CVE-2026-24061

CVE-2026-24061 GNU inetutils-telnetd - Remote Authentication Bypass A security research tool for exploiting CVE-2026-24061, a critical remote authentication bypass vulnerability in GNU inetutils-telnetd that allows instant root shell access without authentication. Table of Contents Vulnerability...

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Overview This code is a Python version POC for CVE-2023-32315. It performs a series of operations to verify whether the target website is affected by the CVE-2023-32315 vulnerability and attempts to execute certain operations on the affected...

SharpFtpC2

SharpFtpC2 PoC SharpFtpC2 is a small, experimental project aimed at exploring the possibility of using FTPS for relaying commands and responses between two remote computers. It employs the FTP protocol as a makeshift tunnel through which the computers, both acting as clients connected to an FTP...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Bash script to remotely identify and/or exploit the Log4j vulnerability. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of the audited...

unicorn

ユニコーンエンジン コントリビュータ募集中！ 詳細はこちら。 Unicornは、QEMUをベースとした、軽量でマルチプラットフォーム、マルチアーキテクチャのCPUエミュレータフレームワークです。 Unicornには、以下のような比類のない機能があります。 マルチアーキテクチャ: ARM、ARM64 ARMv8、M68K、MIPS、PowerPC、RISCV、SPARC、S390X、TriCore、X86（16、32、64ビット） クリーン/シンプル/軽量/直感的なアーキテクチャ非依存のAPI 純粋なC言語で実装されており、Crystal、Clojure、Visual...

Zoho_CVE-2022-23779

ZohoCVE-2022-23779 Internal Hostname Disclosure Vulnerability Proof-of-Concept Exploit Step 1: curl -ILk https://IP:port/themes Step 2: Read the HTTP redirect response and anaylze the Location HTTP response header. PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

etl2pcapng

About This tool enables you to view ndiscap and pktmon packet captures with Wireshark. Due to performance problems with the other popular packet capture method WinPcap, which was included with older versions of Wireshark, these inbox tools should be preferred. Windows has several inbox components...

patchkit

patchkit Patches an ELF binary using one or more simple Python scripts. Usage: root@kitploit: patch patchdir|file... patchdir Contains one or more Python patch files, which will be executed in alphabetical order against a binary. Patch Examples Nopping an address, injecting an assembly function,...

CVE-2025-55182-React2Shell-RCE-Shell

‼️ CVE-2025-55182 Pwn React2Shell RCE Exploit 可交互式Shell提示与批量利用 本存储库提供了针对 CVE-2025-55182 的有效概念验证代码，该漏洞影响部分 Next.js 部署，可实现远程代码执行（RCE）。该工具在利用成功后开启交互式 Shell 提示，供安全研究人员测试和验证可利用性。请负责任地使用，并仅在授权目标上操作。 🕸️ 用法： root@kitploit: Getting Started git clone...

asf__nifi_CVE-2023-36542_1-22-0

Apache NiFi Status Resources Contacts !Track Issueshttps://img...

git-dumper

git-dumper 一个从网站转储 git 仓库的工具。 安装 可以通过 pip 轻松安装： root@kitploit: pip install git-dumper 使用 root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional arguments: -h, --help show this help message and exit --proxy...

PenBox

PenBox – A Penetration Testing Framework A Penetration Testing Framework , The Hacker’s Repo our hope is in the last version we will have evry script that a hacker needs Information Gathering : nmap Setoolkit Port Scanning Host To IP wordpress user enumeration CMS scanner XSStracer - checks remot...

misp-dashboard

misp-dashboard A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of...

PwnzzAI

🍕 欢迎来到 PwnzzAI/pəʊnzɑː/ 商店 – 脆弱的披萨店！💻 在 PwnzzAI 商店，每一片披萨都提供了一份 全面的 AI 安全指导 。这个动手实践的学习平台通过一个引人入胜、实用的披萨店场景，帮助专业人士理解如何广泛保护 AI 技术 。 就像不正确的配料会毁掉一块披萨一样，有缺陷的提示或不充分的架构可能使 AI 技术容易受到严重威胁，包括信息泄露、知识产权盗窃或未授权访问。 在这里，您将探索 实际示例 ，了解漏洞是如何被创建、利用和缓解的。您需要以 alice/alice 或 bob/bob 登录才能访问某些页面。拿一块披萨，深入其中，探索学习 AI 安全可以如此美味。...

GWTMap

Description GWTMap is a tool to help map the attack surface of Google Web Toolkit GWT based applications. The purpose of this tool is to facilitate the extraction of any service method endpoints buried within a modern GWT application's obfuscated client-side code, and attempt to generate example...

Forerunner

Forerunner The Forerunner library is a fast, lightweight, and extensible networking library created to aid in the development of robust network centric applications such as: IP Scanners, Port Knockers, Clients, Servers, etc. In it's current state, the Forerunner library is able to both...

Taken

Taken Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover. What all you can do with Subdomain Takeover - Cookies stealing, If cookies are set with domain attribute set to the hijacked subdomain. CORS request, If Access-Control-Allow-Origin is set to...

Go365

Go365 v2.0 Fixed AWS gateway issues thanks h0useh3ad! No longer dies when proxy server connections fail Added the graph endpoint Please read all of this README before using Go365! Go365 is a tool designed to perform user enumeration and password guessing attacks on organizations that use Office36...

proxychains-ng

ProxyChains-NG 版本 4.17 自述文件 ProxyChains 是一个 UNIX 程序，它通过预加载的 DLL（dlsym、LDPRELOAD）挂钩动态链接程序中的网络相关 libc 函数，并将连接重定向到 SOCKS4a/5 或 HTTP 代理。它仅支持 TCP（不支持 UDP/ICMP 等）。 它的工作方式本质上是一种 HACK；因此它有可能无法与你的程序配合使用，尤其是当你的程序是脚本、会启动大量进程（如后台守护进程）或使用 dlopen 加载“模块”时（glibc 动态链接器中的一个 bug）。不过，它应该适用于简单的编译型（C/C++）动态链接程序。...

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - PoC de Escalada de Privilegios en GLPI mediante Manipulación de authtype 📌 Resumen Este repositorio proporciona una Prueba de Concepto PoC ética para CVE-2026-53625 , una vulnerabilidad de escalada de privilegios de severidad Alta en GLPI que afecta a todas las versiones desde 0....