CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Inyección de Comandos en el Nombre del Trabajo de Impresión de Samba Resumen CVE-2026-4480 es una vulnerabilidad de inyección de comandos que afecta a ciertas configuraciones de impresión de Samba que utilizan comandos de impresión externos. La vulnerabilidad...

VulnerableSpringDataRest

Vulnerable Spring DataRest App This is an intentionally Spring Data REST Application to test and demostrate the CVE-2017-8046 vulnerability and the challenges of testing Command Injection and Remote Code Execution via REST apis It has support for Swagger UI to use with tools where Swagger...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

log4j

CVE-2021-44228 a.k.a. LOG4J This is a public repository from Wortell containing information, links, files and other items related to vulnerabilities related to Log4j Due to vulnerabilities in log4j 2.17.0 it is now recommended to patch to version 2.17.1 Knows CVEs CVE| Score| Description...

bluing

Bluing Una herramienta de recopilación de inteligencia para hackear Bluetooth English · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing anteriormente bluescan es una herramienta de recopilación de inteligencia Blu etooth In telligence G athering...

PowerShdll

PowerShdll Run PowerShell with dlls only. Does not require access to powershell.exe as it uses powershell automation dlls. PowerShdll can be run with: rundll32.exe, installutil.exe, regsvcs.exe, regasm.exe, regsvr32.exe or as a standalone executable. dll mode: Rundll32: root@kitploit: Usage:...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

CVE-2022-30525

CVE-2022-30525 A OS Command Injection Vulnerability in the CGI Program of Zyxel Executive Summary The vulnerability, first discovered on April 13, 2022, caused remote code execution in Zyxel firewall products. This important vulnerability with a CVSS score of 9.8 was blocked with the update...

gtfocli

GTFOcli GTFOcli it's a Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems. Table of Contents Table of Contents Installation Usage Search for Unix binaries Search for Windows binaries Search using dockerized...

VivisectION

VivisectION Emulation-Driven Reversing Toolset VivisectION is the cross-section of GUI Reversing, Emulation and Debugging, with an emphasis on using Emulation and other powerful Vivisect toys to aid in Reverse Engineering and Vulnerability Research. Among other things, VivisectION aka Ion is a...

EyeWitness

EyeWitness - Web Screenshot Tool EyeWitness is designed to take screenshots of websites, provide server header info, and identify default credentials if known. Now powered by Chromium browser for better reliability and easier installation. 🚀 Key Features Cross-platform support - Windows, Linux,...

struts-rce

:source-highlighter: pygments = Apache Struts CVE-2017-5638 exploitation This simple web application is built with vulnerable Apache Struts 2.5.10 CVE-2017-5638. It's vulnerable to RCE. == Starting web application To start vulnerable web application, execute: mvn jetty:run The application will be...

backcookie

backcookie Small backdoor using cookie. ========== root@kitploit: root@kitploit: Example one: python backcookie.py -u http://target.com/shell.php -c namecookie root@kitploit: Example two: python backcookie.py --url http://target.com/shell.php --cookie namecookie Custom command binfo, You get...

CVE-2025-63296

CVE-2025-63296 Summary KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and...

CVE-2018-8097-PoC

CVE-2018-8097 POC for CVE-2018-8097 This script exploits CVE-2018-8097 and can retrieve files and contents using a time based blind RCE method. Usage root@kitploit: python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h, --help show this help message and exit -u...

DNSint

DNSint 🔍 Professional DNS Reconnaissance & OSINT Toolkit A comprehensive DNS intelligence and security analysis tool for domain reconnaissance Created by wh0xac Features • Installation • Usage • Examples • Documentation 🎯 Overview DNSint is a powerful, all-in-one DNS reconnaissance and OSINT tool...

CVE-2022-40471

CVE-2022-40471 – CPMS Authenticated File Upload RCE 📌 Overview CVE-2022-40471 is an authenticated Remote Code Execution vulnerability affecting Clinic's Patient Management System CPMS. The vulnerability exists due to insufficient validation of uploaded files in the user profile image upload...

IoT-Implant-Toolkit

IoT-Implant-Toolkit IoT-Implant-Toolkit es un framework de herramientas útiles para la investigación de implantación de malware en dispositivos IoT. Es un conjunto de herramientas compuesto por software esencial para la modificación de firmware, depuración de puertos serie, análisis de software y...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

strot

Ingeniería inversa de la API interna de cualquier sitio web usando lenguaje natural El Problema Los sitios web modernos cargan datos a través de llamadas AJAX ocultas: Los datos no están en el HTML; se obtienen a través de APIs internas Debes inspeccionar manualmente las solicitudes de red Lógica...