Lucene search
+L

10378 matches found

Kitploit
Kitploit
added 2026/09/11 12:21 p.m.4 views

Out-FINcodedCommand

Out-FINcodedCommand v1.0 Introduction Out-FINcodedCommand is a PowerShell v2.0+ compatible PowerShell POC script designed to highlight several obfuscation techniques used by FIN threat actors. The primary obfuscation techniques highlighted in this tool are: 1. cmd.exe's variable char/string...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 10:12 a.m.8 views

credactor

Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 9:52 a.m.6 views

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

9.8CVSS7.8AI score0.99943EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/11 8:36 a.m.5 views

CVE-2021-4034

Exploit for CVE-2021-4034 Pkexec - Local Privilege Escalation For educational and authorized security research purposes only. Original Exploit Authors @arthepsy Vulnerability Description A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References3
Kitploit
Kitploit
added 2026/09/11 8:16 a.m.107 views

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation root@kitploit: $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose root@kitploit: $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 8:02 a.m.7 views

CVE-2022-22947

Spring Cloud Gateway RCE Env CVE-2022-22947 CVE-2022-22947 was identified in the Spring Cloud Gateway Server jar. After the application is compiled you should be able to view the existing routes by visiting: http://127.0.0.1:9000/actuator/gateway/routes Compile root@kitploit: $ mvn package...

10CVSS7.9AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
added 2026/09/11 7:40 a.m.8 views

CVE-2026-24061

CVE-2026-24061-PoC ⚠ This tool is created solely for educational use only. Unauthorized use outside of controlled environments is strictly prohibited. CVE-2026-24061 is a critical vulnerability CVSS 9.8 in telnetd from GNU Inetutils versions 1.9.3–2.7 that allows a remote attacker to bypass...

9.8CVSS8.2AI score0.97993EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/11 7:11 a.m.10 views

telnet_scan

Telnet Vulnerability Scanner CVE-2026-24061 & CVE-2026-32746 A Python-based security assessment tool that detects and where applicable exploits two critical vulnerabilities in GNU InetUtils telnetd: CVE-2026-24061 – Authentication bypass via USER environment variable injection CVSS 9.8...

9.8CVSS8.2AI score0.97993EPSS
SaveExploits75References1
Kitploit
Kitploit
added 2026/09/11 6:37 a.m.9 views

CVE-2021-4034-PwnKit-

CVE-2021-4034 PwnKit - Analysis and Exploitation This repository contains the source code to demonstrate the exploitation of the CVE-2021-4034 vulnerability, also known as PwnKit , discovered in pkexec part of the Polkit package. This flaw allows local privilege escalation to root through the use...

7.8CVSS7.4AI score0.94921EPSS
SaveExploits154
Kitploit
Kitploit
added 2026/09/11 5:46 a.m.4 views

CVE-2023-36845

CVE-2023-36845 A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables. Script Usage root@kitploit: $ dos2unix CVE-2023-36845.sh $...

9.8CVSS7.6AI score0.9507EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/11 4:30 a.m.44 views

deepsecrets

DeepSecrets - a better tool for secret scanning !WARNING Active development was switched to the creator's fork at https://github.com/ntoskernel/deepsecrets. This repository will not receive any updates...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 2:34 a.m.5 views

PwnKit-Exploit

PwnKit-Exploit CVE-2021-4034 @c0br40x help to make this section in README!! Proof of Concept root@kitploit: debian@debian:/PwnKit-Exploit$ make cc -Wall exploit.c -o exploit debian@debian:/PwnKit-Exploit$ whoami debian debian@debian:/PwnKit-Exploit$ ./exploit Current User before execute exploit...

7.8CVSS7AI score0.94921EPSS
SaveExploits154
Kitploit
Kitploit
added 2026/09/11 2:31 a.m.4 views

CVE-2024-48990-Automatic-Exploit

CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...

7.8CVSS7.8AI score0.20452EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/11 2:30 a.m.7 views

Malicious-MCP

Malicious MCP This is a proof-of-concept project that allows you to deploy an MCP server that "disguises" itself as any other MCP server. This MCP acts as an MCP 'Proxy', and simply forwards all incoming requests to an upstream MCP server. What is an MCP? An MCP Server is a program that expose...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/11 1:18 a.m.5 views

envocabulary

envocabulary For every variable in your current shell, find the file and line that set it — or which subsystem direnv, launchd, terminal, SSH, system injected it. Plus a few static-file commands for the moment your shell config has sprawled across N files and backups and you've lost the plot. I...

5.8AI score
SaveExploits0References3
EUVD
EUVD
added 2026/09/11 12:31 a.m.7 views

EUVD-2026-75792

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an incomplete environment variable blocklist...

8.8CVSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 11:42 p.m.6 views

instrumentation_callbacks

instrumentationcallbacks Instrumentation callbacks are quite a fun undocumented part of Windows. All the code in this repository is released under the MIT license. This repository uses google style C++ spacing. PRs are welcome if you find issues, bugs, or believe a specific feature should be adde...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 10:50 p.m.6 views

CVE-2022-42889-RCE

CVE-2022-42889-PoC Proof of Concept for CVE-2022-42889 remote code execution exploit Text4Shell Vulnerability. Give a ⭐ for support ❤️ About this vulnerability CVE-2022-42889 is a new critical vulnerability similar to Spring4Shell and Log4Shell. Its a RCE Remote Code Execution vulnerability with...

9.8CVSS7.5AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/10 10:01 p.m.8 views

CVE-2023-36845

CVE-2023-36845 Description CVE-2023-36845 represents a notable PHP environment variable manipulation vulnerability that impacts Juniper SRX firewalls and EX switches. While Juniper has categorized this vulnerability as being of medium severity, in this article, we will elucidate how this singular...

9.8CVSS7.6AI score0.9507EPSS
SaveExploits24
CVE
CVE
added 2026/09/10 9:42 p.m.38 views

CVE-2026-45770

Suricata versions 8.0.0 through 8.0.5 (exclusive) are affected by a Lua sandbox bypass. A Lua rule that registers an excessive number of flow variables can corrupt Lua detection state , potentially escaping Suricata's restricted Lua sandbox. The attack requires a crafted Lua script/rule to be loa...

7.5CVSS0.00049EPSS
SaveExploits0References3
Rows per page
Query Builder