Lucene search
+L

619567 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/23 7:51 a.m.โ€ข18 views

sisu

sisu โšก Your AWS, as a filesystem. This: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json Instead of this: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

6AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:49 a.m.โ€ข38 views

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

6AI score
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:30 a.m.โ€ข14 views

CVE-2022-22639

Details See Blog: https://www.trendmicro.com/enus/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html Exploitation of CVE-2022-22639 1. Compile with command: clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime...

7.8CVSS7.5AI score0.08191EPSS
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:29 a.m.โ€ข10 views

cve-2021-4034

cve-2021-4034 PoC for cve-2021-4034 Based on the PoC by https://haxx.in: https://haxx.in/files/blasty-vs-pkexec.c. Probably he's https://github.com/blasty?! I don't know. With a little help from https://github.com/daimoniac How to use? Compile cve-2021-4034.c root@kitploit: gcc -Wall...

7.8CVSS7.2AI score0.94921EPSS
SaveExploits155References3
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:29 a.m.โ€ข5 views

exploit-grafana-CVE-2021-43798

CVE-2021-43798 โ€“ Grafana Exploit About This is a proof-of-concept exploit for Grafana's Unauthorized Arbitrary File Read Vulnerability CVE-2021-43798. This vulnerability affects Grafana 8.0.0-beta1 to 8.3.0. According to Shodan data, there are just over 2,000 Grafana servers exposed online, with...

7.5CVSS8.1AI score0.88503EPSS
SaveExploits48
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:27 a.m.โ€ข11 views

CVE-2024-3656

Keycloak 24.0.5 is vulnerable to Broken Access Control vulnerability, where the attacker can use any authenticated user to perform some api action such as : Test LDAP connections via the testLDAPConnection endpoint. Retrieve unmanaged attributes of any user via the getUnmanagedAttributes endpoint...

8.1CVSS7.5AI score0.02862EPSS
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:24 a.m.โ€ข13 views

Hwacha

Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha is a tool to quickly execute payloads on Nix based systems. Easily collect artifacts or execute shellcode on an entire subnet of systems for which credentials are obtained. root@kitploit: $python hwacha.p...

6.2AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:22 a.m.โ€ข11 views

Microsoft365_devicePhish

Microsoft365devicePhish Abusing Microsoft 365 OAuth Authorization Flow for Phishing Attack This is a simple proof-of-concept script that allows an attacker to conduct a phishing attack against Microsoft 365 OAuth Authorization Flow. Using this, one can connect to Microsoft's OAuth API endpoints t...

6AI score
SaveExploits0References1
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:18 a.m.โ€ข14 views

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob โ€” a SOCKS5 proxy that tunnels all traffic through Azu...

6AI score
SaveExploits0References3
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:13 a.m.โ€ข13 views

Needle

Needle Chrome extension for Instant access to your bug bounty submission dashboard of various platforms + publicly disclosed reports + bugbountytip Needle is the only chrome extension you may need to have one click access to your bug submissions across various platforms. No need to create any...

5.8AI score
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:13 a.m.โ€ข10 views

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Authentication Bypass Info The WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4...

9.8CVSS8.4AI score0.46242EPSS
SaveExploits4
Kitploit
Kitploit
โ€ขadded 2026/09/23 7:03 a.m.โ€ข129 views

the-bastion

๐Ÿ”’ The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...

6.2AI score
SaveExploits0References18
Kitploit
Kitploit
โ€ขadded 2026/09/23 6:57 a.m.โ€ข10 views

CVE-2026-45504

CVE-2026-45504 Exchange File Read CVE-2026-45504 Exchange File Read Research Blog python3 CVE-2026-45504.py --attacker-ip 192.168.2.238 --attacker-port 9020 --creds [email protected] --password Hawktrace1 --target https://mail.exchange.local --target-file...

8.8CVSS8AI score0.00846EPSS
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/23 6:57 a.m.โ€ข7 views

CVE-2024-28987-POC

Description : The SolarWinds Web Help Desk WHD software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. Potential impact : Exploitation of CVE-2024-28987 could allow an attacker to bypass security policies...

9.1CVSS8.5AI score0.93299EPSS
SaveExploits6
Kitploit
Kitploit
โ€ขadded 2026/09/23 6:52 a.m.โ€ข15 views

CVE-2024-54819

CVE-2024-54819 Read more details on: https://www.partywave.site about CVE-2024-54819 POST request to login The attacker must be logged root@kitploit: POST /librarian/index.php/authentication HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:128.0 Gecko/20100101 Firefox/128.0...

9.1CVSS6AI score0.18033EPSS
SaveExploits0
Kitploit
Kitploit
โ€ขadded 2026/09/23 6:49 a.m.โ€ข11 views

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Vulnerability Description Joomla is an open-source content management system CMS, written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized...

5.3CVSS7.1AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
โ€ขadded 2026/09/23 6:48 a.m.โ€ข15 views

BloodHound-Tools

What is this? A collection of tools that integrate to BloodHound. Bloodhound is the defacto standard that both blue and red security teams use to find lateral movement and privilege escalation paths that can potentially be exploited inside an enterprise environment. A typical environment can yiel...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2026/09/23 6:47 a.m.โ€ข42 views

reaver-wps-fork-t6x

Overview Reaver implements a brute force attack against Wifi Protected Setup WPS registrar PINs in order to recover WPA/WPA2 passphrases , as described in Brute forcing Wi-Fi Protected Setup When poor design meets poor implementation. by Stefan Viehbรถck. Reaver has been designed to be a robust an...

6.3AI score
SaveExploits0References8
Kitploit
Kitploit
โ€ขadded 2026/09/23 6:46 a.m.โ€ข11 views

HATCHA

HATCHA CAPTCHA proves you're human. HATCHA proves you're not. HATCHA H yperfast A gent T est for C omputational H euristic A ssessment is a reverse CAPTCHA that gates access behind challenges trivial for AI agents but painful for humans โ€” large-number multiplication, string reversal, binary...

6AI score
SaveExploits0References4
Kitploit
Kitploit
โ€ขadded 2026/09/23 6:42 a.m.โ€ข8 views

TowelRoot

What is TowelRoot? Towelroot gains root access by exploiting a vulnerability in the kernel of Android, which is based on Linux and is a very basic component of the device that basically acts as a middle-man to make the operating system and the physical hardware talk to one another...

7.8CVSS7AI score0.37233EPSS
SaveExploits15
Rows per page
Query Builder