Lucene search
+L

264917 matches found

Kitploit
Kitploit
•added 2026/09/27 10:39 a.m.•9 views

spring-web-without-remoting

spring-web-without-remoting Spring Web 5.x with org.springframework.remoting package removed, to fix CVE-2016-1000027. For more info, see spring-projects/spring-framework 24434...

9.8CVSS7.8AI score0.33179EPSS
SaveExploits4References2
Kitploit
Kitploit
•added 2026/09/27 10:26 a.m.•9 views

Vulnerability-assessment

Installation & Usage Bash Copy to Nmap scripts directory sudo cp react2shell-detect.nse /usr/share/nmap/scripts/ Update script database sudo nmap --script-updatedb Single target nmap -p80,443 --script react2shell-detect.nse example.com Important: Use this script only against systems you have...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 10:12 a.m.•14 views

paskto

Paskto - Escáner Web Pasivo Paskto escaneará pasivamente la web utilizando el índice de Common Crawl, ya sea descargando los índices a petición o analizando datos de su sistema local. Las URL se procesan luego a través de Nikto y listas de URL conocidas para identificar contenido interesante...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/27 10:09 a.m.•10 views

htcap

HTCAP htcap es un escáner de aplicaciones web capaz de rastrear aplicaciones de una sola página SPA de forma recursiva interceptando llamadas ajax y cambios en el DOM. CARACTERÍSTICAS PRINCIPALES Motor de rastreo DOM recursivo Descubre solicitudes ajax/fetch/jsonp/websocket Soporta cookies, proxy...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 10:06 a.m.•11 views

CVE-2022-22947

CVE-2022-22947 Usage: root@kitploit: python3 CVE-2022-22947.py url...

10CVSS8.2AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
•added 2026/09/27 10:06 a.m.•10 views

vulmap

🌟 Vulmap - Herramientas de escaneo y verificación de vulnerabilidades web Haga clic aquí para la versión en inglés Vulmap es una herramienta de escaneo y verificación de vulnerabilidades web que puede escanear aplicaciones web y cuenta con funcionalidad de explotación. Actualmente, las aplicacion...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/27 9:53 a.m.•14 views

CVE-2021-40905

CVE-2021-40905 - RCE via a crafted .mkp file Application: CheckMK Management Web Console Software Revision: Less than or equal to 2.0.0p17 Attack type: RCE Solution: TBD or the MKPs shared on https://exchange.checkmk.com/ are manually reviewed by CheckMk and they look for malicious code or...

8.8CVSS8.5AI score0.03027EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/27 9:40 a.m.•13 views

c2-cloud

Acerca del Proyecto C2 Cloud es un robusto framework de C2 basado en web, diseñado para simplificar la vida de los testers de penetración. Permite un fácil acceso a backdoors comprometidos, como acceder a una instancia de EC2 en la nube de AWS. Puede gestionar varias sesiones simultáneas de...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 8:53 a.m.•9 views

SSE4-CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 Getting Started 1. Run docker compose up --build to build and start the vulnerable application. 2. Run curl -H "Accept: text/html;"...

9.8CVSS7.7AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
•added 2026/09/27 8:29 a.m.•20 views

mwebfp

LNHG - Identificador Masivo de Web mwebfp Introducción El "LowNoiseHG LNHG Massive Web Fingerprinter " en adelante "mwebfp " fue concebido en julio de 2013 tras reconocer la utilidad de las capturas de pantalla de servidores web para los pentesters, durante un compromiso con grandes rangos de...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 8:12 a.m.•8 views

Clickjacking-Tester

Probador de Clickjacking Un script de Python diseñado para comprobar si el sitio web es vulnerable a clickjacking y crea un poc. Captura de pantalla Uso root@kitploit: python3 clickjackingtester.py Ejemplo Entrada root@kitploit: python clickjackingtester.py sites.txt sites.txt root@kitploit:...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 8:05 a.m.•12 views

CVE-2021-40904

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded application Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Attack type: RCE Solution: Upgrade to version 1.6 or higher. Summary: The web management console of CheckMk Raw Edition versions 1.5.0 to 1.5.0p25...

8.8CVSS8.5AI score0.03692EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/27 7:45 a.m.•18 views

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/27 7:43 a.m.•9 views

CVE-2023-4220-exploit

CVE-2023-4220-exploit Carga de archivos sin restricciones en la funcionalidad de carga de archivos grandes en /main/inc/lib/javascript/bigupload/inc/bigUpload.php en Chamilo LMS en versiones = 1.11.24 permite a atacantes no autenticados realizar ataques de Cross Site Scripting almacenados y obten...

8.1CVSS7.5AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
•added 2026/09/27 7:39 a.m.•14 views

OSCP Notes and Custom Dashboard

OSCP Field Notebook Tags: ligolo hashcat Port-indexed pentest methodology notebook: decision trees, copy-paste command patterns, and lessons from authorized practice boxes HTB / PG / personal labs. Merged from the older finalnotes-vault into this single tree. A workflow you can run under time...

6.2AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/27 7:37 a.m.•17 views

CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC This document describes how the CVE-2024-29671 vulnerability was exploited in the NEXTU FLATA AX1500 Router firmware. Execution Environment This router is based on the MIPS architecture using the Realtek chipset with Little-Endian. The target router firmwa...

9.8CVSS6.5AI score0.24521EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/27 6:55 a.m.•11 views

CVE-2021-41773-PoC

CVE-2021-41773 Proof of Concept Quick and dirty proof of concept for checking if hosts vulnerable to CVE-2021-41773 root@kitploit: python3 full.py hosts.txt Where hosts.txt contains your targets: root@kitploit: domain.com blah.com 192.168.1.1 It'll print out if the host is vulnerable or not...

9.8CVSS8.3AI score0.99992EPSS
SaveExploits167
Kitploit
Kitploit
•added 2026/09/27 6:04 a.m.•11 views

Strutshock

Strutshock Usage strutshock http://example.com/index.action...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 5:38 a.m.•9 views

cve-2026-16219-croogo-lab

CVE-2026-16219: Croogo FileManager defensive lab This repository documents and safely demonstrates the path-authorization flaw tracked as CVE-2026-16219 in Croogo CMS. It is intended for defenders, maintainers, students, and researchers testing systems they own or are explicitly authorized to...

6.5CVSS6.8AI score0.00425EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/27 4:57 a.m.•19 views

CVE-2022-44877-CWP7

CVE-2022-44877-CWP7 Control Web Panel 7 CWP7 Ejecución remota de código RCE CVE-2022-44877 Sin autenticación El repositorio se actualizará pronto con el POC...

9.8CVSS8.7AI score0.99995EPSS
SaveExploits12
Rows per page
Query Builder