Lucene search
+L

301466 matches found

Kitploit
Kitploit
added 2026/09/06 6:11 a.m.6 views

awesome-incident-response

Awesome Incident Response A curated list of tools and resources for security incident response, aimed to help security analysts and DFIR teams. Digital Forensics and Incident Response DFIR teams are groups of people in an organization responsible for managing the response to a security incident,...

5.9AI score
SaveExploits0References114
Kitploit
Kitploit
added 2026/09/06 6:02 a.m.7 views

zsteg

zsteg Description detect stegano-hidden data in PNG & BMP Installation root@kitploit: gem install zsteg Detects: LSB steganography in PNG & BMP zlib-compressed data OpenStego Camouflage 1.2.1 LSB with The Eratosthenes set Usage root@kitploit: zsteg -h Usage: zsteg options filename.png paramstring...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 6:01 a.m.3 views

cuckoo3

Cuckoo3 - Malware analysis tool About Cuckoo3 is an open-source tool to test suspicious files or links in a controlled environment. It will test them in a sandboxed platform emulators and generate a report, showing what the files or websites did during the test. ⚠️ You can currently only set up...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/06 5:55 a.m.6 views

WinDbg-Samples

This is a collection of extensions and sample scripts for extending WinDbg. We'll be adding more samples and extensions over time. Getting Started To load JavaScript extensions: 1. Download the script file locally. 2. Ensure you have a recent version of WinDbg. 3. Start your debugging session. 4...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 5:48 a.m.7 views

KindaRails2Shell

KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-file proof of concept and loopback-only Docker lab for the Rails Active Storage/libvips arbitrary-file-read vulnerability. It also demonstrates the advisory's conditional escalation from a recovered secretkeybase to a forged image variati...

9.5CVSS8.4AI score0.27861EPSS
SaveExploits9References4
Kitploit
Kitploit
added 2026/09/06 5:47 a.m.4 views

zeek-quasarrat-detector

A Zeek Based QuasarRAT Malware Detector Malware often hides communications with its command and control C2 server over HTTPS. The encryption in HTTPS usually conceals the compromise long enough for the malware to accomplish its goal. This makes detecting malware that uses HTTPS challenging, but...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 5:36 a.m.3 views

CVE

CVE's Table CVE Number| Type| Company/Product| Description| Article Link| Repository Link ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows July 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP 3.1.0| Missing sanitizati...

7.8CVSS7.1AI score0.51097EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/06 5:35 a.m.6 views

misp-objects

misp-objects MISP objects used in MISP system and can be used by other information sharing tools. MISP objects are in addition to MISP attributes to allow advanced combinations of attributes. The creation of these objects and their associated attributes are based on real cyber security use-cases...

6AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/06 5:31 a.m.64 views

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

6.1AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/06 5:23 a.m.3 views

openssh-portable

Portable OpenSSH OpenSSH is a complete implementation of the SSH protocol version 2 for secure remote login, command execution and file transfer. It includes a client ssh and server sshd, file transfer utilities scp and sftp as well as tools for key generation ssh-keygen, run-time key storage...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/06 5:18 a.m.3 views

sccmsqlclient

sccmsqlclient A dedicated MSSQL client for SCCM database exploration and exploitation. Recon queries Run PowerShell scripts on managed clients Extract secrets Installation PIPX root@kitploit: $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP You can install by cloning the...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 5:17 a.m.5 views

jdwp-shellifier

JDWP exploitation script What is it ? This exploitation script is meant to be used by pentesters against active JDWP service, in order to gain Remote Code Execution. How does it work ? Well, in a pretty standard way, the script only requires a Python 2 interpreter: root@kitploit: % python...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/09/06 5:16 a.m.1 views

CVE-2026-86167

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgponloid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

9.9CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/06 5:12 a.m.8 views

CVE-2025-32432

CVE-2025-32432 — Craft CMS Pre-Auth RCE Exploit for unauthenticated remote code execution in Craft CMS, written in Go. Inspired by the original work of c0gnit00. How it works 1. Gets the PHP session and CSRF token via GET /admin/login 2. Poisons the PHP session file by injecting PHP code into the...

10CVSS8.2AI score0.99837EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/06 5:05 a.m.4 views

libnfc

root@kitploit: - Free/Libre Near Field Communication NFC library Libnfc historical contributors: Copyright C 2009 Roel Verdult Copyright C 2009-2015 Romuald Conty Copyright C 2010-2012 Romain Tartière Copyright C 2010-2013 Philippe Teuwen Copyright C 2012-2013 Ludovic Rousseau Additional...

5.3AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/06 5:03 a.m.3 views

krackattacks-scripts

This project contains scripts to test if clients or access points APs are affected by the KRACK attack against WPA2. For details behind this attack see our website and the research paper. Remember that our scripts are not attack scripts! You will need the appropriate network credentials in order ...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 5:03 a.m.6 views

CVE-2019-9730

CVE-2019-9730: Synaptics Audio Driver LPE The vulnerability in this driver package was with the CxUtilSvc system service. It hosted a COM object that low-privileged code can use to perform arbitrary reads and writes to the registry as SYSTEM. The .NET code adds the IRegistryHelper COM interface a...

8.8CVSS7.9AI score0.01046EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 5:02 a.m.4 views

serverless

Website • Documentation • X / Twitter • Community Slack • Forum The Serverless Framework – Makes it easy to use AWS Lambda and other managed cloud services to build applications that auto-scale, cost nothing when idle, and result in radically low maintenance. The Serverless Framework is a...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 5:00 a.m.3 views

mfoc

MFOC is an open source implementation of "offline nested" attack by Nethemba. This program allow to recover authentication keys from MIFARE Classic card. Please note MFOC is able to recover keys from target only if it have a known key: default one hardcoded in MFOC or custom one user provided usi...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 4:59 a.m.6 views

litellm-command-injection-security-assessment

CVE-2026-42271 - LiteLLM AI Gateway MCP Command Injection RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for LiteLLM command injection risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Detail...

8.8CVSS6.3AI score0.83594EPSS
SaveExploits2
Rows per page
Query Builder