nextssrf

root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

nextssrf

root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

NextRce

NextRce - Strumento di exploit RSC per Next.js CVE-2025-55182 Scanner di vulnerabilità avanzato ed exploiter per Next.js App Router Sviluppato daMitsec 🔥 Nuova funzionalità: Modalità di bypass WAF UTF-16LE I payload standard che contengono parole chiave come childprocess o execSync vengono spesso...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

driftwood

Driftwood ⚠️ The Driftwood CLI tool is no longer supported. Please use TruffleHog instead! ⚠️ Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. Driftwood performs lookups with the computed public key, so the...

wwwgrep

WWWGrep OWASP Foundation Web Respository Autor: Mark Deen & Aditi Mohan Einleitung WWWGrep ist ein schneller Such-„Grepping“-Mechanismus, der HTML-Elemente nach Typ durchsucht und fokussierte einzelne, mehrere dateibasierte URLs und rekursive bezogen auf die Root-Domain oder nicht Suchen...

Awesome-WAF

Awesome WAF Alles über Web Application Firewalls WAFs aus Sicherheitsperspektive. 🔥 Vorwort: Dies war ursprünglich meine eigene Sammlung zu WAFs. Ich stelle es als Open Source zur Verfügung, in der Hoffnung, dass es für Pentester und Forscher da draußen nützlich sein wird. Wie es so schön heißt:...

CVE-2025-46080

BUGAuthor: yggcwhat Versione interessata: Huocms Fornitore: https://huocms.com/ Indirizzo del codice sorgente: https://gitee.com/digital-flag/huocms File della vulnerabilità: AttachmentController.php Versione interessata： HuoCMS - controller -backend - AttachmentController.php:editFileUrl Il...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2021-41730

TENDA Authorization Remote Command Execution Exploit-Autor: SHENGXI [email protected] Hersteller: TENDA CVE-2021-41730 - /bin/httpd Firmware-Version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware-Link:...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

Log4Shell-CVE-2021-44228-ENV

Ambiente di riproduzione di Log4Shell Spiegazione dell'esempio IP della macchina vittima: 47.47.47.47 IP della macchina attaccante: 48.48.48.48 Esecuzione del Docker vulnerabile sulla macchina vittima Usa il DockerFile per creare l'immagine Docker ed eseguire: root@kitploit: docker build . -t vul...

CVE-202122986-EXP

F5 BIG-IP 远程命令执行漏洞（CVE-2021-22986） Impact de la vulnérabilité F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host:...

ezsploit

ezsploit Alt text Linux bash script automation for metasploit Command line script for automating metasploit functions Checks for metasploit service and starts if not present Easily craft meterpreter reversetcp payloads for Windows, Linux, Android and Mac Start multiple meterpreter reversetcp...

nebulousAD

⚠️ Ein Hinweis für NebulousAD-Benutzer Ab dem 14. April wird NuID die NebulousAD-API, mit der dieser Code kommuniziert, nicht mehr hosten. Als kleines Entwicklerteam haben wir festgestellt, dass es nicht machbar ist, sowohl das NebulousAD-Portal als auch unser Authentifizierungs-Entwicklerportal...

honeypot-dlink-CVE-2024-3273

Honeypot-dlink-CVE-2024-3273 Schneller und schmutziger Honeypot für CVE-2024-3273. Diese Vorlage kann verwendet werden, um in 10 Minuten einen einfachen Honeypot einzurichten. TL;DR: Finden Sie ein fofa, shodan, onyphe, .... Klonen Sie es mit dem wgetclonehttp.sh. Manuelle Anpassungen, um den...

hikvision-unauthenticated-rce-cve-2021-36260

Vulnerabilidade RCE CVE-2021-36260 da Hikvision Descrição da vulnerabilidade Os atacantes podem usar esta vulnerabilidade para obter controle total do dispositivo com um shell root irrestrito, mesmo que o proprietário do dispositivo esteja limitado a um shell protegido limitado psh. Além de invad...

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 Corruzione della page-cache per COW parziale in actpedit di net/sched commit responsabile 899ee91156e5, presente dalla v5.18 .. corretta nella v7.1-rc7. packeteditmeme.c la trasforma in root locale non privilegiata: un processo figlio con CAPNETADMIN in un userns...

cve-2022-31692

CVE-2022-31692 Demo Panoramica Una semplice applicazione Spring Boot che dimostra una configurazione vulnerabile a CVE-2022-31692. Questa vulnerabilità può attirare l'attenzione per la sua gravità: ha un punteggio base CVSS 3.x di 9.8 in quanto consente il bypass dell'autenticazione. Lo scopo di...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...