authelia

!OpenSSF Best...

Code-27-Companion-Hub-Exploits

Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...

android-app

ProtonVPN para Android Copyright c 2019 Proton AG Descarga !Disponible en GitHubhttps://assets.kitploit.com/production/public/readmes/50914/e73aa9f910b0d8c3484bda6ecf61bb21d0...

CVE-2019-10475

CVE-2019-10475 Quick POC for Jenkins CVE-2019-10475 / SECURITY-1490 reported on 2019-10-23. The issue is within the build-metrics plugin which generates some basic build metrics. It's commonly used with the Jenkins sidebar links plugin. This is a simple & generic reflected XSS vulnerability. The...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

pacumen

There is no nead to install. But run python setup.py build to install dependancies automatically...

CVE-2026-33017-Langflow-RCE

CVE-2026-33017 - Langflow RCE Vulnerability xpl0ited by infrar3d This proof‑of‑concept exploit targets a critical Remote Code Execution RCE vulnerability in Langflow versions prior to 1.9.0. The vulnerability allows unauthenticated attackers to execute arbitrary system commands by injecting...

edk2

============== Proyecto EDK II Un entorno de desarrollo de firmware moderno, rico en funciones y multiplataforma para las especificaciones UEFI y PI de www.uefi.org. .. image::...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: root@kitploit: dive or you can dive with Docker directly: root@kitploit: alias dive="docker run -ti --...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

bLaCk-eye-RSA-Attacking-Toolkit-v0.1f-compiled

bLaCk-eye RSA Attacking Toolkit v0.1f Description RAT v0.1f compiled for Windows Since from the official site you can only download source and no executable. If you don't have time to waste with the compiler and miracl library this is ready to go...

CVE-2021-36260-metasploit

CVE-2021-36260-metasploit the metasploit scriptPOC about CVE-2021-36260. A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. preparation POC...

CVE-2018-6574

CVE-2018-6574 Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow go get remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. from mitre RCE command The...

CVE-2025-53652-Jenkins-Git-Parameter-Analysis

CVE-2025-53652: Jenkins Git Parameter Plugin Unvalidated Input Vulnerability. Summary This vulnerability arises because user-controlled input from Jenkins build parameters is injected unsafely into the Git checkout command. User input is provided as a build parameter e.g., gitParameters, which ca...

CVE-2017-9805_example_build

This repository does not have a README...

CVE-2025-55182

CVE-2025-55182 Vulnerable Application Build and run: root@kitploit: docker compose build docker compose run --rm --entrypoint 'npm install' node docker compose run --rm --entrypoint 'npm run build' node docker compose up POC from https://github.com/msanft/CVE-2025-55182: root@kitploit: node poc.j...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

ingress-nginx-0.21-1.19.5

BUILD: root@kitploit: cd ./ingress-nginx-0.21-1.19.5 cd images/nginx/ make cd - cd images/e2e/ make docker-build cd - e2etag=docker images|grep e2e|awk 'print $2' sed -i "s/e2e:v12232020-dce860a/e2e:$e2etag/" build/go-in-docker.sh make echo -e '\n\n\n\n\n' docker images|grep ingress-nginx...

CVE-2023-21768

Exploit with IO Rings for CVE-2023-21768 Tested on Windows 22H2 22621.963...

crushftp_cve-2025-31161

CrushFTP 10.8.0 — Compilación vulnerable a CVE-2025-31161 Binario precompilado de CrushFTP 10.8.0 para pruebas de penetración autorizadas de CVE-2025-31161. !CAUTION Esta es una compilación de aplicación intencionalmente vulnerable. Solo para pruebas de seguridad e investigación autorizadas. No l...