moodle-login-csrf

This repository contains the files used in finding and exploiting two moodle bugs, MSA-18-0020 CVE-2018-16854 and MSA-19-0004 CVE-2019-3847, which leverage the ability for users to add JavaScript to their own dashboards. MSA-18-0020 relies on CSRF on the login form, whereas MSA-19-0004 requires a...

cangibrina

root@kitploit: / | | | | / | ' \ / | | ' | '| | ' \ / | | || | | | | | | | | | | | | | | | | | | \,|| ||, ||./|| ||| ||,| |/ Beta - v0.8.7 Dashboard Finder Inglés Portugués Inglés Buscador de Panel de Administración Cangibrina es una herramienta multiplataforma que tiene como objetivo obtener...

ProxyLogon-CVE-2021-26855

CVE-2021-26855 This is a modified version of a POC for proxylogon. Instead of laucnhing "whoami" it creates a new user and adds that user to the administrator group and creates a reverse shell. The origonal POC code can be found here: https://www.exploit-db.com/exploits/49663 Usage: python...

PT-2026-89374

capgo.app npm package capgo through version 12.207.1 does not compare the caller's role rank against the requested role in the validateInvite function of supabase/functions/ backend/private/invite new user to org.ts. The POST /private/invite new user to org endpoint only requires the org.update...

CVE-2023-39144

CVE-2023-39144 Background I discovered this vulnerability in May of 2023. Element55 produces software for law offices to track time. This software pulls information from various locations, such as Exchange, SQL, and Shoretel. Timeline May 24, 2023 - Reported vulnerability to Element 55 May 25, 20...

CVE-2025-10307

Exploit: Arbitrary File Deletion via Backuply tarfile path traversal Browser Console PoC authenticated admin root@kitploit: async = const page = $location.origin/wordpress/wp-admin/admin.php?page=backuply; // 1 Extract a valid nonce from the Backuply page const html = await fetchpage, credentials...

Komari: Management Interface CSRF

Vulnerability Overview The sessiontoken cookie is set without the SameSite or Secure attributes login.go:68. All /api/admin/ management endpoints rely solely on this cookie for authentication, with no CSRF token or Origin validation. The server-side vulnerability is confirmed to exist; however,...

MalSCCM

MalSCCM This tool allows you to abuse local or remote SCCM servers to deploy malicious applications to hosts they manage. To use this tool your current process must have admin rights over the SCCM server. Typically deployments of SCCM will either have the management server and the primary server ...

CVE-2025-9485

Exploit: Authentication Bypass via Unsigned JWT alg: none 1 Forge an unsigned JWT claiming the admin email root@kitploit: TOKEN=$node -e ' function b64us return Buffer.froms.toString"base64" .replace/+/g,"-" .replace///g,"" .replace/=+$/,"" const header = b64uJSON.stringify alg: "none", typ:...

CVE-2026-7394-SQLI

SQL Injection in Pizzafy Ecommerce System — admin/vieworder.php Details...

fracture

Fracture FragAttacks WiFi Penetration Framework CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture automates three novel attack chains via 802.11 frame injection. It exploits the A-MSDU aggregation vulnerability in WPA2/WPA3 to inject arbitrary plaintext frames into encrypted networks —...

CredNinja

This tool is intended for penetration testers who want to perform an engagement quickly and efficiently. While this tool can be used for more covert operations including some additions below, it really shines when used at the scale of a large network. At the core of it, you provide it a list of...

ScreenConnect-AuthBypass-RCE

How to use I'm using Python3.9 root@kitploit: pip install requests python check.py python batchAdduser.py root@kitploit: python ScreenConnect-AuthBypass-RCE.py -h usage: ScreenConnect-AuthBypass-RCE.py -h -u USERNAME -p PASSWORD -t TARGET -d DOMAIN --proxy PROXY CVE-2024-1708 && CVE-2024-1709 --...

CVE-2018-6606

CVE-2018-6606 This terminates any PID. Tested on Windows 10 64-bit, Flare VM. Administrator privileges are required. Some adjustments may be needed — see resource.rc. Toolchain Download:...

FORTIWEB_CVE-2025-64446-58034

Simulación de explotación de FortiWeb CVE-2025-64446 & CVE-2025-58034 Nota: Este documento es solo para fines educativos y de investigación de seguridad. No lo utilice para atacar sistemas sin autorización. 1. Resumen FortiWeb es un dispositivo Web Application Firewall WAF utilizado para proteger...

cups-script-final-project

What it does Two-stage detection tool for CVE-2025-58060, authentication bypass vulnerability in the Common UNIX Printing System CUPS. Rather than relying on version numbers alone, the tool combines a banner-based version check with an active auth bypass probe. This helps confirming real...

sshuttle

sshuttle: donde el proxy transparente se encuentra con la VPN y con ssh Hasta donde sé, sshuttle es el único programa que resuelve el siguiente caso común: Tu máquina cliente o enrutador es Linux, FreeBSD, MacOS o Windows. Tienes acceso a una red remota a través de ssh. No necesariamente tienes...

AdminSnatcher

AdminSnatcher Let's Snatch The Admin Panel Of Any Website In Seconds. Usage: 1. Go To The Terminal and cd To The Path. 2. Type: python3 adminsnatcher.py --url https://example.com Requirements 1. Python 3 2. Following Libraries Should Be Installed In Python3: Requests Random Colorama Why Only...

CVE-2023-22515

CVE-2023-22515 Key Information about CVE-2023-22515 Affected Product: Atlassian Confluence Data Center & Confluence Server. Disclosure Date: 04/10/2023. Severity: Critical CVSS 10.0. Vulnerability Type: Broken Access Control / Improper Authorization → allows an attacker to remotely create an admi...

CVE-2024-10924-PoC

PoC Authentication Bypass MFA Really Simple Security WordPress Plugin | CVE-2024-10924 We access the WordPress web page where we will see that it has MFA enabled through the vulnerable plugin: We must run the PoC and provide the login credentials: Automatically, the browser will open via a...