bluing

Bluing An intelligence gathering tool for hacking Bluetooth English · 简体中文 %20%7C%20Kali%202022.4%20\x64%20%7C%20Kali%20NetHunter%202022.4%20\aarch64-brightgreen Bluing formerly bluescan is a Blu etooth In telligence G athering tool written primarily in Python. It can help us snoop on the...

CVE-2023-6063-PoC

PoC for CVE-2023-6063: WP Fastest Cache 1.2.2 Unauthenticated Blind SQL Injection -red A Proof on Concept for CVE-2023-6063, a time-based blind SQL injection vulnerability in WP Fastest Cache ≤1.2.2. Extracts hashed passwords userpass and emails useremail from the wpusers table by abusing the...

CVE-2025-31324

SAP CVE-2025-31324 Analyzer A Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of Compromise IOCs such as malicious .jsp. 🚀 Features Detects vulnerable Visual Composer endpoints Scans for known malicious...

CVE-2025-30208

中文 | English Vite Dev Server Vulnerability Scanner 一个内外网通吃的自动化扫描器 An automated tool for scanning Vite development server vulnerabilities. This tool utilizes the FOFA API to collect potential targets and automatically detects specific vulnerabilities. Features Auto Automatic target asset collectio...

CVE-2023-4549

معرف CVE : CVE-2023-4549 نوع الثغرة : Cross-Site Scripting الوصف : إضافة DoLogin Security لـ WordPress معرّضة لثغرة تخزين نصوص برمجية عبر المواقع Stored Cross-Site Scripting عبر ترويسة 'X-Forwarded-For' في الإصدارات حتى 3.6 وما يشملها، بسبب عدم كفاية تعقيم المدخلات وهروب المخرجات. وهذا يتيح...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

icebreaker

icebreaker Break the ice with that cute Active Directory environment over there. When you're cold and alone staring in at an Active Directory party but don't possess even a single AD credential to join the fun, this tool's for you. Sequentially automates 5 internal network attacks against Active...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive information pushed to repositories on GitLab or Github. Gitrob will clone repositories belonging to a user or group/organization down to a configurable depth and iterate through the commit history and fla...

CVE-2025-24813

CVE-2025-24813 - Apache Tomcat Remote Code Execution Exploit This is a proof-of-concept PoC exploit for CVE-2025-24813 , a vulnerability in Apache Tomcat 9.0.80–9.0.83, 10.1.0–10.1.17 that allows remote code execution RCE via session deserialization. The exploit abuses partial PUT requests and th...

Kunyu

Kunyu坤舆 - More efficient corporate asset collection English | 中文文档 0x00 Introduce Tool introduction Kunyu kunyu, whose name is taken from , is actually a professional subject related to geographic information, which counts the geographic information of the sea, land, and sky. The same applies to...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...

CVE-2015-0057

CVE-2015-0057 Exploitation on 32-bit and 64-bit Systems Author: Aaron Adams Translation: 55-AA Translator's Note: Some parts of this article are freely translated. Please refer to the original text for any questions. Terminology: Primitive: Similar to a functional function, it is a collection of...

kernel: packet: use consistent hard_header_len in non-ring send paths

A flaw was found in the Linux kernel's packet handling functions, specifically packetsnd and packetsendmsgspkt. This vulnerability arises from inconsistent handling of network device header lengths during packet construction. A local attacker could exploit this by triggering a race condition duri...

snare

SNARE Super Next generation Advanced Reactive honEypot About SNARE is a web application honeypot sensor attracting all sort of maliciousness from the Internet. Documentation The documentation can be found here. Basic Concepts Surface first. Focus on the attack surface generation. Sensors and...

PowerMeta

PowerMeta PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them c...

EDRSandblast

EDRSandBlast EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections Notify Routine callbacks, Object Callbacks and ETW TI provider and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring. As of...

NullSection

NullSection NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes. Install root@kitploit: git clone https://github.com/MatheuZSecurity/NullSection cd NullSection gcc nullsection.c -o nullsection ./nullsection Advantage When running...

CVE-2025-31161

🚨 CVE-2025-31161 - Critical Authentication Bypass in CrushFTP CVE-2025-31161 is a critical authentication bypass vulnerability in CrushFTP, a popular Managed File Transfer MFT solution. An unauthenticated remote attacker can impersonate any known user including the default crushadmin administrato...

CVE-2021-37580

CVE-2021-37580 POC for CVE-2021-37580 0x00 Vulnerability Principle Vulnerability principle: Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 0x01 Single URL root@kitploit: Usage: python3 CVE-2021-37580.py -u url -n username.txt For shenyu-admin-2.4.0, vulnerable versions see below: Fo...

nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...