bearer v2.1.1

Scan your source code against top security and privacy risks. Bearer is a static application security testing SAST tool designed to scan your source code and analyze data flows to identify, filter, and prioritize security and privacy risks. Bearer offers a free, open solution, Bearer CLI, and a...

Qinglong-Combo-Exploit

🐉 Qinglong Combo Exploit Qinglong Panel Three Vulnerabili...

paint2die

Exploit mais simples e confiável para RichFaces Paint2DResource CVE-2018-12533 RF-14310 Instalação • Uso • Executando Paint2Die Instruções de Instalação root@kitploit: git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt Uso...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

CVE-2026-75574

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

RFCpwn

RFCpwn Un toolkit di enumerazione e sfruttamento SAP che utilizza chiamate RFC Twitter: @icryo Questo è un toolkit per dimostrare l'impatto di account di servizio compromessi. Questa PoC non è destinata all'uso in ambienti di produzione, nessuna garanzia di stabilità o supporto. RFCpwn si basa su...

blogpost_cve-2018-19987-analysis

CVE-2018-19987 D-Link OS command injection – Analyse Hallo zusammen! In diesem kurzen Blogbeitrag stelle ich eine schnelle Analyse vor, die ich durchgeführt habe, um die Details hinter CVE-2018-19987 besser zu verstehen. Zunächst bin ich dieser CVE nachgegangen, weil ich dachte, dass es keine...

Nettacker v0.4.1

OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...

CVE-2019-16278

CVE-2019-16278 Uno script Python semplice e veloce per sfruttare la CVE-2019-16278 Nostromo 1.9.6 a partire da una vulnerabilità di Directory Traversal nella funzione httpverify di Nostromo nhttpd che porta a un RCE non autenticato tramite una richiesta HTTP realizzata appositamente. Accetta solo...

pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...

cyber-apocalypse-2026-salt-crown

Cyber Apocalypse CTF 2026: The Salt Crown — Writeups Writeups...

CVE-2018-8097-PoC

CVE-2018-8097 POC per CVE-2018-8097. Questo script sfrutta CVE-2018-8097 e può recuperare file e contenuti utilizzando un metodo RCE blind basato sul tempo. Utilizzo root@kitploit: python cve-2018-8097.py -h -u URL -c COMMAND -t TIME -id OBJECTID -d FILEPATH options: -h, --help show this help...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

DolibabyPhp

DolibabyPhp Ein authentifizierter RCE-Exploit für Dolibarr ERP/CRM CVE-2023-30253. Installation Du kannst das Paket entweder aus dem PyPi-Repository mit pip installieren oder den Quellcode direkt von GitHub mit git clone klonen. root@kitploit: pip install dolibabyphp Verwendung root@kitploit:...

Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

EUVD-2026-65217

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

CVE-2026-75574

CVE-2026-75574 is a remote code execution vulnerability in the Grav Email plugin (getgrav/grav-plugin-email) versions before 4.2.2 . The root cause is that page-editor-controlled Email action parameters are rendered as unsandboxed Twig templates . An authenticated remote user possessing only api....

CVE-2026-75574 Grav before 4.2.2 Remote Code Execution via Email Twig

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

c2s

C2S Server Command and Control su Slack Che cos'è C2S? C2S ti permette di costruire un semplice server Command and Control utilizzando solo e soltanto Slack, senza alcun server aggiuntivo o altro. Installazione root@kitploit: pip3 install requests Il resto dell'installazione si concentra sulla...