1403912 matches found
ludus_crushftp_cve-2025-31161
Ansible ่ง่ฒ๏ผCrushFTP CVE-2025-31161๏ผๅบไบ Ludus๏ผ ไธไธช Ansible ่ง่ฒ๏ผ็จไบๅจ Windows ไธไธบๆๆ็ๆธ้ๆต่ฏ้จ็ฝฒๅญๅจๆผๆด็ CrushFTP 10.8.0 ๅฎไพ๏ผ้ๅฏน CVE-2025-31161๏ผ่บซไปฝ้ช่ฏ็ป่ฟ๏ผใ ๅญๅจๆผๆด็ CrushFTP ไบ่ฟๅถๆไปถๆ็ฎกๅจ rufflabs/crushftpcve-2025-31161๏ผๅนถๅจ้จ็ฝฒๆถ่ชๅจไธ่ฝฝใๅฆๆ่ฏฅไปๅบไธๅฏ็จ๏ผ่ง่ฒๅฐๅ้ๅฐ็ดๆฅไป Docker Hub ๆๅใ !WARNING ๆญค่ง่ฒ้จ็ฝฒ็ๆฏๆ ๆๅญๅจๆผๆด ็ๅบ็จ็จๅบใ ไป ๅจ้็ฆป็ๅฎ้ชๅฎค็ฏๅขไธญไฝฟ็จใไธ่ฆๆด้ฒ็ปไธๅไฟกไปป็็ฝ็ปใ ้ๆฑ...
CVE-2022-1903
CVE-2022-1903 root@kitploit: Title: ARMember 3.4.8 - Unauthenticated Admin Account Takeover Author: Cyllective https://cyllective.com/ CVE: CVE-2022-1903 Installation root@kitploit: git clone https://github.com/biulove0x/CVE-2022-1903.git cd CVE-2022-1903/ python3 -m pip install -r requirements.t...
CVE-2020-12077
CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE due to Incorrect Access Control in AJAX Actions Description The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the โajaxgetโ, โajaxsaveโ,...
cve-2025-50428
CVE-2025-50428 - RaspAP ๅฝไปคๆณจๅ ฅ CVE-2025-50428 ็ๆฆๅฟต้ช่ฏๆผๆดๅฉ็จ็จๅบ๏ผ้ๅฏน RaspAP raspap-webgui 3.2.9 ๅๆดๆฉ็ๆฌไธญ็ๅฝไปคๆณจๅ ฅๆผๆดใ ๆผๆด ID| CVE-2025-50428 ---|--- ไธฅ้ๆง| ้ซ CVSS 3.1: 8.6 CVSS ๅ้| CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N ๆผๆด็ฑปๅ| ไปฃ็ ๆณจๅ ฅ ๆปๅปๅ้| ่ฟ็จ๏ผๅทฒ่ฎค่ฏ๏ผ ๆ้ๆ้| ไฝ ๅฝฑๅ| ไปฃ็ ๆง่กใๆ้ๆๅ ๅๅฝฑๅไบงๅ| raspap-webgui โค...
CVE-2023-5360-exploit-with-native-libraries
Royal Elementor Addons โค 1.3.78 โ ๆช็ปๆๆ็ไปปๆๆไปถไธไผ RCE ๐ ๆฆ่ฟฐ ่ฏฅไปๅบๅ ๅซ้ๅฏน WordPress ๆไปถ Royal Elementor Addons and Templates ๏ผ็ๆฌ โค 1.3.78 ๏ผ็ ไฟฎๆน็ๆฆๅฟต้ช่ฏๆผๆดๅฉ็จ ใ ่ฏฅๆผๆดๅ ่ฎธ ๆช็ปๆๆ็ไปปๆๆไปถไธไผ ๏ผๅฏ่ขซๆปฅ็จไปฅไธไผ PHP ๆไปถๅนถๅฎ็ฐ ่ฟ็จไปฃ็ ๆง่ก RCE ใ CVE : CVE-2023-5360 ๆผๆด็ฑปๅ : ๆช็ปๆๆ็ๆไปถไธไผ โ RCE ๅๅฝฑๅๆไปถ : Royal Elementor Addons and Templates ไฟฎๅค็ๆฌ : 1.3.79+ ๐ง...
inforfinder
Inforfinder =========== Inforfinder is a tool made to collect information of any domain pointing at a server ip,domain,range,file. Requires python libs: pyRequests, lxml and py3DNS You can do the installation, with pip or you can install the inforfinder app as a package using python setup.py...
