jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

CVE-2021-39165

CVE-2021-39165 This Python script allows to exploit CVE-2021-39165 in Cachet prior to and including 2.3.18 automatically. References : https://github.com/fiveai/Cachet/security/advisories/GHSA-79mg-4w23-4fqc https://nvd.nist.gov/vuln/detail/CVE-2021-39165...

oracle-xxe-sqli

oracle-xxe-sqli Automated Oracle CVE-2014-6577 exploitation via SQLi Usage: root@kitploit: oracle-xxe-sqli.py -h -i IP -p PORT --disable-server --custom-headers CUSTOMHEADERS -f PAYLOADFILE url Options positional arguments: url URL to inject. Use as the injection marker, just once. optional...

CVE-2023-4220

autopwn...

CVE-2023-4220

RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...

Mass-Assigner

Mass Assigner Mass Assigner is a powerful tool designed to identify and exploit mass assignment vulnerabilities in web applications. It achieves this by first retrieving data from a specified request, such as fetching user profile data. Then, it systematically attempts to apply each parameter...

metateta

Metateta Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit For faster pen testing for large networks What You Can Do Scanning with all metasploit modules for specific network Protocol like smb,smtp,snmp Run all Auxiliary modules against specific network Protoc...

harbor

Présentation de l'équipe Équipe de sécurité Chongqing Jiugongge se consacre au partage d'outils de sécurité open source. Ses axes de recherche couvrent la confrontation rouge/bleue, la sécurité Web, la sécurité mobile, le développement sécurisé, la construction de la sécurité d'entreprise, la...

nodexp

NodeXP - Node.js सेवाओं के लिए पता लगाने और शोषण उपकरण! NodeXP एक एकीकृत उपकरण है, जो Python 2.7 में लिखा गया है, जो Node.js सेवाओं पर संभावित कमजोरियों का पता लगाने और साथ ही ServerSideJavascriptInjection हमले के आधार पर उन्हें स्वचालित रूप से शोषण करने में सक्षम है। शुरू करना - स्थापना और उपयोग...

WIndows-7-automated-exploitation-using-metasploit-framework-

This repository does not have a README...

CVE-2024-3400

CVE-2024-3400 लेखक: wa6n3r | GitHub | Web विवरण Palo Alto Networks PAN-OS डिवाइसों में CVE-2024-3400 भेद्यता के स्वचालित शोषण के लिए एक टूल। यह बहु-थ्रेडेड स्कैनिंग, आर्टिफैक्ट्स की स्वचालित डाउनलोडिंग और विस्तृत लॉगिंग का समर्थन करता है। !!!महत्वपूर्ण : इसका उपयोग केवल उन प्रणालियों पर करें जिनक...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS विशेषाधिकार वृद्धि इस रिपॉजिटरी में एक Python स्क्रिप्ट है जो Camaleon CMS में CVE-2025-2304 विशेषाधिकार वृद्धि भेद्यता के शोषण को स्वचालित करती है। इसका परीक्षण संस्करण 2.9.0 पर किया गया है। उपयोग root@kitploit: python exp.py http://target.exmaple user password123 लि...

Exploit for CVE-2026-10795

CVE-2026-10795 UpdraftPlus Auto-Exploit & Mass Scanner Au...

PT-2026-46364

Unauthenticated Local File Inclusion in Gita = 1.11 versions...

PT-2026-46326

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

PT-2026-46376

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

PT-2026-46371

Unauthenticated Local File Inclusion in Eros = 1.3 versions...

📄 WordPress AI Engine 3.1.3 Mass Enumeration

This advisory documents a fully automated PHP-based exploitation framework designed to perform mass enumeration, plugin detection, token extraction, and automated account creation targeting vulnerable WordPress MCP-related REST API endpoints...

From Exposure to Exploitation: How AI Collapses Your Response Window

We’ve all seen this before: a developer deploys a new cloud workload and grants overly broad permissions just to keep the sprint moving. An engineer generates a "temporary" API key for testing and forgets to revoke it. In the past, these were minor operational risks, debts you’d eventually pay do...