CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE Этот репозиторий содержит эксплойт для CVE-2019-16278 в Nostromo Web Server 1.9.6, позволяющий удалённое выполнение кода через уязвимость обхода каталогов. Скрипт использует pwntools для установки обратного шелла. Только для образовательных целей и авторизованног...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 Vulnerabilità scoperta da me CVE-2019-15053 Avviso: advisory.txt Informazioni di base root@kitploit: Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and...

CVE-2014-91371-Wordpress-

CVE-2014-91371-Wordpress विवरण root@kitploit: wordpress with Plugin Slider REvolution 4.1.4...

CVE-2016-10708

SSH NEWKEYS Flood PoC CVE-2016-10708 Descrizione Questo script proof-of-concept sfrutta una vulnerabilità nelle versioni di OpenSSH precedenti alla 7.4 CVE-2016-10708 inviando pacchetti SSHMSGNEWKEYS inaspettati, che possono causare un DoS. Può operare in due modalità: scan : Si connette a uno o...

threatcl

threatcl Modellazione delle minacce con HCL Cosa è successo a hcltm? hcltm è stato rinominato in threatcl. Benvenuti! Panoramica !TIP Vuoi leggere la nuova documentazione? Vai su threatcl.dev Ci sono molti modi diversi in cui un modello di minaccia può essere documentato. Da un semplice file di...

pdfresurrect

pdfresurrect PDFResurrect è uno strumento progettato per analizzare documenti PDF. Il formato PDF consente di mantenere le modifiche precedenti del documento in una versione più recente dello stesso, creando così una cronologia continua delle modifiche del documento. Questo strumento tenta di...

CVE-2021-22205

CVE-2021-22205 Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE 13.8.8 Uso: root@kitploit: Verificar vulnerabilidade: python 22205exp.py -u url -v Executar comando: python 22205exp.py -u url -c command Verificação em lote: python 22205exp.py -f filename Referência: root@kitploit:...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

CVE-2019-16278

CVE-2019-16278 💻 -h3x0v3rl0rd- nostromo 1.9.6 - Execução Remota de Código...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Behobene Version Beschreibung Dies ist ein Exploit für die Schwachstelle des Apache HTTP Server 2.4.49, identifiziert als CVE-2021-41773. Die Originalversion des Exploits, veröffentlicht auf Exploit-DB, enthielt Syntax...

CVE-2021-42013

Scanner di Vulnerabilità Apache CVE-2021-41773 / CVE-2021-42013 Un scanner di vulnerabilità completo basato su Python per rilevare le vulnerabilità di path traversal e remote code execution CVE-2021-41773 e CVE-2021-42013 nelle versioni 2.4.49 e 2.4.50 di Apache HTTP Server. Panoramica...

wp_bookingpress_1.0.11

CVE-2022-0739 CVE-2022-0739 Wordpress BookingPress Plugin 1.0.11 Nicht authentifizierte SQL-Injection Erste Schritte Programm ausführen Mit python3 root@kitploit: python3 sqli.py -u 'http://wordpress.site' -p 'wpnoncevalue' Hilfe Für das Hilfemenü: root@kitploit: python3 sqli.py -h...

CVE-2023-1545

CVE-2023-1545 Einfache SQL-Injection Python-Skript für Teampass vor Versionen 3.0.0.23, unter Ausnutzung von CVE-2023-1545. Weitere Informationen auf diesem Blog. Verwendung Geben Sie einfach die URL ein, unter der Teampass läuft, als einziges Argument: root@kitploit: python3 CVE-2023-1545.py...

CVE-2021-36749

CVE-2021-36749 Apache Druid lecture de fichier arbitraire Version concernée : version = 0.21.1 Les deux méthodes suivantes peuvent être utilisées Méthode en ligne de commande root@kitploit: curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST ...

CVE-2023-40028

CVE-2023-40028 POC para CVE-2023-40028: Leitura Arbitrária de Arquivos no Ghost CMS Descrição Ghost é um sistema de gerenciamento de conteúdo de código aberto. As versões anteriores a 5.59.1 estão sujeitas a uma vulnerabilidade que permite que usuários autenticados enviem arquivos que são links...

PMAT-labs

PMAT-labs 🔬 Willkommen zu den Labs für Practical Malware Analysis & Triage. 🔴 WARNUNG 🔴 Lesen Sie dies sorgfältig, bevor Sie fortfahren. Dieses Repository enthält aktive Malware-Beispiele zur Verwendung im Kurs Practical Malware Analysis & Triage PMAT. Diese Beispiele wurden entweder geschrieben,...

CVE-2026-39983

Riferimenti https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1...

python-decompile3

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: decompyle3 Un decompilatore Python nativo cross-version e decompilatore di frammenti. Una rielaborazione di uncompyle6. Ho tenuto una presentazione su questo a BlackHat Asia 2024 . Introduzion...