326197 matches found
CVE-2017-5638
CVE-2017-5638 Table of Contents 1. Overview 2. Dependencies 3. Usage Overview This project is a prove-of-concept for the Apache Struts vulnerabilty. The goal was to create software that can generate and test random IPs for the vulnerabilty described above. Use this project on your own risk and fo...
xcrawl3r
xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...
Atlassian-Bitbucket-CVE-2022-36804
Atlassian-Bitbucket-Server-CVE-2022-36804 A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions 7.6.17, 7.17.10, 7.21.4...
DeepTrap
DeepTrap English | δΈζ Open-world security evaluation for OpenClaw agents under adversarial execution contexts. DeepTrap is a security benchmark for evaluating whether OpenClaw agents can complete benign user tasks while resisting malicious execution-context pressure: poisoned workspace files,...
golddigger
Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. root@kitploit: virtualenv...
bbot
BEEΒ·bot is a multipurpose scanner inspired by Spiderfoot, built to automate your Recon , Bug Bounties , and ASM! https://github.com/blacklanternsecurity/bbot/assets/20261699/e539e89b-92ea-46fa-b893-9cde94eebf81 A BBOT scan in real-time - visualization withVivaGraphJS Installation root@kitploit:...
burpcommander
burpcommander Ruby command-line interface to Burp Suite's REST API Usage root@kitploit: burpcommander VERSION: 1.0.1 - UPDATED: 08/29/2018 -t, --target IP Address Defaults to 127.0.0.1 -p, --port Port Number Defaults to 1337 -k, --key API Key If you require an API key specify it here -i,...
flare-emu
flare-emu flare-emu marries a supported binary analysis framework, such as IDA Pro or Radare2, with Unicornβs emulation framework to provide the user with an easy to use and flexible interface for scripting emulation tasks. It is designed to handle all the housekeeping of setting up a flexible an...
CVE-2026-49176_BOF
CVE-2026-49176 Cobalt Strike BOF Cobalt Strike Beacon Object File BOF for local privilege escalation via Windows WalletService CVE-2026-49176 , fixed July 2026. From a medium-integrity standard user Beacon, this tool stages a malicious Wallet ESE database, redirects Documents, triggers...
cyclonedx-cli
root@kitploit: / / / / / \ |/ / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / / / // / | / // // / /, ///// /////|| /// // Usage: cyclonedx command options Options: --version Show version information -?, -h, --help Show help and usage information Commands: add...
odat
Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...
bkcrack
bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...
espoofer
espoofer espoofer is an open-source testing tool to bypass SPF, DKIM, and DMARC authentication in email systems. It helps mail server administrators and penetration testers to check whether the target email server and client are vulnerable to email spoofing attacks or can be abused to send spoofi...
CVE-2022-46169
CVE-2022-46169 POC This is a Proof of Concept POC script for the CVE-2022-46169 vulnerability that affects Cacti version 1.2.22. Description The CVE-2022-46169 vulnerability allows an unauthenticated command injection in Cacti versions through 1.2.22 in order to achieve unauthenticated remote cod...
XenoScan
XenoScan XenoScan is a memory scanner which can be used to scan the memory of processes to locate the specific locations of important values. These types of tools are typically used when hacking video games, as they allow one to locate the values representing the game's state in memory. XenoScan ...
gitxray
Welcome to Gitxray Gitxray short for Git X-Ray is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that would otherwise be very time-consuming to obtain...
CVE-2025-9074-Docker-Desktop-API-Escape-PoC
π docker-shell A lightweight, dependency-free bash script that gives you an emulated interactive shell inside a Docker container β using nothing but curl, dd, od, and awk. No Python, no jq, no editor required. Built for environments where you only have raw shell access and need to exec commands...
JKS-private-key-cracker-hashcat
JKS private key cracker - Nail in the JKS coffin The Java Key Store JKS is the Java way of storing one or several cryptographic private and public keys for asymmetric cryptography in a file. While there are various key store formats, Java and Android still default to the JKS file format. JKS is o...
CVE-2021-27850_POC
CVE-2021-27850 Exploit Overview CVE-2021-27850 is a critical unauthenticated remote code execution vulnerability that was found in all recent versions of Apache Tapestry, by downloading the AppModule.class file we can leak the HMAC Secret key used to sign all the serialized objects in apache...
CVE-2022-42889-Text4Shell-POC
CVE-2022-42889 Text4Shell Testing Script This repository contains a Python script to automate the process of testing for a vulnerability known as Text4Shell, referenced under the CVE id: CVE-2022-42889. About Text4Shell CVE-2022-42889 Text4Shell is a critical vulnerability that affects a wide ran...