, devi clonare o scaricare come zip questo repository. Utilizzo Compila: root@kitploit: make Accoppia il dispositivo Android e avvia lo script: root@kitploit: ./detectBlueborne Non dimenticare di utilizzare l'indirizzo MAC del dispositivo...

ProxyShell_POC

ProxyShellPOC POC per la scansione di ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 uso: python3 Proxyshell.py ip...

urlbuster

██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

NewMachineAccount

NewMachineAccount Visão Geral NewMachineAccount.exe é uma ferramenta exe autônoma e simples para criar novas contas de máquina com senha personalizada em um domínio especificado. Uso root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Parâmetro...

aad-bofs

इस रिपॉज़िटरी में विभिन्न Azure AD हमलों के लिए BOFs का संग्रह है। सभी bofs को अभियानों के दौरान युद्ध-परीक्षित किया गया है। कृपया योगदान करने में भी संकोच न करें :...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

CVE-2024-26144-test

CVE-2024-26144-test Requisiti: Docker compose Deno root@kitploit: $ deno run --allow-run --allow-net check.ts Se desideri testare la CDN, imposta l'URL come argomento. Assicurati di aver svuotato tutta la cache prima di eseguire! root@kitploit: $ deno run --allow-run --allow-net check.ts...

mikrotik-beast

Mikrotik Beast tool Strumento di sfruttamento di massa per MikroTik WinBox, CVE-2018-14847 Questo strumento ti consente di scansionare un intervallo di host di rete CIDR contro l'exploit winbox CVE-2018-14847. Utilizzo $ python3 mikrotikbeast.py Esempi di input accettati Esempio 1: '192.168.5.0/2...

SnipRecover-CLI

SnipRecover CLI Erkennung und Wiederherstellung von PNG-Aufnahmen der Windows Snipping Tool, die für CVE-2023-28303 anfällig sind SnipRecover CLI ist ein minimales, abhängigkeitsfreies Kommandozeilen-Tool, das dazu dient: PNG-Dateien zu erkennen , die durch die Windows Snipping...