tofu

tofu A modular tool for hacking offline Windows filesystems and bypassing login screens. Can do hashdumps, OSK-Backdoors, user enumeration and more. How it works : When a Windows machine is shut down, unless it has Bitlocker or another encryption service enabled, it's storage device contains...

NotProxyShellHunter

NotProxyShellHunter NotProxyShell CVE-2022-40140 & CVE-2022-41082 के लिए जाँच करें...

BlueborneDetection

BlueborneDetection Scarica Per scaricare questo strumento, devi clonare o scaricare come zip questo repository. Utilizzo Compila: root@kitploit: make Accoppia il dispositivo Android e avvia lo script: root@kitploit: ./detectBlueborne Non dimenticare di utilizzare l'indirizzo MAC del dispositivo...

ProxyShell_POC

ProxyShellPOC POC per la scansione di ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 uso: python3 Proxyshell.py ip...

NewMachineAccount

NewMachineAccount Visão Geral NewMachineAccount.exe é uma ferramenta exe autônoma e simples para criar novas contas de máquina com senha personalizada em um domínio especificado. Uso root@kitploit: NewMachineAccount.exe v1.0 by @decoderit -dc -name -domain -password -ou -user -pass -uac Parâmetro...

aad-bofs

इस रिपॉज़िटरी में विभिन्न Azure AD हमलों के लिए BOFs का संग्रह है। सभी bofs को अभियानों के दौरान युद्ध-परीक्षित किया गया है। कृपया योगदान करने में भी संकोच न करें :...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

CVE-2024-26144-test

CVE-2024-26144-test Requisiti: Docker compose Deno root@kitploit: $ deno run --allow-run --allow-net check.ts Se desideri testare la CDN, imposta l'URL come argomento. Assicurati di aver svuotato tutta la cache prima di eseguire! root@kitploit: $ deno run --allow-run --allow-net check.ts...

mikrotik-beast

Mikrotik Beast tool Strumento di sfruttamento di massa per MikroTik WinBox, CVE-2018-14847 Questo strumento ti consente di scansionare un intervallo di host di rete CIDR contro l'exploit winbox CVE-2018-14847. Utilizzo $ python3 mikrotikbeast.py Esempi di input accettati Esempio 1: '192.168.5.0/2...

SnipRecover-CLI

SnipRecover CLI Erkennung und Wiederherstellung von PNG-Aufnahmen der Windows Snipping Tool, die für CVE-2023-28303 anfällig sind SnipRecover CLI ist ein minimales, abhängigkeitsfreies Kommandozeilen-Tool, das dazu dient: PNG-Dateien zu erkennen , die durch die Windows Snipping...

0logon

Questo repository non contiene un README...

dwn

🥽 dwn dockerpwn - un gestore di strumenti di attacco docker introduzione dwn è un "docker-compose per hacker". Utilizzando un semplice formato YAML "plan" simile a docker-compose, vengono definiti nomi di immagini, versioni e mapping di volumi/porte per configurare uno strumento per l'uso...

CVE-2026-55580 mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCPSHELLSECCONFIGFILE is unset, main.go starts the documented bare-binary deployment without a security policy...

lab-annie

lab-annie Automatisiert die Ausnutzung von CVE-2020-13160, einer kritischen Remote-Codeausführung-Schwachstelle in AnyDesk 5.5.2...

CVE-2025-55182

Next.js React Server Components RCE-Exploit Nutzt CVE-2025-55182 für Remote-Codeausführung RCE durch Prototype Pollution aus. Installation root@kitploit: uv sync Verwendung Befehlsausführung root@kitploit: source .venv/bin/activate python3 exploit.py -u https://example.com -c "id" Reverse Shell...

CVE-2026-55529

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, the MCP HTTP Stream validateorigin method accepts requestorigin.startswithallowed, so the attacker-controlled localhost.evil.example HTTP origin matches the localhost allowlist. Without an API key, a malicious webpage can submit...

CVE-2024-58377 Nokogiri before 1.16.5 libxml2 Dependency Update

Nokogiri versions before 1.16.5 bundle libxml2 2.12.6, which is affected by CVE-2024-34459 in libxml2's xmllint tool. Nokogiri 1.16.5 upgrades the bundled libxml2 to 2.12.7 to address this. Per the maintainers, there is no impact to Nokogiri users because Nokogiri does not provide or expose the...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

CVE-2026-55529

PraisonAI (a multi-agent teams system) has an origin validation bypass in its MCP HTTP Stream transport. The _validate_origin method uses request_origin.startswith(allowed), so an attacker-controlled origin like http://localhost.evil.example matches the http://localhost allowlist entry via prefix...

PraisonAI has an origin validation bypass in MCP HTTP Stream transport that allows browser-mediated unauthenticated tool execution on local MCP server

Summary PraisonAI's MCP HTTP Stream transport uses an unsafe prefix match when validating the Origin header. The default localhost allowlist includes origins such as http://localhost, and the validation accepts any origin that starts with an allowed value. As a result, an attacker-controlled orig...