fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...

CVE-2023-26262

Sitecore 10.3 Authenticated file upload vulnerability Author: Thomas Stern Date: 26/01-2023 Summary It is possible via the import languages functionality to upload and arbitrary file. This file could be a webshell that would allow for execution of code on the server. Step to reproduce For testing...

linux-4.19.72_CVE-2023-0386

Linux kernel Hay varias guías para desarrolladores y usuarios del kernel. Estas guías se pueden generar en varios formatos, como HTML y PDF. Por favor, lea primero Documentation/admin-guide/README.rst. Para generar la documentación, use make htmldocs o make pdfdocs. La documentación formateada...

c41n

c41n c41n is an automated Rogue Access Point setup tool. c41n provides automated setup of several types of Rogue Access Points, and Evil Twin attacks. c41n sets up an access point with user defined characteristics interface, name and channel for the access point, sets up DHCP server for the acces...

CVE-2021-42671

CVE-2021-42671 CVE-2021-42671 - Broken access control vulnerability in the Engineers online portal system. Technical description: A broken access control vulnerability exists in the Engineers Online Portal. An attacker can leverage this vulnerability in order to bypass access controls and get his...

CVE-2023-30092

CVE-2023-30092 Todos los detalles sobre CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Enlace del software: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Tipo de vulnerabilidad: Inyección SQL Componente afectado: Parámetro QTY Impacto...

zerologon

ZeroLogon exploitation script Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. To exploit, clear out any previous Impacket installs you have and install Impacket fro...

UniversalDVC

Universal Dynamic Virtual Channel connector for Remote Desktop Services UDVC Terminal Services or Remote Desktop Services are offering many hidden features for those who want to dig deeper. One of these services is the Dynamic Virtual Channel that enables us to communicate over an open RDP...

FOISted

root@kitploit: | / \ |/ | | | | | | | | | || | | | | | | | || | | || | \ | / / | | | | || || | | || / | | || /|/ \|,| FOISted: a MikroTik remote jailbreak Description FOISted is an exploit for two post-authentication vulnerabilities in MikroTik's RouterOS. It can be used to remotely jailbreak...

CentralizedFirewall

Firewall Manager API Project Installation Follow these steps to set up and run the API project: 1. Clone the Repository root@kitploit: git clone https://github.com/adriyansyah-mf/CentralizedFirewall cd CentralizedFirewall 2. Edit the .env File Update the environment variables in .env according to...

CVE-2021-39512-BigTreeCMS-v4.4.14-AccountTakeOver

BigTreeCMS-v4.4.14-Unauthenticated-CSRF-AccountTakeOver Toma de control de cuenta por CSRF no autenticado en BigTreeCMS v4.4.14 Todos los módulos buscables en el panel de administración de BigTreeCMS v4.4.14 son vulnerables a DOM-XSS reflejado a través de la URI. Las consultas de búsqueda se...

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - Android Update Ownership Trust Bypass PoC A complete Android laboratory environment for reproducing and studying CVE-2026-0023. This repository demonstrates how CVE-2026-0023 allows a regular installer to influence an internal Android installation flag that should only be controll...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/' input type="hidden" nam...

CVE-2025-70341

CVE-2025-70341: Permisos inseguros + Ejecución de código arbitrario en App-Auto-Patch Resumen App-Auto-Patch v3.4.2 crea su directorio de trabajo con permisos de escritura mundial chmod 777, lo que permite una condición de carrera TOCTOU local. Un atacante local no privilegiado puede explotar est...

CVE-2025-68721

CVE-2025-68721: Control de Acceso Roto en Axigen WebAdmin Resumen de la Vulnerabilidad Un fallo en la lógica de permisos permite que una cuenta de administrador con cero permisos acceda a la página de "Seguridad y Filtrado", específicamente al endpoint de Certificados SSL. Mientras que otras...

Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Extracción de credenciales de usuario para router Hathway mediante SPI flash - CVE-2024-44815 Descripción de la vulnerabilidad: Durante la evaluación de seguridad del firmware del router, se observó que las credenciales de inicio de sesión tanto del portal web como del punto de acceso Wi-Fi se...

DATA

DATA: Credential Phish Analysis and Automation Slides from presentation at CircleCityCon 2017 Tested on Headless Ubuntu Server 16.04 BUCKLEGRIPPER py Given a suspected phishing url or file of line separated urls, visit, screenshot, and scrape for interesting files. Requirements can be installed b...

lava

LAVA: बड़े पैमाने पर स्वचालित भेद्यता जोड़ना वर्तमान में बग-खोज उपकरणों का मूल्यांकन और सुधार करना मुश्किल है क्योंकि ग्राउंड ट्रुथ कॉर्पोरा यानी, ऐसा सॉफ्टवेयर जिसमें ज्ञात बग और उन्हें ट्रिगर करने वाले इनपुट हों की कमी है। LAVA इस समस्या को सॉफ्टवेयर में स्वचालित रूप से बग डालकर हल करने का प्रय...

CVE-2022-0952

CVE-2022-0952 Sitemap by click5 1.0.36 - Actualización de opciones arbitrarias sin autenticar Descripción El plugin no tiene comprobaciones de autorización ni CSRF al actualizar opciones a través de un endpoint REST, y no garantiza que la opción a actualizar pertenezca al plugin. Como resultado,...