Lucene search
+L

311763 matches found

Kitploit
Kitploit
added 2026/09/10 5:47 p.m.6 views

PersistenceSniper

PersistenceSniper --- The Why Why writing such a tool, you might ask. Well, for starters, I tried looking around and I did not find a tool which suited my particular use case, which was looking for known persistence techniques, automatically, across multiple machines, while also being able to...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 5:47 p.m.9 views

GPOZaurr

GPOZaurr Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them. GPOZaurr provides 360 degrees of information about Group Policies and their settings. Just a single command Invoke-GPOZaurr provides...

5.8AI score
SaveExploits0References1
The Hacker News
The Hacker News
added 2026/09/10 5:47 p.m.5 views

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much. A trusted service becomes part of a phishing chain. An old bug still gets results. An exposed system stays exposed. A package looks usef...

8CVSS0.00126EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 5:46 p.m.7 views

CVE-2020-28018

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...

9.8CVSS7.8AI score0.5675EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/10 5:46 p.m.8 views

Forbidden-Buster

Forbidden Buster is a tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at your own risk. Features Probes HTTP 401 and 403...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 5:45 p.m.5 views

exploit-CVE-2016-10034

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

9.8CVSS8.5AI score0.99714EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/10 5:45 p.m.3 views

cve-2018-7600-drupalgeddon2-lab

CVE-2018-7600 Drupalgeddon2 Vulnerability Lab Educational lab demonstrating exploitation of CVE-2018-7600 Drupalgeddon2 using a vulnerable Drupal 7.56 environment deployed with Docker. This project simulates a real-world vulnerability assessment workflow, including: Vulnerable environment setup...

9.8CVSS7.9AI score0.99991EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/10 5:45 p.m.7 views

SuricataLog

SuricataLog When I started learning how to use Suricata quickly found that I needed a tool to inspect the eve.json file; Most of the tutorials and documentation out there suggested installing a stack to do the following tasks: 1. Store the logs in a central location 2. Normalize and enrich the...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 5:45 p.m.8 views

CVE-2022-45025

CVE-2022-45025 Command injection via PDF import in Markdown Preview Enhanced VSCode, Atom Description The Mume markdown tool library was vulnerable to command injection due to use of spawn command with shell: true option. This could allow an attacker to achieve arbitary code execution by tricking...

9.8CVSS8.2AI score0.34766EPSS
SaveExploits2References4
Kitploit
Kitploit
added 2026/09/10 5:44 p.m.10 views

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228. Deployment To deploy this project run root@kitploit: sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Running Tests To run tests, run the following...

10CVSS7.5AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/10 5:44 p.m.7 views

TripleCross

TripleCross TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology. TripleCross is inspired by previous implant designs in this area, notably the works of Jeff Dileo at DEFCON 271, Pat Hogan at DEFCON 292, Guillaume Fournier and Sylvain Afchain als...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/10 5:42 p.m.6 views

DesckVB-RAT

DesckVB RAT v2.9 — Modular .NET RAT, Multi-Stage Delivery & Plugin Ecosystem Toolchain Linkage to “Pjoao1578” Author: ShadowOpCode X/Twitter: https://x.com/ShadowOpCode This repository accompanies a full technical report documenting an active malware ecosystem centered around DesckVB RAT , a...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 5:42 p.m.7 views

apxutil

A tool to manipulate Schneider Electric PLC archive files This tool can extract and reassemble PLC "archive" files, used by several Schneider Electric PLC:s, including at least M580, M340 and Quantum. The archive files with an extension of .sta are really a zip archive containing a few files...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 5:41 p.m.7 views

WHS3_vulhub

CVE-2017-8386: git-shell Sandbox Bypass to RCE PoC 정수진@suz1n Overview Git-shell provides an environment that only allows restricted git commands via SSH. However, in specific versions of git-shell such as 2.12.2, a vulnerability CVE-2017-8386 exists that exploits the less command to bypass the...

8.8CVSS7.2AI score0.12387EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/10 5:41 p.m.5 views

CVE-2023-25157

CVE-2023-25157 - GeoServer SQL Injection - PoC CVE: CVE-2023-25157 Date: 06/06/2023 Vendor/Software: GeoServer Severity: 9.8/10 - This script is a proof of concept for OGC Filter SQL Injection vulnerabilities in GeoServer, a popular open-source software server for sharing geospatial data. It send...

9.8CVSS8.2AI score0.85247EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/10 5:41 p.m.7 views

firefox-devtools-mcp

Firefox DevTools MCP Model Context Protocol server for automating Firefox via WebDriver BiDi through Selenium WebDriver. Works with Claude Code, Claude Desktop, Cursor, Cline and other MCP clients. Repository: https://github.com/mozilla/firefox-devtools-mcp Note : This MCP server requires a local...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/10 5:41 p.m.7 views

SQLRecon

SQLRecon SQLRecon is a Microsoft SQL Server toolkit that is designed for offensive reconnaissance and post-exploitation. For detailed information on how to use each technique, refer to the wiki. You can download a copy of SQLRecon from the releases page. Alternatively, feel free to compile the...

6.1AI score
SaveExploits0References23
Kitploit
Kitploit
added 2026/09/10 5:41 p.m.6 views

CVE-2023-24706

CVE-2022-24706 Apache CouchDB Remote Command Execution Vulnerability PoC...

10CVSS8.2AI score0.9251EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/10 5:41 p.m.4 views

CTT-Apple-Silicon-Refraction

CTT-Apple-Silicon-Refraction webkitrefraction.js The 33-Layer WebGL Payload ​This JavaScript payload uses the \alpha constant to create a high-frequency "Memory Shiver." It induces the Use-After-Free UAF in CVE-2025-43529 by desynchronizing the WebKit garbage collector from the GPU's Metal comman...

8.8CVSS5.9AI score0.08891EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/10 5:41 p.m.7 views

fracture

Fracture FragAttacks WiFi Penetration Framework CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture automates three novel attack chains via 802.11 frame injection. It exploits the A-MSDU aggregation vulnerability in WPA2/WPA3 to inject arbitrary plaintext frames into encrypted networks —...

3.5CVSS7AI score0.05765EPSS
SaveExploits4
Rows per page
Query Builder