xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

XML-RPC-Pingback-Vulnerability

XML-RPC-Pingback-Vulnerabilità POC Questo è un POC scritto da me sulla vulnerabilità xmlrpc-pingback trovata in wordpress. CVE-2025-54352. Questa vulnerabilità interessa wordpress dalla versione 3.5 fino alla 6.8.2...

EUVD-2026-65227

NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs. Attackers can craft XML payloads with nested entity declarations that expand from hundreds of bytes to megabytes in memory, causing denial of service...

CVE-2026-78681

NLTK versions before 3.10.3 are vulnerable to a denial of service via XML entity expansion. The library uses xml.etree.ElementTree to parse XML in multiple modules, and this parser honors entity declarations in document DTDs. An attacker can supply a crafted XML payload containing nested entity d...

CVE-2020-9496

CVE-2020-9496 Le richieste XML-RPC sono vulnerabili a deserializzazione non sicura e problemi di Cross-Site Scripting in Apache OFBiz 17.12.03 Requisiti di installazione root@kitploit: $ pip install -r requirements.txt $ wget...

purify

Purify All-in-one tool for managing vulnerability reports 🎮 Demo 📃 Docs 📹 Quick Vimeo...

XXEinjector

XXEinjector XXEinjector automatizza il recupero di file utilizzando metodi diretti e out of band. La scansione delle directory funziona solo nelle applicazioni Java. Il metodo di brute-forcing deve essere utilizzato per altre applicazioni. Opzioni: root@kitploit: --host Obbligatorio - il nostro...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network...

WordPress-6.9.1-Blind-SSRF

WordPress-6.9.1-Blind-SSRF L'exploit non ha un CVE assegnato. Versioni Affette 6.8 - 6.8.3 6.9 - 6.9.1 WordPress = 6.9.1 - Blind SSRF non autenticato tramite XML-RPC Pingback Discovery proof of concept PoC Utilizzo 1. Installa requests se non ancora installato pip install requests 2. Modifica le...

SSP-Assignment-3-RCEYouLater

CVE-2023-46604: إثبات المفهوم لاستغلال Apache ActiveMQ عن بُعد RCE الواجب: الواجب الثالث لمادة SSP الفريق: RCE You Later الأعضاء: Banica Horia Alexandru, Comarlau Vlad-Constantin رابط فيديو لاستخدام المستودع لعمل إثبات المفهوم: https://www.youtube.com/watch?v=vum4qTF4ygU 🚨 نظرة عامة يحتوي هذا...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

CVE-2020-9496

CVE-2020-9496 ApacheOfBiz 17.12.01 - Esecuzione remota di codice non autorizzata Le richieste XML-RPC sono vulnerabili a deserializzazione non sicura. Passaggi Passaggio 1: pip3 install -r requeriments.txt Passaggio 2: nc -nlvp computer attaccante Passaggio 3: python3 shell.py -i -p -li -lp...

ActiveMQ-EXPtools

ActiveMQ-EXPtools Suporta detecção e exploração de vulnerabilidades do Apache ActiveMQ: CVE-2015-5254, CVE-2016-3088, CVE-2022-41678, CVE-2023-46604, CVE-2024-32114, CVE-2026-34197, CVE-2026-40466, CVE-2026-42588 !WARNING Esta ferramenta é destinada apenas para pesquisa de segurança e fins...

CVE-2026-46490-samlify-SAML-Attribute-Injection

CVE-2026-46490 — samlify SAML AttributeValue XML-Injection → Privilegienausweitung samlifyWert – wird unescaped eingefügt, sodass ein normaler Benutzer zusätzliche -Elemente z. B. role=admin in seine eigene, vom IdP signierte SAML-Assertion einschleusen kann. Da die Injektion vor der Signatur...

CVE-2021-29447-PoC

CVE-2021-29447 Prova de Conceito root@kitploit: ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Written By Isa Ebrahim - 0xRar on January, 2023 ═══════════════════════════════════════════════════════════════════════════ Title: Wordpress XML parsing issue in the Media Library leading to XXE Affected...

CVE-2025-58360

CVE-2025-58360 संस्करण 2.26.0 से 2.26.2 से पहले और 2.25.6 से पहले तक, एक XML External Entity XXE भेद्यता की पहचान की गई थी। एप्लिकेशन विशिष्ट एंडपॉइंट /geoserver/wms के GetMap ऑपरेशन के माध्यम से XML इनपुट स्वीकार करता है। Exploit1: root@kitploit: python3 CVE-2025-58360 -u http://example.com...

assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE)

A flaw was found in AssertJ. An XML External Entity XXE vulnerability exists in the XmlStringPrettyFormatter component, which is used by the isXmlEqualToCharSequence assertion. If an application processes untrusted XML input using these methods, a remote attacker could exploit this flaw to read...

Moderate: Red Hat Security Advisory: assertj-core security update

An update for assertj-core is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...