loki-parse
loki-parse ไธๆฌพPython่ๆฌ๏ผ่ฝๅคๆฃๆตๅนถ่งฃๆ่ขซๅ ฅไพตไธปๆบไธC2ๆๅกๅจไน้ด็loki-bot๏ผๆถๆ่ฝฏไปถ๏ผ็ธๅ ณ็ฝ็ปๆต้ใ่ฏฅ่ๆฌๅฏๅธฎๅฉDFIRๅๆๅธๅๅฎๅ จ็ ็ฉถไบบๅไบ่งฃๅชไบๆฐๆฎ่ขซๅคๆณ่ณC2ๆๅกๅจใ่ฟ่กๅตๅฐธ็ฝ็ป่ฟฝ่ธช็ญใ ่ฏฅ่ๆฌๅฏไปฅ็ดๆฅๅ ๆข็ฝ็ปๆฅๅฃ๏ผๆ ้ไบคๆขๆบ๏ผ๏ผๆ่ฏปๅPCAP็ฝ็ปๆต้ๆไปถ๏ผไฝฟ็จ --pcap $pcapfile๏ผใๅฝ่ๆฌๆฃๆตๅฐloki-bot็ธๅ ณ็ฝ็ปๆต้ๆถ๏ผไผไปฅJSONๆ ผๅผๅฐๆฐๆฎๅ ไธญ็ๅ ๅฎน่พๅบๅฐๅฑๅนใ...
sparrow-wifi
Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...
cve-2025-66398
CVE-2025-66398 โ Signal K Server RCE PoC ๐ Description CVE-2025-66398 is a Signal K Server issue where an unauthenticated attacker can poison the serverโs restore state via /skServer/validateBackup, then hijack config via /skServer/restore to inject a backdoor admin account and optionally achieve...
filebuster
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...
icebreaker
icebreaker Break the ice with that cute Active Directory environment over there. When you're cold and alone staring in at an Active Directory party but don't possess even a single AD credential to join the fun, this tool's for you. Sequentially automates 5 internal network attacks against Active...
CVE-2023-27163-exploit
CVE-2023-27163 โ request-baskets SSRF ๆผๆดๅฉ็จ ๆ็ผๅๆญคๆผๆดๅฉ็จๅทฅๅ ท็จไบ้ๅฏน CVE-2023-27163 ๏ผ่ฟๆฏ request-baskets ็ๆฌ โค 1.2.1 ไธญๅญๅจ็ไธไธชๆๅก็ซฏ่ฏทๆฑไผช้ ๏ผSSRF๏ผๆผๆดใ่ฏฅ็ผบ้ทไฝไบ /api/baskets/name ็ซฏ็น๏ผๅ ถไธญ forwardurl ๅๆฐๅ ่ฎธๆปๅป่ ่ฎฉๆๅกๅจไปฃๅ ถๅ่ตทไปปๆ HTTP ่ฏทๆฑใ ๅทฅไฝๅ็ ่ฏฅๆผๆดๅฉ็จๅทฅๅ ทไผๅๅปบไธไธชๆถๆโbasketโ๏ผๅ ถ forwardurl ๆๅๅ ้จ็ฎๆ ใๅฏน่ฏฅ basket ็ซฏ็นๅๅบ็ไปปไฝ่ฏทๆฑ้ฝไผ่ขซๆๅกๅจ่ฝฌๅๅฐๆๅฎ็ URL๏ผไป่ๆๆๅฐๅฐๆๅกๅจๅๆไธไธช SSRF...
-cve-2025-55182
CVE-2025-55182 Mass / Single URL Detection Script image An efficient CVE-2025-55182 vulnerability detection tool, supporting single URL quick detection and batch URL detection, automatically generating detailed Excel detection reports, and outputting complete log files. ๐ฅ Core Features Supports...
CVE-2022-37706
CVE-2022-37706 Hello guys, this time I'm gonna talk about a recent 0-day I found in one of the main window managers of Linux called Enlightenment https://www.enlightenment.org/. This 0-day gonna take any user to root privileges very easily and instantly. The exploit is tested on Ubuntu 22.04, but...
odin
Odin Odin is a central IoC scanner based on Loki Table of Contents General Info Requirements Fetching Deploying Loki Collecting Parsing General Info This application Loki latest version and download it on all machines using a powershell script and run it then this app receives the respose from al...
installer
Overview Installation mql cnspec Scan your target platform Package Information Kubernetes Status Docker Containers: Homebrew: Install.sh: Install.ps1: macOS Pkg:...
CVE-2015-1397-Magento-Shoplift
CVE-2015-1397-Magento-Shoplift Vulnerability Details Vulnerability as seen in HackTheBox - SwagShop Stage 1 = exploit.py Gain administrator credentials to Magento CMS dashboard Stage 2 = postauth.py With credentials gained from exploit.py added to postauth.py run: root@kitploit: python3 postauth....
pentesting-multitool
Pentesting-Multitool Introduction Pentesting-Multitool project arises from the need to gather some pentesting tools into one tool. It will be developed using Python3 adding some external libraries as DNSPython, pythonwhois or scapy. The main functions of the script is to collect information about...
PAPIMonitor
PAPIMonitor P ython API Monitor for Android apps is a python tool based on Frida for monitoring user-select APIs during the app execution. The app should be installed within an emulator already connected through ADB to the pc host. The user can choose to monitor a predefined list of APIs divided...
ai-security-battle
๐ค AI Security Battle System Red Team vs Blue Team: Adversarial ML Combat Simulation A comprehensive adversarial machine learning security simulation where Red Team attackers battle against Blue Team defenders in a 30-minute AI/ML security warfare scenario. ๐ฏ Project Overview This system simulates...