Blackash-CVE-2025-4322

CVE-2025-4322 : Unauthenticated Privilege Escalation via Password Update "Account Takeover 🔥" Description : The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a...

AutoDirbuster

root@kitploit: / | / / / / / / / / /| |/ / / / / / / / / / / / / / / / / / / / / // / // // / // / / / / // / // // / / // |,////// /./,///// Automatically run and save ffuf scans for multiple IPs Contents Quick Run FAQ Why? What is the recommended usage? What data does this need? How...

webanalyze

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

webanalyze

webanalyze यह Go में Wappalyzer का एक पोर्ट है। यह टूल प्रदर्शन के लिए डिज़ाइन किया गया है और बड़ी संख्या में होस्ट की सूची का परीक्षण करने की अनुमति देता है। !NOTE क्योंकि Wappalyzer ने अपनी ऐप परिभाषाओं तक सार्वजनिक पहुंच हटा दी है, webanalyze वर्तमान में enthec से परिभाषाएँ लोड करता है। स्थापन...

CVE-2023-35086-POC

CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/tin-z Brief description ASUS RT-AX56U V2 & RT-AC86U router firmwares below or equal to version 3.0.0.4.38650460 and 3.0.0.438651529 respectively have a format string vulnerability in the detwan.cgi function of the httpd service that can cau...

bbqsql

BBQSQL A Blind SQL Injection Exploitation Tool Table Of Contents What is BBQSQL? Overview of Readme High Level Usage Install BBQSQL Options Query Syntax Overview HTTP Parameters Export Config Import Config Custom Hooks Found a Bug? Can I Help? What's Up with the Name? What is BBQSQL? Blind SQL...

etherblob-explorer

EtherBlob Explorer Search and extract blob files on the Ethereum network using Etherscan.io API. Introduction EtherBlob Explorer is a tool intended for researchers, analysts, CTF players or anyone curious enough wanting to search for different kinds of files or any meaningful human-supplied data ...

etherblob-explorer

EtherBlob Explorer Busca y extrae archivos blob en la red Ethereum usando la API de Etherscan.io. Introducción EtherBlob Explorer es una herramienta pensada para investigadores, analistas, participantes de CTF o cualquier persona curiosa que desee buscar diferentes tipos de archivos o cualquier...

toolbox

-Significant%20AI%2C%20fully%20reviewed-1f77b4 MCP-based application security testing tools for your coding agent. Not a scanner — a collaborative workbench. Agents struggle with UI and stateful APIs; you're good at both. Sectool lets you explore an application through its proxy while an agent...

Preparation-Guide-to-OSCP

Guide to OSCP I am writing this guide to cover all OSCP topics as well as other infosec knowledge in details, I will also provide a cheat-sheet in each section so that you can use the commands directly once you understand the topics/tools. But I think to become a good pentester you should know ho...

UhOh365

UhOh365 A script that can see if an email address is valid in Office365. This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't. Microsoft does not consider "email enumeration" a vulnerabilit...

class-dump

class-dump class-dump is a command-line utility for examining the Objective-C segment of Mach-O files. It generates declarations for the classes, categories and protocols. This is the same information provided by using 'otool -ov', but presented as normal Objective-C declarations. The latest...

CVE-2022-22978

CVE-2022-22978: Spring Security Authorization Bypass Summary Spring Security framework is a security framework that provides authentication and authorization functions in Spring-based applications. In Spring Security versions 5.5.6, 5.6.3 and earlier, when using RegexRequestMatcher, a function th...

CVE-2026-41940-PoC-Exploit

🚀 CVE-2026-41940 - Эксплойт обхода аутентификации cPanel/WHM cPanel & WHM Edition - CRLF-инъекция для обхода аутентификации и полного перехвата сессии 📌 Обзор Этот эксплойт использует CVE-2026-41940 — критическую уязвимость обхода аутентификации в cPanel/WHM. Внедряя специально сформированный...

burp_global_match_replace

Global Match & Replace GMR Burp Suite Extension Global Match & Replace GMR extends Burp Suite with match/replace rules to apply globally or across multiple tools of your choice Repeater, Intruder, Proxy, etc.. It provides per-request and response diffs so you can see exactly what changed. This...

davscan

DAVScan DAVScan is a quick and lightweight webdav scanner designed to discover hidden files and folders on DAV enabled webservers. The scanner works by taking advantage of overly privileged/misconfigured WebDAV servers or servers vulnerable to various disclosure or authentication bypass...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

hsecscan

hsecscan HTTP प्रतिक्रिया हैडर के लिए एक सुरक्षा स्कैनर. आवश्यकताएँ Python 2.x Python मॉड्यूल os.path argparse sqlite3 urlparse urllib2 urllib json ssl स्थापना root@kitploit: $ pip install hsecscan उपयोग root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

CrushFTP-CVE-2024-4040-illdeed

CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This repository contains a stealthy Python proof-of-concept PoC exploit for CVE-2024-4040 , a critical vulnerability in CrushFTP v10 and below that allows an attacker to bypass authentication using a forged CrushAuth cookie and AWS-style...

CVE-2026-86254

wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using raw integer comparison instead of the issamegym helper, allowing gym staff with gym=None to delete, deactivate, or activate any other user...