98 matches found
bruteforce-wallet
bruteforce-wallet The purpose of this program is to try to find the password of an encrypted Peercoin or Bitcoin, Litecoin, etc... wallet file i.e. wallet.dat. It can be used in two ways: try all the possible passwords given a charset try all the passwords in a file There is a command line option...
joro
Joro A web exploitation framework for offensive security professionals. Intercepting proxy, blind vulnerability detection, web shell generation, C2 integration, and collaboration tools in a single binary with an embedded web UI. Warning: This tool is intended for authorized penetration testing an...
challenges
Hex Advent CTF WELCOME TO HEX ADVENT 2025, ‘tis the season to Unwrap Your Potential! 🎁 HEX ADVENT 2025 is a Christmas-themed CTF Advent Calendar, designed for women, by women. 12 Days, 12 Challenges: A structured schedule to build mastery across different CTF categories. Focus Areas root@kitploit...
XXRF-Shots
What is SSRF vulnerability? Server Side Request Forgery SSRF is a type of vulnerability that enables attackers to send specially crafted requests through a vulnerable web application. With this technique, attackers can gain unauthorized access to internal resources behind a firewall, which would...
XAttacker
XAttacker V2.5 Tool FREE XATTACKER A Massive Exploiting Tool capable of scanning and auto-exploiting vulnerabilities in web applications, By providing a target website to the tool, it auto detects its’ architecture if using a Content Management Service CMS and tries to find vulnerabilities based ...
put2win
put2win Script to automate PUT HTTP method exploitation to get shell. Installation root@kitploit: git clone https://github.com/sysdevploit/put2win cd put2win chmod +x put2win.sh Usage root@kitploit: Script to automate PUT HTTP method exploitation to get shell. Options: -t TARGET Target URL/IP e.g...
ctf-skills
ctf-skills Agent Skills for solving CTF challenges — web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more. Works with any tool that supports the Agent Skills spec, including Claude Code. インストールbash npx skills add ljagiello/ctf-skills root@kitploit: Friday Studio...
vulmap
🌟 Vulmap - Web脆弱性スキャンおよび検証ツール 英語版はこちら VulmapはWeb脆弱性スキャンおよび検証ツールであり、webappsの脆弱性スキャンとエクスプロイト機能を備えています。現在サポートしているwebappsは activemq, flink, shiro, solr, struts2, tomcat, unomi, drupal, elasticsearch, fastjson, jenkins, nexus, weblogic, jboss, spring, thinkphp です。...
POC-CVE-2016-10033
POC-CVE-2016-10033 First let’s get the Vulnerable application up and running Step 1: Run the following command to retrieve the vulnerable Docker Image from the Docker repository. Command: docker pull vulnerables/cve-2016-10033 Step 2: Running the Docker image in Docker Desktop, exposing port 8080...
CTF_CVE_DSP_1
🚩 Vuln Gallery CTF 欢迎来到 Vuln Gallery ，一个基于 Linux 的中级 CTF（夺旗赛）挑战。 本挑战将引导你从对现代 Web 应用的初始利用，一直到在配置不当的 Linux 系统上进行权限提升。你的任务是利用漏洞，在系统中横向移动，并获取完全控制权。 🚀 如何游玩 本项目使用 Docker 和 Docker Compose 进行快速且一致的配置。你只需安装它们即可。 1. 克隆此仓库 （或下载 player-deploy 文件夹的 zip 文件）。 2. 打开终端 并导航到 player-deploy 目录： root@kitploit: cd...
vulnhub-labs
VulnHub labs Notas reorganizadas a partir de un export sucio...
CVE-2026-53649 Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE
Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authentication and applies a wildcard CORS policy. Because plugin uploads use the CORS-safelisted multipart/form-data content type, cross-origin JavaScrip...
PT-2026-63163
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Bills of Material versions 12.2.13 through 12.2.15 Description An issue exists in the Internal Operations component of the Oracle Bills of Material product. A low privileged attacker with network access via HTTP...
PT-2026-63087
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM eProcurement version 9.2 Description An issue exists in the Manage Requisition Status component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful...
Cyber-Arena
CyberArena - Cybersecurity Challenge Platform CyberArena is a...
cyber-pentools
🔥 Cyber Pentools — All-in-One Penetration Testing Toolkit 2...
network-vulnerability-assessment-lab
Network Attack and Defence Technology Lab Project Overview...
Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple
Simple-CTF-Writeup Professional TryHackMe Simple CTF walkthrou...