Lucene search
+L

3528 matches found

Kitploit
Kitploit
added 2026/09/12 5:54 a.m.6 views

ASVS

OWASP Application Security Verification Standard This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. 🎉🎉🎉 Welcome to Version 5.0 of the ASVS! 🎉🎉🎉 Released LIVE on stage at Global AppSec EU Barcelona 2025! Introduction The primary aim of the OWASP...

5.9AI score
SaveExploits0References44
Kitploit
Kitploit
added 2026/09/12 5:26 a.m.11 views

CVE-2019-6340

Drupal Drupal 8.6.x RCE Exploit exploit CVE: CVE-2019-6340 CMS: Drupal CMS Version: Drupal 8.6.x tested condition: -Drupal 8.6.x, 8.6.10 OR Drupal 8.5.11 -RESTful Web Services module is enabled...

8.1CVSS7.9AI score0.92017EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/12 5:11 a.m.5 views

CVE-2020-3452

CVE-2020-3452 Little, stupid python validator? for CVE-2020-3452 on CISCO devices. Python first timer, pls do not kill me. ;- USAGE root@kitploit: python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DISCLAIMER: Please use this script only on subjects you own or you have the...

7.5CVSS7.8AI score0.99992EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/12 3:50 a.m.5 views

CISCO-CVE-2020-3452-Scanner-Exploiter

CISCO CVE-2020-3452 Scanner & Exploiter It will scan the target servers from shodan and then find the vulnerable servers to CVE-2020-3452 Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading. About A vulnerability in the web services interface of Cisco Adaptive Security...

7.5CVSS7.8AI score0.99992EPSS
SaveExploits25References1
Kitploit
Kitploit
added 2026/09/12 12:48 a.m.12 views

CVE-2020-3452

CVE-2020-3452 Cisco Adaptive Security Appliance ASA & Cisco Firepower Threat Defense FTD Web Service Read-Only Directory Traversal A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an...

7.5CVSS7.7AI score0.99992EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/12 12:35 a.m.10 views

cleanldap

CleanLdap BOF para realizar consultas LDAP sigilosas sobre AD WS Argumentos Vamos al grano, aquí están los argumentos y lo que significan: root@kitploit: Z: DC Hostname "dc01.example.com" Z: LDAP query "objectClass=" Z: Comma separated list of LDAP attributes "samaccountname,distinguishedName,cn"...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:15 a.m.10 views

Drupal-SA-CORE-2019-003

Drupal-SA-CORE-2019-003 CVE-2019-6340 Drupal SA-CORE-2019-003 CVE-2019-6340 CVE-2019-6340.md https://mp.weixin.qq.com/s/EQD4-K6HgBY9wdzeXeyzkg https://paper.seebug.org/821/ https://www.youtube.com/watch?v=QtLDDN0Duko nombre del enlace https://pbs.twimg.com/media/D0C-KiXX4AM2vR3.jpg:large...

8.1CVSS7.9AI score0.92017EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/11 10:08 p.m.3 views

Cisco-ASA-FTD-Web-Services-Traversal

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability CVE-2020-3452 Usage: CVE-2020-3452.py https://target Vulnerability description: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Softwar...

7.5CVSS7.8AI score0.99992EPSS
SaveExploits25
Kitploit
Kitploit
added 2026/09/11 3:37 p.m.11 views

NtlmRelayToEWS

ntlmRelayToEWS Autor: Arno0x0x - @Arno0x0x ntlmRelayToEWS es una herramienta para realizar ataques de retransmisión NTLM en Exchange Web Services EWS. Inicia un SMBListener en el puerto 445 y un HTTPListener en el puerto 80, esperando la conexión entrante de la víctima. Una vez que la víctima se...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 1:40 p.m.7 views

CVE-2020-6308-PoC

CVE-2020-6308 SAP POC SAP BusinessObjects Business Intelligence Platform Web Services versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. Follow me on...

5.3CVSS6.7AI score0.61736EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 10:37 a.m.7 views

WS-Attacker

WS-Attacker WS-Attacker es un marco modular para pruebas de penetración de servicios web. Es desarrollado por la Cátedra de Seguridad de Redes y Datos, Universidad Ruhr Bochum https://nds.rub.de/ y Hackmanit GmbH https://hackmanit.de/. La idea básica detrás de WS-Attacker es proporcionar una...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 9:00 a.m.6 views

cve-2019-6340-bits

cve-2019-6340-bits Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE modsec rule pcap example nginx config example logs example playbook...

8.1CVSS7.9AI score0.92017EPSS
SaveExploits23References5
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.75 views

Edito CMS - Sensitive Data Leak

Web services managed by Edito CMS Content Management System in versions from 3.5 through 3.25 leak sensitive data as they allow downloading configuration files by an unauthorized user. id: CVE-2024-4836 info: name: Edito CMS - Sensitive Data Leak author: s4e-io severity: high description: | Web...

7.5CVSS5.7AI score0.02651EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.153 views

SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery

SAP BusinessObjects Business Intelligence Platform Web Services 410, 420, and 430 is susceptible to blind server-side request forgery. An attacker can inject arbitrary values as CMS parameters to perform lookups on the internal network, which is otherwise not accessible externally. On successful...

5.3CVSS6.5AI score0.61736EPSS
SaveExploits3References5
Kitploit
Kitploit
added 2026/09/11 3:55 a.m.72 views

envizon

envizon - by evait security EOL https://github.com/evait-security/envizon/issues/130 We evait security moved to https://gitlab.com/invuls/pentest-projects/pcf for internal project documentation. network visualization & pentest reporting Version 5.0 This tool is designed, developed and supported b...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 3:47 a.m.6 views

ZackAttack

===== ZackAttack! - Realying NTLM Like Nobody's Business ======= WTF Is This? tl;dr version - ZackAttack! is a new Tool Set to do NTLM Authentication relaying unlike any other tool currently out there. = So how is ZackAttack! different / better? Compared to other tools... Supports NTLMv2 : Brings...

5.9AI score
SaveExploits0
Fedora
Fedora
added 2026/09/11 1:02 a.m.5 views

[SECURITY] Fedora 44 Update: rest-0.10.2-9.fc44

This library was designed to make it easier to access web services that claim to be "RESTful". A RESTful service should have urls that represent remote objects, which methods can then be called on. The majority of services don't actually adhere to this strict definition. Instead, their RESTful en...

6.8CVSS0.00254EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:49 p.m.4 views

checker-cve2020-3452

Checker CVE-2020-3452 This Python script checks whether the target server is vulnerable to CVE-2020-3452. Cisco Adaptive Security Appliance and FTD Unauthorized Remote File Reading A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower...

7.5CVSS7.8AI score0.99992EPSS
SaveExploits25References1
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.71 views

Cisco ASA/FTD Software - Cross-Site Scripting

Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software are vulnerable to cross-site scripting and could allow an unauthenticated, remote attacker to conduct attacks against a user of the web services interface of an affected device. The vulnerabilities are...

6.1CVSS7.4AI score0.85575EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 1:52 p.m.7 views

Drupal_REST-RCE_Unauthenticated

CVE-2019-6340 — Drupal Servicios Web RESTful RCE Implementación en Python del exploit de ejecución remota de código para CVE-2019-6340, basado en el análisis del módulo de Metasploit y del trabajo previo de leonjza. Diferencia clave con EDB-46459: usa POST en lugar de GET, evitando la caché de...

8.1CVSS7.9AI score0.92017EPSS
SaveExploits23References1
Rows per page
Query Builder