CVE-2026-97865 Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version...

CVE-2026-97865

A security flaw in Open-Web-Analytics (up to version 1.8.1) allows for remote deserialization . The vulnerability exists within the Event::loadFromArray function in the queue.php file of the Remote Event Queue Endpoint component. An attacker can initiate this attack remotely by performing manipul...

EUVD-2026-87090

A security flaw has been discovered in Open-Web-Analytics up to 1.8.1. Affected is the function Event::loadFromArray of the file queue.php of the component Remote Event Queue Endpoint. Performing a manipulation results in deserialization. The attack can be initiated remotely. Upgrading to version...

pidrila

PIDRILA 当前版本：v0.1.0 2020.11.08 概述 PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer 是由 BrightSearch 团队为所有道德网络追踪者开发的一款极速异步 Web 路径扫描器原型。 安装与使用 root@kitploit: git clone https://github.com/enemy-submarine/pidrila.git cd pidrila python3 pidrila.py -u 选项 root@kitploit...

CVE-2026-14281

CVE-2026-14281 — WAWP Automation Web Platform Escalada de Privilegios No Autenticada PoC en Python 3 para CVE-2026-14281 en el plugin de WordPress Automation Web Platform automation-web-platform — WAWP / Notifications & OTP for WooCommerce. PoCbit Listado en PoCbit — catálogo comunitario:...

RCE

CVE-2022-31814 WebApp bug root@kitploit: import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser =...

CVE-2025-51457

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at the /index.xgi endpoint. An attacker with authenticated access can exploit some parameters to execute arbitrary system commands...

CVE-2023-20198-Scanner

Cisco IOS XE CVE-2023-20198 Scanner A Python wrapper script for scanning Cisco IOS XE devices for the Web UI Authentication Vulnerability CVE-2023-20198 using a specific curl payload. Features Scans multiple targets from a file or command line Uses exact curl command as specified Automatically...

jok3r

.. raw:: html Jok3r v3 beta...

CVE-2025-0282-Ivanti-exploit

CVE-2025-0282-Ivanti-exploit CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution RCE through a buffer overflow exploit. This vulnerability enables attackers to upload malicious files e.g., web shells and execute commands on the target system...

ffuf

ffuf - 更快地模糊测试，你这个傻瓜 一个用 Go 编写的快速 Web 模糊测试工具。 安装 示例用法 内容发现 虚拟主机发现 参数模糊测试 POST 数据模糊测试 使用外部变异器 配置文件 帮助 交互模式 安装 从发布页面下载预编译二进制文件，解压并运行！ 或 如果你在 Windows 上并使用 Scoop，可以通过以下命令安装 ffuf：scoop install ffuf 或 如果你在 Windows 上并使用 Winget，可以通过以下命令安装 ffuf：winget install ffuf.ffuf 或 如果你在 macOS 上并使用 homebrew，可以通过以下命令安...

hakrawler

Hakrawler 用于收集URL和JavaScript文件位置的高速Go语言网络爬虫。这基本上是优秀的Gocolly库的一个简单实现。 使用示例 单个URL： root@kitploit: echo https://google.com | hakrawler 多个URL： root@kitploit: cat urls.txt | hakrawler 每行标准输入的超时时间设为5秒： root@kitploit: cat urls.txt | hakrawler -timeout 5 通过代理发送所有请求： root@kitploit: cat urls.txt | hakrawle...

Check Risk WAF

Check Risk WAF Российское комплексное облачное WAF-решение для защиты веб-приложений и инфраструктуры Russian integrated cloud WAF solution for web application and infrastructure protection Сайт · Документация · Русский · English Русская версия Check Risk WAF – это Российское комплексное облачное...

Scanner-and-Patcher

Scanner and Patcher Overview: The Scanner and Patcher project is built as part of the AlphaSecure framework, which has been presented and published at ACM IC3 2024 under the title AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation Usin...

tachyon

Tachyon Tachyon 是一个快速的 Web 应用程序安全侦察工具。 它专门用于爬取 Web 应用程序，寻找遗留或未索引的文件，并报告泄漏内部数据的页面或脚本。 用户要求 Linux Python 3.6+ 用户安装 安装： root@kitploit: $ mkdir tachyon $ python3 -m venv tachyon/ $ cd tachyon $ source bin/activate $ pip install tachyon3 $ tachyon -h 升级： root@kitploit: $ cd tachyon $ source bin/activa...

kiterunner

Kiterunner Introduction For the longest of times, content discovery has been focused on finding files and folders. While this approach is effective for legacy web servers that host static files or respond with 3xx’s upon a partial path, it is no longer effective for modern web applications,...

kiterunner

Kiterunner 介绍 长期以来，内容发现一直专注于查找文件和文件夹。虽然这种方法对于托管静态文件或在部分路径下返回 3xx 响应的传统 Web 服务器有效，但对于现代 Web 应用程序，尤其是 API，它已不再高效。 随着时间的推移，我们看到了大量时间投入到提高内容发现工具的速度上，以便可以使用更大的字典，但内容发现的艺术本身却没有得到创新。 Kiterunner 不仅能够以极快的速度执行传统内容发现，还能对现代应用程序中的路由/端点进行暴力破解。 现代应用框架（如 Flask、Rails、Express、Django 等）遵循显式定义路由的范式，这些路由期望特定的 HTTP...

CVE-2021-3129

Remote Code Execution: Laravel CVE-2021-3129 📜 Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...

Scrapegraph-ai

🚀 ¿Buscas una forma aún más rápida y sencilla de hacer scraping a escala solo 5 líneas de código? ¡Echa un vistazo a nuestra versión mejorada en ScrapeGraphAI.com! 🚀 🕷️ ScrapeGraphAI: Solo Scrapeas Una Vez English | 中文 | 日本語 | 한국어 | Русский | Türkçe | Deutsch | Español | français | Português |...

scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage root@kitploit: Usage: scout command Available Commands: help Hel...