96 matches found
put2win
put2win Script to automate PUT HTTP method exploitation to get shell. Installation root@kitploit: git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh Usage root@kitploit: Script to automate PUT HTTP method exploitation to get shell. Options: -t TARGET Target URL/IP e.g...
ridenum
RIDENUM - A simple open source method for performing null session brute forces Copyright 2018 TrustedSec Written by: David Kennedy ReL1K Twitter: @HackingDave and @TrustedSec Website: https://www.trustedsec.com root@kitploit: . . . . . | \ | | | \ | || \ | | | | | | | / | | | | | | | .--. | | | |...
XAttacker
XAttacker V2.5 Tool FREE XATTACKER A Massive Exploiting Tool capable of scanning and auto-exploiting vulnerabilities in web applications, By providing a target website to the tool, it auto detects its’ architecture if using a Content Management Service CMS and tries to find vulnerabilities based ...
vulmap
🌟 Vulmap - Herramientas de escaneo y verificación de vulnerabilidades web Haga clic aquí para la versión en inglés Vulmap es una herramienta de escaneo y verificación de vulnerabilidades web que puede escanear aplicaciones web y cuenta con funcionalidad de explotación. Actualmente, las aplicacion...
XXRF-Shots
What is SSRF vulnerability? Server Side Request Forgery SSRF is a type of vulnerability that enables attackers to send specially crafted requests through a vulnerable web application. With this technique, attackers can gain unauthorized access to internal resources behind a firewall, which would...
joro
Joro Un framework de explotación web para profesionales de seguridad ofensiva. Proxy de intercepción, detección de vulnerabilidades ciegas, generación de webshells, integración con C2 y herramientas de colaboración en un solo binario con una interfaz web integrada. Advertencia: Esta herramienta...
POC-CVE-2016-10033
POC-CVE-2016-10033 Prima di tutto, avviamo l'applicazione vulnerabile Passo 1: Esegui il seguente comando per recuperare l'immagine Docker vulnerabile dal repository Docker. Comando: docker pull vulnerables/cve-2016-10033 Passo 2: Esegui l'immagine Docker in Docker Desktop, esponendo la porta 808...
ctf-skills
ctf-skills Agent Skills per risolvere sfide CTF — exploit web, pwn binario, crittografia, reverse engineering, analisi forense, OSINT e altro ancora. Funziona con qualsiasi strumento che supporti la specifica Agent Skills, incluso Claude Code. Installazionebash npx skills add ljagiello/ctf-skills...
challenges
Hex Advent CTF BENVENUTO A HEX ADVENT 2025, è la stagione per scartare il tuo potenziale! 🎁 HEX ADVENT 2025 è un calendario dell'Avvento CTF a tema natalizio, progettato da donne per donne. 12 Giorni, 12 Sfide: Un programma strutturato per sviluppare competenze in diverse categorie CTF. Focus Are...
CTF_CVE_DSP_1
🚩 Vuln Gallery CTF Benvenuto a Vuln Gallery , una CTF Capture The Flag di livello intermedio basata su Linux. Questa sfida ti guiderà dall'exploit iniziale di un'applicazione web moderna fino alla privilege escalation su un sistema Linux mal configurato. La tua missione è sfruttare le...
PT-2026-63087
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM eProcurement version 9.2 Description An issue exists in the Manage Requisition Status component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...
PT-2026-63163
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Bills of Material versions 12.2.13 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Bills of Material product. A low privileged attacker with network access via HTTP...
Cyber-Arena
CyberArena - Cybersecurity Challenge Platform CyberArena is a...
cyber-pentools
🔥 Cyber Pentools — All-in-One Penetration Testing Toolkit 2...
network-vulnerability-assessment-lab
Network Attack and Defence Technology Lab Project Overview...
Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple
Simple-CTF-Writeup Professional TryHackMe Simple CTF walkthrou...
LazyAdmin-Writeup
LazyAdmin-Writeup Beginner-friendly TryHackMe LazyAdmin writeu...
MonitorsFour-Write-UP
MonitorsFour-Write-UP Hack The Box MonitorsFour is an Easy-rat...