1578898 matches found
rapiddns
Description Simple python module unofficial allowing you to access data from rapiddns.io. You can also use it as a module. As mentioned on the rapiddns.io: Rapiddns currently has more than 3 billion DNS resolution data, supporting A, CNAME, AAAA, MX types. A records 2.1 billion, CNAME records 250...
XboxSeries
Xbox Series: Internal Architecture Research Field| Value ---|--- Date| March 9-12, 2026 + July 7-?, 2026 Hardware| Xbox Series S Codename: Lockhart OS Build| 26100.7010.amd64fre.xbflt2602ge.260212-1010 + 26100.8561.amd64fre.xbflt2606ge.260609-2200 Access Method| Dev Mode + SSH + REST API + NTFS...
xmap
XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...
CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento
CosmicSting: critical unauthenticated XXE vulnerability in Adobe Commerce and Magento CVE-2024-34102 CVE-2024-34102 is a severe security flaw arising from improper handling of nested deserialization in Adobe Commerce and Magento. This vulnerability permits attackers to exploit XML External Entiti...
iOS-Bluetooth-Ethernet-Exploit
Zero-Cost Ethernet Gateway Exploit on iOS Bluetooth PAN โ USB Port 62078 Author: Fares Dahoumane Twitter/X: https://x.com/faresdahoumane Date: June 2026 Status: Public Disclosure Results Only โ Full technical details submitted to BlackHat Arsenal for review. โ ๏ธ Disclaimer This repository is for...
API-s-for-OSINT
APIs Para OSINT root@kitploit: Esta es una colecciรณn de APIs que serรกn รบtiles para automatizar diversas tareas en OSINT. Instrucciรณn para principiantes totales: Automatizaciรณn de OSINT: usando funciones personalizadas para trabajar con solicitudes de API en Google Sheets ยกGracias por seguirme!...
CVE-2026-30691
CVE-2026-30691 - Vulnerability Advisory Official MITRE vulnerability record details and technical documentation for CVE-2026-30691. root@kitploit: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allo...
ResponsiveFileManager-CVE-2022-46604
ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604 File Creation Extension Bypass which leads to RCE. The current exploit is made in Python 3 and exploits the vulnerability to upload a webshell which allows the remote execution of commands in the...
BamboozlEDR
BamboozlEDR A comprehensive ETW Event Tracing for Windows event generation tool designed for testing and research purposes. BamboozlEDR features a TUI interface and can generate realistic security events across multiple Windows ETW providers to test EDR detection capabilities, log analysis system...
MOEW
Invisible Threats, Visible Solutions. Misaligned Opcode Exception Waterfall MOEW 3โStage SEH Waterfall PoC Benign, x86/Wow64 TL;DR: This PoC demonstrates a 3โstage Structured Exception Handling SEH cascade caused by deliberate misaligned execution into raw byte blobs whose first valid instruction...
mcp-security-checklist
๐ MCP Security Checklist A practical, community-maintained security checklist for teams building and deploying Model Context Protocol MCP servers and AI agent infrastructure. Why This Exists MCP is being adopted rapidly. Security guidance is lagging behind. This checklist gives security engineers...
ksentinel
ksentinel - Kernel Syscalls Integrity Monitor Overview ksentinel monitors critical kernel functions and the syscall table for unauthorized modifications. It detects common syscalls that are targeted by most rootkits including ftrace hooks, kprobes, and syscall table hijacking. Features Function...
hammer
Overview Dow Jones Hammer is a multi-account cloud security tool for AWS. It identifies misconfigurations and insecure data exposures within most popular AWS resources, across all regions and accounts. It has near real-time reporting capabilities e.g. JIRA, Slack to provide quick feedback to...
CVE-2026-39813
cve-id โก Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...
profilehound
root@kitploit: / \ / / / / / / / / / // / / / // / / / // / / / / / / / / / / / // / / / / / / // / // / / / / // / // // // ///// ///,// //,/ ProfileHound ProfileHound is a post-escalation tool to help find and achieve red-teaming objectives by locating domain user profiles on machines...
CVE-2024-40498
CVE-2024-40498 Affected Application online-shopping-system-advanced 1.0 https://github.com/PuneethReddyHC/online-shopping-system-advanced Description The file register.php handles user registration. At line 117, the POST parameters "$address1" and $address2" are unsanitized, unlike the e-mail,...
CVE-2022-35914
Script in Ruby for the CVE-2022-35914 - RCE in GLPI CVE-2022-35914 Just add the Target to the Script. Usage: root@kitploit: ruby.exe exploit.rb = whoami You can close with: root@kitploit: = exit...
CVE-2024-38355-PoC
CVE-2024-38355 Demo Socket.IO Crash This project is a Proof of Concept demonstrating CVE-2024-38355 , a denial-of-service vulnerability in socket.io. The project was created for educational purposes to show the attack mechanism and how to protect applications. About the Vulnerability CVE-2024-383...
santa
Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...
CVE-2023-49985
CVE-2023-49985 School Fees Management System v1.0 - Cross-Site Scripting XSS Vulnerability in "cname" parameter on "newclass" Description : A cross-site scripting XSS vulnerability in the component "newclass" of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts ...