CVE-2026-81766 Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin

The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute...

CVE-2026-81766 Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin

The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before 9.8.0 before installing one from a user-supplied URL, allowing an administrator of a subsite on a multisite network to install and execute...

CVE-2026-78364 MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List

The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admi...

CVE-2026-19722 WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can...

CVE-2026-19722 WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can...

CVE-2026-78364 MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List

The MW WP Form WordPress plugin before 5.1.6 does not sanitise and escape some of its form settings before outputting them back in an admin dashboard page, which could allow users with a role as low as Editor to perform Stored Cross-Site Scripting attacks against high privilege users such as admi...

NukeViet-RCE-PoC

Cách sử dụng Tool hỗ trợ 4 chức năng chính: 1. Đăng nhậ...

loki

English | 简体中文 Alibaba Cloud Credentials for Go Alibaba Cloud Credentials for Go 是帮助 GO 开发者管理凭据的工具。 本文将介绍如何获取和使用 Alibaba Cloud Credentials for Go。 要求 请确保你的系统安装了 1.12.x 或更新版本的 Go 环境。 安装 使用 go get 下载安装 root@kitploit: go get -u github.com/aliyun/credentials-go 快速使用 在您开始之前，您需要注册阿里云帐户并获取您的凭证。 凭证类型...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

CVE-2023-36899

CVE-2023-36899 CVE-2023-36899漏洞的复现环境和工具，针对ASP.NET框架中的无cookie会话身份验证绕过。 Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework CVE-2023-36899 在现代的Web开发中，尽管cookies是传输会话ID的首选方法，但.NET Framework也提供了一种替代方法：直接在URL中编码会话ID。这种技术被称为.NET...

CVE-2024-6670

CVE-2024-6670 Progress Software WhatsUp Gold HasErrors SQL注入认证绕过漏洞 CVE-2024-6670 的PoC 该漏洞的根本原因分析可在我博客中找到： https://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670/ 使用方法 root@kitploit: python CVE-2024-6670.py --newpassword Pwned --target-url https://192.168.201.150 | | | | | | | | | | ...

CVE-2019-5418-Scanner

CVE-2019-5418-Scanner 一个多线程的 Golang 扫描器，用于识别受 CVE-2019-5418 影响的 Ruby 端点 使用说明 root@kitploit: Usage of ./CVE-2019-5418-Scanner: -auth string Perform a scan using a auth token i.e Basic YmFzZTY0VG9rZW5WYWx1ZQ== default "nope" -http Use HTTP over HTTPS -insecure Ignore SSL/TLS Errors -log Log results...

blindy

Blindy 用于运行暴力破解盲注式MySQL注入的简单脚本 注意：此脚本仅供娱乐，在某些CTF挑战中或有帮助 : 描述 脚本将遍历提供文件中列出的查询集，并尝试对任何包含 占位符的位置进行暴力破解。 支持 GET 和 POST HTTP 方法 HTTP HEADERS 以与其他参数相同的方式支持 在默认模式下，脚本查找负面模式（注入成功时不可见的文本） 使用 --positive 标志可切换到查找预期响应 命令行界面 root@kitploit: $ python3 blindy.py --help usage: blindy.py -h -X HTTPMETHOD -p...

NGWAF

N3XT-G3N Web App Firewall NGWAF NGWAFは@yupengfei、@zhangbosen、@matthewng、@elizabethlim によって作成されました。 NGWAFの初期段階への貢献に対して、@ruinahkoh に特別な感謝を捧げます。 NGWAFは実験的な概念実証であり、現在の形では本番環境での使用には適していません。 目次 1. 動機 ​ NGWAFの仕組み ​ NGWAFの主な利点 2. コンポーネント | NGWAFの歯車 ​ 頭脳: 機械学習ベースのWAF ​ 覗き窓: スケーラブルなインタラクティブ隔離環境 ​ 図書館:...

CVE-2019-1040-dcpwn

CVE-2019-1040-dcpwn 精彩的博文！利用 CVE-2019-1040 - 结合中继漏洞实现 RCE 和域管理员 。 因此，我编写了 dcpwn.py 以便于使用。 依赖要求 这些工具需要 impacket。你可以通过 pip 安装它 root@kitploit: pip install impacket 用法 root@kitploit: usage: dcpwn.py -h -u USERNAME -p PASSWORD --hashes HASHES -d DOMAIN --smb-port destination port --callback-ip...

latma

Lateral movement analyzer tool Lateral movement analyzer LATMA collects authentication logs from the domain and Azure AD environments and searches for potential lateral movement attacks and suspicious activity, the lateral movement can be in the AD environment or between cloud and on-prem. The to...

JWT_Brute

JWTBrute 示例 eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9.56wwCrB9tIgmUnYpLPxkO8GYj1soCjuuskTlbHGg8 root@kitploit: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9 base64 decode "alg":"HS256","typ":"JWT" eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9 base64 decode...

CTF-s-Tools

Repository to index interesting Capture The Flag tools and other stuff. Table of Contents Platforms to practice Cryptography Main Secondary Hashes Esoteric Languages Steganography OSINT Threat Hunting Forensics Reversing Exploiting Pentesting Recon Web Exploit Database Docker Credentials CVE...

CVE-2018-14847

WinboxExploit 这是针对严重 WinBox 漏洞（CVE-2018-14847）的概念验证，该漏洞允许任意读取明文密码的文件。 博客文章 https://n0p.me/winbox-bug-dissection/ 需求 Python 3+ 此脚本不会在 Python 2.x 或更低版本上运行。 使用方法 该脚本通过命令行使用简单的参数即可运行。 WinBox TCP/IP 利用漏洞并读取密码。 root@kitploit: python3 WinboxExploit.py PORT 示例： root@kitploit: $ python3 WinboxExploit.py...

maltrail

Maltrail Maltrail 是一个网络流量检测系统，用于识别与已知恶意基础设施的通信，并报告选定的流量异常。它会将网络上观察到的域名、URL、IP 地址、IP:port 对以及 User-Agent 值与一组称为 trails 的指标进行匹配。 检测结果会记录为单个事件，其中包含源、目标、协议、匹配的 trail、分类以及 trail 来源：text "2026-08-07 09:14:22.117034" gw 10.13.13.2 57809 1.1.1.1 53 UDP DNS malware.bakewithdavid.com "asyncrat malware"...