Lucene search
+L

9414 matches found

Kitploit
Kitploit
added 2026/09/12 10:40 p.m.11 views

CVE-2026-57517-CWP

CVE-2026-57517 CWP Exploit This repository contains a Go-based proof-of-concept tool for testing a known Control Web Panel CWP vulnerability scenario related to CVE-2026-57517. The implementation targets a blind SQL injection path and includes optional webshell deployment and command execution fl...

9.8CVSS6AI score0.00963EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 10:17 p.m.5 views

CVE-2024-12484

CVE CVE-poc Issue Type SQL Injection Root Cause A SQL injection vulnerability has been identified in the /signuppost.php file in the “Technical Forum Using PHP Source Code” project. The vulnerability stems from the fact that an attacker can inject malicious code via the login username parameter a...

9.8CVSS7.4AI score0.00949EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 10:00 p.m.8 views

Blisqy

1. Blisqy Blisqy is a tool to aid Web Security researchers to find Time-based Blind SQL injection on HTTP Headers and also exploitation of the same vulnerability. The exploitation enables slow data siphon from a database currently supports MySQL/MariaDB only using bitwise operation on printable...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 9:28 p.m.7 views

TFTPlunder

TFTPlunder: an exploit for CVE-2023-29930 This is an exploit script for a blind file read / write vulnerability in the Genesys formerly InIn TFTP provisioning server. Vulnerability info This vulnerability is due to unrestricted configuration options for the TFTP root path and file extensions. In...

8.8CVSS7.8AI score0.02014EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 9:25 p.m.9 views

HBSQLI

HBSQLI: Automated Tester For Header Based Blind SQL Injection HBSQLI is an automated command-line tool for performing Header Based Blind SQL injection attacks on web applications. It automates the process of detecting Header Based Blind SQL injection vulnerabilities, making it easier for security...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 9:24 p.m.8 views

ScanQLi

ScanQLi ScanQLi is a simple SQL injection scanner with somes additionals features. This tool can't exploit the SQLi, it just detect them. Tested on Debian 9 Features Classic Blind Time based GBK soon Recursive scan follow all hrefs of the scanned web site Cookies integration Adjustable wait delay...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 9:17 p.m.8 views

bxss

Bxss - Escáner de XSS Ciego 🚀 Descripción...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/12 9:17 p.m.116 views

bxss

Bxss - Blind XSS Scanner 🚀 Description...

5.3AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/12 8:56 p.m.8 views

SQLbit

SQL Blind Injection Tool A tool for blind SQL injections that uses multithreaded bitwise comparisons to find values of cells in SQL-tables. Works with SQLite at least and supports cookies. It's able to: Search cell values by columns in a table Search characters count in a cells by columns in a...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:54 p.m.6 views

CVE-2025-68055-poc

CVE-2025-68055 Authenticated SQL injection in Hydra Booking Plugin get function, Hydra Booking hardcodes user input directly into the raw sql request instead of using prepare to sanitize input, leading to Time-Based Blind SQL injection. Exploit A simple run command as such will tell you whether o...

8.5CVSS6AI score0.00314EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 8:53 p.m.7 views

PhaseHack

PhaseHack Obtén la información de inicio de sesión de la botnet Phase mediante inyección SQL ciega...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 8:51 p.m.4 views

CVE-2019-20361-EXPLOIT

CVE-2019-20361-EXPLOIT There was a flaw in the WordPress plugin, Email Subscribers & Newsletters before 4.3.1, that allowed SQL statements to be passed to the database in the hash parameter a blind SQL injection vulnerability. This script is a "sanized-version" of original script avalible on...

9.8CVSS7.7AI score0.8511EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/12 8:05 p.m.7 views

CVE-2019-9053

CMS Made Simple Extracts data character by character by checking response delays. Extracts: Salt cmssiteprefs table Admin use...

8.1CVSS7.7AI score0.68581EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/12 7:54 p.m.7 views

CVE-2021-41651

CVE-2021-41651 CVE-2021-41651 Inyección SQL en hotel-mgmt-system El hotel-mgmt-system es vulnerable a un ataque de inyección SQL ciega basada en tiempo sin autenticación. El parámetro cid en la página /processupdateprofile.php no sanea la entrada del usuario, un atacante puede extraer datos...

7.5CVSS7.4AI score0.02377EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 7:53 p.m.5 views

xcat

XCat XCat es una herramienta de línea de comandos para explotar e investigar vulnerabilidades de inyección XPath ciega. Para una referencia completa, lee la documentación aquí: https://xcat.readthedocs.io/en/latest/ Soporta una gran cantidad de características: Selecciona automáticamente...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 7:53 p.m.38 views

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 7:52 p.m.11 views

College-Management-System-course_code-SQL-Injection-Authenticated

College Management System - Inyección SQL 'coursecode' Autenticado 1. Descripción: College Management System 1.0 permite inyección SQL a través del parámetro 'coursecode' en /College-Management-System/admin/asign-single-student-subjects.php. La explotación de este problema podría permitir a un...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 7:51 p.m.7 views

strapi_cms_3.0.0-beta.17.7

Strapi CMS CVE-2019-18818 and 19606 Blind Remote Code Execution of Strapi CMS Version 3.0.0-beta.17.7 and earlier to get reverse shell Getting Started Executing program Using python3 root@kitploit: python3 strapiexp.py -t http://strapi.hack/ -e [email protected] -p newpassword -lhost 127.0.0...

9.8CVSS8.2AI score0.97639EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/12 7:44 p.m.5 views

CVE-2023-42283

Disclaimer For educational purpose only! Details Proof of concept for CVE-2023-42283. Tyk Gateway is vulnerable to SQL injection. Fixed in 5.0.7 version. The URL parameter ‘apiid’ of the "https:///api/errors/count/...?res=day&p=...&apiversion=...&apiid="is vulnerable to Blind SQL injection...

9.8CVSS8.2AI score0.01247EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 7:06 p.m.126 views

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

5.7AI score
SaveExploits0
Rows per page
Query Builder