CVE-2019-9670

Badge Licenza MIT Installazione 1. Installa Python3 e pip Istruzioni Qui Se non riesci a capirlo, non dovresti davvero usare questo strumento Installa tramite pip root@kitploit: pip install CVE-2019-9670 Esegui il comando qui sotto per verificare CVE-2019-9670 -h Configurazioni 2. Abbiamo integra...

CVE-2024-31819

Instalação e Execução do script 💻 Pré-requisitos Antes de começar, certifique-se de que você tem as seguintes ferramentas instaladas na sua máquina: Python 3.x Git pip para gerenciar as dependências Python Etapas de Instalação 1. Clonar o repositório Use git para clonar o repositório:...

React Native Community CLI - Unauthenticated OS Command Injection

The Metro development server started by the React Native Community CLI binds to external network interfaces by default and exposes an unauthenticated /open-url endpoint. Affected versions pass the attacker supplied url value straight to the open helper without validating the scheme, allowing an...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

Ivanti Connect Secure - XXE

Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 è una vulnerabilità critica nella funzionalità Web UI del software Cisco IOS XE, che consente a un aggressore remoto non autenticato di creare account con livello di privilegio 15 sui sistemi interessati, ottenendo così il controllo completo del dispositivo. La...

scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage root@kitploit: Usage: scout command Available Commands: help Hel...

cve-2021-42013-httpd

Dockerisierung einer Schwachstelle: cve-2021-42013 Dieses Projekt zielt darauf ab, eine bestimmte Schwachstelle mit Docker zu dockerisieren. Ziel ist es, eine isolierte Umgebung zu schaffen, in der die Schwachstelle sicher ausgenutzt und getestet werden kann. Verwundbare Anwendung Apache HTTP...

cve-2026-43515-poc

CVE-2026-43515 — Bypass delle restrizioni di sicurezza in Apache Tomcat Giudizio di sfruttabilità: confermato sfruttabile. Una richiesta POST verso una risorsa protetta da una configurazione con divisa bypassa completamente l'autenticazione. La struttura web.xml richiesta è poco comune nelle...

CVE-2002-0289

CVE-2002-0289 Phusion WebServer 1.0 - Overflow del buffer remoto 'URL' Pubblicazione su Exploit-db: https://www.exploit-db.com/exploits/21294/ Phusion WebServer 1.0 - Denial of Service tramite URL lungo Pubblicazione su Exploit-db: https://www.exploit-db.com/exploits/21293/ Autore Alex Hernandez...

CVE-2026-11120-Command-Injection-via-Git-URL-in-CI-CD-Pipeline

CVE-2026-11120 – Iniezione di comandi tramite URL Git nella pipeline CI/CD Codice del programma Python root@kitploit: cicdbuild.py - Clones repository without sanitizing URL import subprocess, sys def cloneandbuildrepourl: Vulnerability: repourl can contain shell metacharacters cmd = f"git clone...

socgholish_finder

SocGholish Finder Semplice script per scansionare siti web alla ricerca di inject SocGholish. Controlla e mostra l'inject se trovato, e deoffusca e mostra i domini URL shadow. root@kitploit: usage: finder.py -h -url URL -ua USERAGENT -f FILENAME -p PROXY -s SocGholish finder options: -h, --help...

CVE-2026-2020-SSRF-via-URL-Parser-Differential

CVE-2026-2020 – SSRF durch URL-Parser-Differenz Programmcode Python root@kitploit: vulnerableservice.py - Validates URL with urllib.parse, fetches with requests from flask import Flask, request import requests import urllib.parse app = Flaskname def isallowedurlurl: parsed =...

Scannerweb

Scannerweb Scanner di vulnerabilità scritto in python3, effettua fuzzing su tutti gli URL del sito target e poi li scansiona per Scannerweb Screeenshot Naviga nella directory /opt opzionale root@kitploit: cd /opt/ Clona questo repository root@kitploit: git clone...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi Patch-Umgehung Nur zur Verwendung in kontrollierten und eigenen Umgebungen. Nicht gegen Systeme ohne Autorisierung verwenden. Beschreibung PoC entwickelt, um CVE-2021-42013 zu demonstrieren, das in Apache HTTP Server 2.4.50 vorhanden ist. Dies...

CVE-2024-24919

CVE-2024-24919 Инструмент для обнаружения и эксплуатации уязвимости CVE-2024-24919 Установка: root@kitploit: git clone https://github.com/RevoltSecurities/CVE-2024-24919 pip install -r requirements.txt python3 exploit.py --help Использование: root@kitploit: python3 exploit.py -h / / / / / / / / |...

CVE-2022-21371

Badges Лицензия MIT Установка 1. Установите Python3 и pip Инструкции здесь Если вы не можете с этим разобраться, вам не стоит использовать этот инструмент Установка через pip root@kitploit: pip install CVE-2022-21371 Выполните следующую команду для проверки CVE-2022-21371 -h Настройка 2. Мы...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...