Lucene search
+L

22622 matches found

Kitploit
Kitploit
added 2026/09/15 6:38 a.m.8 views

Hackers-and-Crackers

Hackers-and-Crackers...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:33 a.m.8 views

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:27 a.m.8 views

Striker

Striker C2 Striker es un sencillo programa de Comando y Control C2. Descargo de responsabilidad Este proyecto está en desarrollo activo. La mayoría de las funcionalidades son experimentales, y habrá más por venir. Espere cambios importantes. Características A Agentes Agentes nativos para sistemas...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:24 a.m.44 views

link

link link is a command and control framework written in rust. Currently in beta. Table of Contents Introduction Features Feedback Build Process Acknowledgments Introduction...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 6:24 a.m.9 views

link

link link는 Rust로 작성된 명령 및 제어 프레임워크입니다. 현재 베타 단계에 있습니다. 목차 소개 기능 피드백 빌드 과정 감사의 말 소개...

5.9AI score
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.102 views

Online Event Booking and Reservation System 2.3.0 - SQL Injection

Online Event Booking and Reservation System 2.3.0 contains a SQL injection vulnerability in event-management/views. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...

9.8CVSS8.1AI score0.16046EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.71 views

Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution

Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin = 1.3.9.6 contains an unrestricted file upload caused by insufficient file type validation and bypass of filename sanitization with non-ASCII characters, letting unauthenticated attackers upload arbitrary files and achieve...

8.1CVSS6AI score0.04175EPSS
SaveExploits3References2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.130 views

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/takeaction.php?id=. id: CVE-2022-31984 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL...

7.2CVSS7.2AI score0.04906EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.59 views

Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting

Sourcecodester Online Event Booking and Reservation System 2.3.0 contains a cross-site scripting vulnerability in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clic...

4.3CVSS5.5AI score0.03852EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.32 views

Yonyou YonBIP - Path Traversal

Yonyou YonBIP v3 and before contains a path traversal caused by improper validation in the LoginWithV8 interface of the series data application service system, letting unauthorized attackers access sensitive information. id: CVE-2025-66744 info: name: Yonyou YonBIP - Path Traversal author:...

7.5CVSS7.9AI score0.01567EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.111 views

Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File

The Google for WooCommerce plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.8.6. This is due to publicly accessible printphpinformation.php file. This makes it possible for unauthenticated attackers to retrieve information about Webserver and PH...

5.3CVSS7.8AI score0.00861EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.20 views

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...

9.8CVSS8.3AI score0.04262EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 5:18 a.m.9 views

C2-Blockchain

C2-Blockchain Esto es un C2 implementado sobre contratos inteligentes de Ethereum basados en el servidor de TestNet de Ropsten Para leer más sobre cómo hicimos esta prueba de concepto, consulta la serie aquí. Hemos explicado todo, desde la introducción a blockchain hasta el uso de contratos...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 5:09 a.m.6 views

SlackShell

SlackShell Descripción y Registro de Cambios v1.0 Este módulo de PowerShell incluye varias funciones que utilizan la API de Slack para crear un canal de comando y control. La función principal, Start-Shell, se conectará a un canal de Slack especificado por el usuario y autenticará utilizando un...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 4:32 a.m.5 views

Social-media-c2

Command and control servers in social media Script is a proof of concept how to control your machine by using social media platforms. Description and usage Script has following functions: history - ReTweet history, like photo on Instagram with 'history' in description or wrote 'history' to...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 4:30 a.m.8 views

mothership_c2

Mothership C2 $\textcolorred\text¡DESCARGO DE RESPONSABILIDAD!$ $\textcolorred\text¡ESTA HERRAMIENTA ES SOLO PARA USO ÉTICO!$ Descripción Mothership C2 es un servidor de comando y control escrito en Python Características Soporta cifrado de extremo a extremo para enviar y recibir comandos Usa HTT...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 4:26 a.m.30 views

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 4:10 a.m.9 views

dnscat2

NOTA: ¡La contraseña para las descargas .zip es siempre "password"! Introducción ¡Bienvenido a dnscat2, un túnel DNS que NO te enfermará y te matará! Esta herramienta está diseñada para crear un canal de comando y control C&C cifrado sobre el protocolo DNS, que es un túnel efectivo para salir de...

6.3AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/15 4:10 a.m.289 views

dnscat2

NOTE: The password for the .zip downloads are all "password"! Introduction Welcome to dnscat2, a DNS tunnel that WON'T make you sick and kill you! This tool is designed to create an encrypted command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every...

6.2AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/15 4:07 a.m.4 views

Indushell

Indushell PoC de C&C para el malware Industroyer Trabajo original de: xpn https://github.com/xpn Demo: https://www.youtube.com/watch?v=3bulqYmPTps Entrada de blog: https://www.secarma.co.uk/labs/industroyers-command-and-control-protocol...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder