207 matches found
CVE-2018-1235
CVE-2018-1235 Un script de Python que prueba una instancia explotable de CVE-2018-1235. NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235 Uso: ./CVE-2018-1235.py -t Host Objetivo -r Tu IP Este código puede ser modificado para explotar activamente la vulnerabilidad. El soporte para alcances de...
log4j-rce-CVE-2021-44228
Overview This is a project to actually test the remote code execution vulnerability CVE-2021-44228 in log4j2. Start the Containers root@kitploit: docker-compose up It takes a little time for the log4j container to become usable after starting. Check the progress with the following command:...
DVIA-v2
DVIA-v2 Powered by 8ksec.io DVIA-v2 written in Swift along with additional vulnerabilities Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration...
MSF-Testing-Scripts
Metasploit Module Testing Scripts This repo contains code required to test some of the Metasploit modules I've helped write. brocadeemulator.py Metasploit Module: auxiliary/scanner/telnet/brocadeenablelogin juniperssg5emulator.py Metasploit Module: auxiliary/scanner/ssh/juniperbackdoor.rb Also se...
CVE-2026-70463
CVE-2026-70463 Testing CVE-2026-70463 by Fyyre For research and educational purposes only!...
heartthreader
Heartthreader Because manual vulnerability testing is tiresome. Just add some magic multithreading sauce!...
redash-vulnerable
redash-vulnerable 🐛 A Dockerized Redash instance that is vulnerable to CVE-2021-21239 as written about by Calif. Usage 💻 Starting the server preserving data root@kitploit: script/server This will start the Redash server using Docker Compose in detached mode, preserving any existing data. The serv...
llm-agent-testbed
🛡️ LLM Agent Security Testbed Empirical Vulnerability & Defense Harness for Tool-Calling LLM Agents A disciplined security testbed testing whether tool-equipped LLM agents can be manipulated into unauthorized data exfiltration via prompt injection, role-claim social engineering, and confused-deput...
CVE_Demo
CVEDemo Hi, This is Muhammad Navaid Zafar Ansari, I have created this repository to maintain my CVE demos and give the fix recommendation to those people who want to use these applications where I found the vulnerabilities. Disclaimer: All the demo's are created only for educational purpose, Do...
cam-hunter
📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...
Exploit for Code Injection in Vmware Spring_Framework
Spring4Shell Local Exploitation Conditions Verification, Remed...
websec-skills
websec-skills Web Security Vulnerability Testing Skills Set,...
Exploit for Improper Input Validation in Paloaltonetworks Pan-Os
CVE-2024-3400 This program was improved upon to include a safe...
Hunting-Bugs
2026 Practical Bug Bounty Guide Built on real-world experie...
Luban-2040-v2
🛡️ Luban 2040 v2 Advanced Reconnaissance & Vulnerability...
Exploit for CVE-2020-1938
Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerabilit...
Exploit for CVE-2026-31431
This script is entirely genera...
API Security Testing and Vulnerability Assessment
APIs now carry more sensitive data than traditional web interfaces. Payment details, health records, authentication tokens, and customer databases all flow through API endpoints that attackers can probe without ever touching a browser. A single misconfigured endpoint can expose millions of record...
📄 WordPress Kali Forms 2.4.9 Remote Code Execution
WordPress Kali Forms plugin version 2.4.9 suffers from a remote code execution vulnerability. ================================================================================================================================== | Title : WordPress Kali Forms 2.4.9 Remote Code Execution Assessment | ...