katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

VMWare-CVE-Check

VMWare-CVE-Check Usage: ./example.py/sh list.txt...

CVE-2025-27636-Practical-Lab

🛡️ CVE-2025-27636 — Practical Exploitation Lab for Apache Camel 🔍 Overview CVE-2025-27636 is a critical Remote Code Execution RCE vulnerability in Apache Camel , specifically in the camel-exec component. It stems from a subtle but dangerous issue: TheDefaultHeaderFilterStrategy performs...

CVE-2026-23111-POC-noddlenpottato

CVE-2026-23111 — noddlenpottato nftables catchall UAF → unprivileged LPE. user to root on most 5.10—6.18 linux kernels. auto-adapts to the target kernel — detects struct offsets, resolves symbols, finds ROP gadgets, determines slab cache, generates tailored exploit, compiles and runs. nftables...

CVE-2026-89694

A flaw was found in the Linux kernel's NFSv4.2 server nfsd. An authenticated NFSv4.2 client could exploit a vulnerability in the managecpntfstate function by guessing a state identifier. This improper ownership check allows the client to cancel and free another client's copy-notify stateid, leadi...

xz-backdoor-CVE-2024-3094-Check

xz-backdoor-CVE-2024-3094-Check Verifica si tu versión instalada de xz-utils es vulnerable al backdoor CVE-2024-3094. Esta comprobación es para Kali Linux u otras instalaciones basadas en Debian. Uso root@kitploit: git https://github.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check.git cd...

CVE-2019-0708-Check

360 RDP vulnerability non-destructive scanner: https://cert.360.cn/warning/detail?id=1caed77a5620fc7da993fea91c237ed5 GitHub project: https://github.com/hualy13/CVE-2019-0708-Check...

SOC_287

SOC287 - Arbitrary File Read on Checkpoint Security Gateway CVE-2024-24919 Overview This repository contains a detailed walkthrough of the CVE-2024-24919 vulnerability affecting Check Point Security Gateways. The vulnerability allows arbitrary file read, potentially exposing sensitive system file...

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Unauthenticated Arbitrary File Upload Description The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the...

CVE-2026-89439

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST driver. A missing NULL check for isstcommon.sstinst during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vulnerability could lead to a system crash, resulting in a Denial of...

Check-Point_poc

Check-Pointpoc Check-Point Security Gateway Arbitrary File Read Vulnerability CVE-2024-24919 python Check-Pointpoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--'...

showstopper

ShowStopper - Herramienta de exploración de trucos Anti-Debug Contribuido por Check Point Software Technologies LTD. Programado por Yaraslau Harakhavik Resumen El proyecto ShowStopper es una herramienta para ayudar a los investigadores de malware a explorar y probar técnicas anti-debug o verifica...

windows-security-cve-2017-8543

Example InSpec Profile This example shows the implementation of an InSpec profile...

CVE-2024-24919

CVE-2024-24919 Nmap script to check vulnerability CVE-2024-24919 Vulnerability References: https://www.cvedetails.com/cve/CVE-2024-24919/ https://support.checkpoint.com/results/sk/sk182336 Dorks Hunter Hunter: /product.name="Check Point SSL Network Extender" Shodan SHODAN: http.title:"Check Point...

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

Summary A FILE response whose filePath embeds request data e.g. "/srv/public/queryParam 'name'", the documented way to let the client pick a file is confined by getSafeFilePath with resolvedPath.startsWithstaticBaseDir. That prefix test has no path-separator boundary, so a ../-escaped path whose...

second-order

Second Order Escanea aplicaciones web para la toma de control de subdominios de segundo orden rastreando la aplicación y recolectando URLs y otros datos que coincidan con ciertas reglas o respondan de cierta manera. Instalación Desde binario Descarga un binario precompilado desde la página de...

Check-LocalAdminHash

Check-LocalAdminHash Check-LocalAdminHash es una herramienta de PowerShell que intenta autenticarse contra múltiples equipos ya sea a través de WMI o SMB utilizando un hash de contraseña para determinar si la credencial proporcionada es de administrador local. Es útil si obtienes un hash de...

CVE-2025-3102

🔐 CVE-2025-3102 – Authentication Bypass in SureTriggers WordPress Plugin 🚨 CVE-2025-3102 is a critical authentication bypass vulnerability affecting the SureTriggers: All-in-One Automation Platform WordPress plugin, which is actively installed on over 100,000 websites. Due to the nature of the fl...

web-check

Web-Check Comprehensive, on-demand open source intelligence for any website 🌐web-check.xyz Kindly supported by: Terminal Trove The $HOME of all things in the terminal | Warp Built for coding with multiple AI agents ---|--- Contents About Screenshot Live Demo Mirror Features Usage Deployment...

CVE-2022-21668-Pipenv-RCE-vulnerability

CVE-2022-21668-Pipenv-RCE-vulnerability 1. Introduction In this document the Pipenv vulnerabilityCVE-2022-21668 is discussed in detail. The following sections cover the bug code in pipenv/utils.py file which opens up the door for various RCE attacks and also about the recent fix which validates...