Lucene search
+L

3618 matches found

Kitploit
Kitploit
added 2026/09/15 9:16 p.m.47 views

nfcgate

NFCGate ⚠️NFCGate is currently being falsely detected as "NGate" malware. Please seethis issue for up-to-date information.⚠️ NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security...

5.9AI score
SaveExploits0References18
Kitploit
Kitploit
added 2026/09/15 8:59 p.m.15 views

CVE-2026-60004

CVE-2026-60004 — Gitea Diffpatch Git Hook RCE Bare Clone Hook Injection → post-index-change → Arbitrary Command Execution Overview CVE-2026-60004 is a critical-severity CVSS 9.8 pre-authentication remote code execution vulnerability in Gitea and Forgejo self-hosted Git platforms, affecting versio...

9.8CVSS8.5AI score0.86777EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/15 8:56 p.m.5 views

CVE-2024-32002

GIT RCE CVE-2024-32002 Descripción | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | Primero necesitas crear los repositorios "calledrepo" y "commandrepo" en git. | La víctima más tarde llamará a calledrepo con "git clone --recursive calledrepo.git" qu...

9CVSS7.7AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/15 7:47 p.m.7 views

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

9CVSS7.8AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/15 6:56 p.m.11 views

CVE-2024-32002

CVE-2024-32002: Exploiting Git RCE via git clone This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on...

9CVSS7.8AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/15 6:26 p.m.4 views

cve-2025-48384-poc

PoC for CVE-2025-48384 This proof-of-concept demonstrates Git's CR-path submodule misparsing vulnerability, leading to arbitrary hook execution during git clone --recurse-submodules. ⚠️ Warning This is for educational and testing purposes only. Do not run this on any production environment. 🧪 Usag...

8CVSS7.5AI score0.04109EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/15 6:14 p.m.41 views

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...

5.4AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/15 1:56 p.m.8 views

CVE-2024-32004

Create tmp repo, set uploadpack.allowfilter to true git init tmp git -C tmp config uploadpack.allowfilter 1 Clone evil from tmp repo git clone --filter=blob:none --no-local --no-checkout tmp evil rm -rf tmp Configure remote filter script git -C evil config remote.origin.uploadpack...

8.1CVSS7.6AI score0.01351EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:39 p.m.8 views

CVE-2025-48384-poc

CVE-2025-48384-poc CVE-2025-48384 takes the form of an improper link resolution link following vulnerability in git. Specifically, filenames with carriage returns are improperly parsed in .git/config, and including a symlink to point a git hook executable located in a submodule as the submodule...

8CVSS7.4AI score0.04109EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/15 1:36 p.m.7 views

CVE-2024-32002

CVE-2024-32002 Solo un pequeño script para explotar CVE-2024-32002 basado en el CVE disponible Cómo hacerlo Primero, crea 2 repositorios vacíos en GitHub o GitLab. Luego git clone y ejecuta este script. Finalmente: git clone –recursive repo2 para RCE automático...

9CVSS7.8AI score0.29234EPSS
SaveExploits32
Kitploit
Kitploit
added 2026/09/15 12:37 p.m.65 views

smuggler

root@kitploit: / | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 12:18 p.m.54 views

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 11:56 a.m.11 views

CVE-2021-21300

CVE-2021-21300 In multiple versions of git, the handling of symbolic links is not strict. After uploading files to git on a case-sensitive file system e.g., Linux, cloning a malicious repository on a host using a case-insensitive file system e.g., Windows may lead to remote command execution...

8CVSS6.8AI score0.88533EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/15 11:36 a.m.8 views

bad_ducky

Bad Ducky Resumen Bad Ducky es otro clon de Rubber Ducky. Está basado en la placa CJMCU BadUsb ATMEGA32u4 - clon de Arduino Leonardo con lector de tarjetas integrado, que se puede comprar en eBay o aliexpress. Mi objetivo era crear algo compatible con los scripts de Rubber Ducky, con la capacidad...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 11:36 a.m.1305 views

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/15 11:22 a.m.9 views

powercat

powercat Netcat: La versión de PowerShell. Compatible con PowerShell versión 2 y posteriores Instalación powercat es una función de PowerShell. Primero debes cargar la función antes de poder ejecutarla. Puedes colocar uno de los siguientes comandos en tu perfil de PowerShell para que powercat se...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:44 a.m.127 views

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:42 a.m.124 views

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi is a 2.4 GHz and 5 GHz WiFi and Bluetooth spectral awareness tool for Linux. It integrates WiFi scanning, Bluetooth Low Energy and Classic discovery, software-defined radio spectrum analysis HackRF, Ubertooth, GPS tracking, FAA RemoteID drone detection, drone/rover-mount...

5.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 10:07 a.m.6 views

CVE-2021-21300

CVE-2021-21300 just clone me then your machine will print "PWNED" ref:https://www.openwall.com/lists/oss-security/2021/03/09/3...

8CVSS6.9AI score0.88533EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/15 9:28 a.m.7 views

CVE-2025-68999-POC

CVE-2025-68999 Happy Addons for Elementor prepare, but then drops $entry-metakey straight into the SQL string without escaping: root@kitploit: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; Because metakey comes from the database, the code treats it as...

8.5CVSS6AI score0.00268EPSS
SaveExploits2References1
Rows per page
Query Builder