Lucene search
+L

6888 matches found

Kitploit
Kitploit
added 2026/09/10 9:53 a.m.7 views

TERM1B1TB0T

TERMI₿IT₿OT 🤖 A basic tool that tracks Bitcoin transactions in real time above or below a particular price target using a websocket API on your terminal. STEP-BY-STEP: WINDOWS -Step 1: Install Python if not already installed Download from python.org During install → make sure to check ✅ “Add Pyth...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 9:37 a.m.9 views

grdpwasm

grdpwasm A web-based RDP client built with Go WebAssembly and grdp. Connect to a Windows Remote Desktop server directly from your browser — no plugins required. Architecture root@kitploit: Browser WASM ──WebSocket──► proxy Go ──TCP──► RDP Server Because browsers cannot open raw TCP sockets, a...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 7:03 a.m.8 views

thats_no_pipe

Thats no pipe Frida-based project to intercept Windows named pipe communication Objectives This project aims at intercepting IPC communications by hooking specific WinAPI functions and forwarding them to an HTTP proxy using a websocket. Architecture Read from and write to a named pipe can happen ...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 6:34 a.m.9 views

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 4:55 a.m.7 views

resterm

Resterm A terminal API client for REST, GraphQL, gRPC, WebSocket and SSE. Resterm stores API requests in plain .http and .rest files that you can diff, review and track in version control. Edit and send requests in the terminal, or run them from scripts and CI. Request files support workflows,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 4:45 a.m.4 views

CVE-2026-39987-POC

CVE-2026-39987 - Marimo 0.23.0 Pre-Auth RCE WebSocket Proof of Concept PoC exploit for a Critical Pre-Authentication Remote Code Execution RCE vulnerability in Marimo versions prior to 0.23.0. The vulnerability allows an unauthenticated attacker to connect to the WebSocket endpoint /terminal/ws a...

9.8CVSS7.9AI score0.98945EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/10 3:57 a.m.7 views

bmcweb

OpenBMC webserver This component attempts to be a "do everything" embedded webserver for OpenBMC. Features The webserver implements a few distinct interfaces: DBus event websocket. Allows registering for changes to specific dbus paths, properties, and will send an event from the websocket if thos...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 3:50 a.m.5 views

CVE-2026-39987

CVE-2026-39987 - marimo Terminal WebSocket Authentication Bypass poc Overview This repository contains CVE-2026-39987 affecting marimo versions before 0.23.0. The vulnerability exists in the terminal WebSocket endpoint, where insufficient authentication enforcement may allow an unauthenticated...

9.8CVSS8AI score0.98945EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/10 3:46 a.m.7 views

openclaw-security-monitor

OpenClaw Security Monitor Proactive security monitoring, threat scanning, and real-time visibility for OpenClaw deployments. Detects threats from the ClawHavoc campaign 824+ malicious skills, AMOS stealer , Vidar infostealer , GhostSocks proxy malware, ClawJacked WebSocket brute-force, workspace...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 3:16 a.m.6 views

mitm-proxy

Go MITM Proxy A lightweight, developer-friendly Man‑in‑the‑Middle MITM HTTP/HTTPS proxy written in Go. It supports HTTP/1.1 and HTTP/2, CONNECT tunneling, WebSocket tunneling ws/wss, on‑disk response caching with flexible filters, and live config reloading. Badges Admin Dashboard Preview Overview...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 2:54 a.m.5 views

chisel-ng

root@kitploit: | | | | / | ' | / |/ \ || ' \ / | | | | | | \ \ / || | | | | | || |||/|| || ||, | |/ chisel-ng A Rust implementation of chisel for penetration testing and red team operations. Establishes reverse tunnels over SSH-over-WebSocket-over-TLS, allowing operators to pivot through...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 2:25 a.m.9 views

gohide

gohide Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption. Obfuscation Modes Session Cookie HTTP GET http-client Set-Cookie Session Cookie HTTP/2 200 OK http-server WebSocket Handshake "Sec-WebSocket-Key" websocket-client WebSocket Handshake "Sec-WebSocket-Accept"...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:45 a.m.12 views

STEWS

STEWS: Security Testing and Enumeration of WebSockets STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover : find WebSockets endpoints on the web by testing a list of domains...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 1:38 a.m.8 views

agentbox

🛡️ AgentBox The open-source sandboxed runtime for AI agents Run AI agents with confidence. Every agent gets its own permission scope, credential vault, audit trail, and kill switch. Why AgentBox exists On January 27, 2026, CVE-2026-25253 became the first CVE ever assigned to an agentic AI system. ...

8.8CVSS7.7AI score0.23992EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/10 1:32 a.m.6 views

CVE-2026-39987_exploit

🔥 CVE-2026-39987 | Marimo Pre-Auth RCE Exploit Exploitation Framework | Full Remote Code Execution RCE | WebSocket Auth Bypass 🧠 To know the commands more Open the file website.html 🎯 Overview This exploit targets Marimo applications running WebSocket on port 2718 default. The vulnerability allow...

9.8CVSS7.9AI score0.98945EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/10 1:30 a.m.572 views

gotestwaf

GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:16 a.m.6 views

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

9.9CVSS8.2AI score0.9029EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/10 1:05 a.m.8 views

CVE-2026-39987

CVE-2026-39987 — Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...

9.8CVSS7.9AI score0.98945EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/10 1:02 a.m.6 views

marimo_CVE-2026-39987_RCE_PoC

CVE-2026-39987 - Marimo This script is ONLY for educational purposes and authorized testing. Unauthorized use of this tool against systems without explicit permission is ILLEGAL. The author is not responsible for the misuse of this information. 📋 Description Marimo versions prior to 0.23.0 presen...

9.8CVSS8AI score0.98945EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/10 12:53 a.m.6 views

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server WebSocket Arbitrary File Read Batch Detection Disclaimer: This tool is intended for authorized security testing and educational research only. Users must comply with local laws and regulations; unauthorized scanning or attacking others' systems is illegal. The...

8.2CVSS5.8AI score0.03396EPSS
SaveExploits4
Rows per page
Query Builder