Lucene search
+L

10376 matches found

Kitploit
Kitploit
added 2026/09/11 4:30 a.m.44 views

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 2:34 a.m.5 views

PwnKit-Exploit

PwnKit-Exploit CVE-2021-4034 @c0br40x help to make this section in README!! Proof of Concept root@kitploit: debian@debian:/PwnKit-Exploit$ make cc -Wall exploit.c -o exploit debian@debian:/PwnKit-Exploit$ whoami debian debian@debian:/PwnKit-Exploit$ ./exploit Current User before execute exploit...

7.8CVSS7AI score0.94921EPSS
SaveExploits154
Kitploit
Kitploit
added 2026/09/11 2:31 a.m.4 views

CVE-2024-48990-Automatic-Exploit

CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...

7.8CVSS7.8AI score0.20452EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/11 2:30 a.m.7 views

Malicious-MCP

Malicious MCP This is a proof-of-concept project that allows you to deploy an MCP server that "disguises" itself as any other MCP server. This MCP acts as an MCP 'Proxy', and simply forwards all incoming requests to an upstream MCP server. What is an MCP? An MCP Server is a program that expose...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/11 1:18 a.m.5 views

envocabulary

envocabulary For every variable in your current shell, find the file and line that set it — or which subsystem direnv, launchd, terminal, SSH, system injected it. Plus a few static-file commands for the moment your shell config has sprawled across N files and backups and you've lost the plot. I...

5.8AI score
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 12:31 a.m.5 views

EUVD-2026-75792

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist...

8.8CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 11:42 p.m.6 views

instrumentation_callbacks

instrumentationcallbacks Instrumentation callbacks are quite a fun undocumented part of Windows. All the code in this repository is released under the MIT license. This repository uses google style C++ spacing. PRs are welcome if you find issues, bugs, or believe a specific feature should be adde...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 11:29 p.m.7 views

credactor

Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 10:50 p.m.6 views

CVE-2022-42889-RCE

CVE-2022-42889-PoC Proof of Concept for CVE-2022-42889 remote code execution exploit Text4Shell Vulnerability. Give a ⭐ for support ❤️ About this vulnerability CVE-2022-42889 is a new critical vulnerability similar to Spring4Shell and Log4Shell. Its a RCE Remote Code Execution vulnerability with...

9.8CVSS7.5AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/10 10:29 p.m.5 views

pi-hole

Network-wide ad blocking via your own Linux hardware The Pi-hole® is a DNS sinkhole that protects your devices from unwanted content without installing any client-side software. Easy-to-install : our dialogs walk you through the simple installation process in less than ten minutes Resolute :...

8.1AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/10 10:01 p.m.8 views

CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...

9.8CVSS7.6AI score0.9507EPSS
SaveExploits24
CVE
CVE
added 2026/09/10 9:42 p.m.38 views

CVE-2026-45770

Suricata versions 8.0.0 through 8.0.5 (exclusive) are affected by a Lua sandbox bypass. A Lua rule that registers an excessive number of flow variables can corrupt Lua detection state , potentially escaping Suricata's restricted Lua sandbox. The attack requires a crafted Lua script/rule to be loa...

7.5CVSS0.00049EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/10 9:39 p.m.15 views

CVE-2026-79742

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by an incomplete environment variable blocklist in the MCP stdio server configuration. The specific root cause is that the OPENSSL_CONF environment variable is absent from the blocklist, permitting native code execution via OpenSSL engin...

8.8CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 9:09 p.m.6 views

Invoke-DOSfuscation

Invoke-DOSfuscation v1.0 Introduction Invoke-DOSfuscation is a PowerShell v2.0+ compatible cmd.exe command obfuscation framework. White paper: https://www.fireeye.com/blog/threat-research/2018/03/dosfuscation-exploring-obfuscation-and-detection-techniques.html Background Over the past several yea...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 8:42 p.m.25 views

rayder

Rayder A lightweight tool for orchestrating and organizing your command-line workflows About • Installation • Usage • Workflow Configuration • Parallel Execution • Workflows About Rayder is a command-line tool designed to simplify the orchestration and execution of workflows. It allows you to...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 8:13 p.m.9 views

CVE-2023-22809

Linux Privilege Escalation Exploit for CVE-2021-3560 Sudoedit a.k.a -e - Local Privilege Escalation For educational and authorized security research purposes only Original Exploit Authors n3m1dotsys Vulnerability Description In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra...

7.8CVSS7.6AI score0.55367EPSS
SaveExploits21References4
Kitploit
Kitploit
added 2026/09/10 8:05 p.m.10 views

telnet_scan

Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746 A Python-based security assessment tool that detects and where applicable exploits two critical vulnerabilities in GNU InetUtils telnetd: CVE-2026-24061 – Authentication bypass via USER environment variable injection CVSS 9.8...

9.8CVSS8.2AI score0.97993EPSS
SaveExploits75References1
Kitploit
Kitploit
added 2026/09/10 7:40 p.m.8 views

CVE-2026-24061

CVE-2026-24061-PoC ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. CVE-2026-24061 is a critical vulnerability CVSS 9.8 in telnetd from GNU Inetutils versions 1.9.3–2.7 that allows a remote attacker to bypass...

9.8CVSS8.2AI score0.97993EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/10 7:32 p.m.3 views

goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-

Goahead webserver pre v5.1.5 RCE PoC CVE-2021-42342 A recent bug in Goahead Webserver was discovered by William Bowling which leads to RCE on the exploited server. The issue exists prior to version 5.1.5 which, according to Shodan covers around 2.8mio servers on the internet. A CVS is available n...

9.8CVSS8.2AI score0.5946EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 6:37 p.m.12 views

Gepetto

Gepetto Gepetto is a Python plugin which uses various large language models to provide meaning to functions decompiled by IDA Pro ≥ 7.6. It can leverage them to explain what a function does, and to automatically rename its variables. Here is a simple example of what results it can provide in mere...

6.1AI score
SaveExploits0References3
Rows per page
Query Builder