108525 matches found
pgedge-anonymizer
pgEdge Anonymizer Documentation : Introduction Bonnes pratiques Installation Configuration Démarrage rapide Utilisation Modèles personnalisés Modèles intégrés Exemple de configuration Dépannage Notes de version...
CVE-2025-13486
🔴 CVE-2025-13486 - Exploitation du plugin WordPress Advanced Custom Fields Extended ACFE 📋 Aperçu Preuve de concept de l'exploit pour CVE-2025-13486 , une vulnérabilité critique dans le plugin WordPress Advanced Custom Fields: Extended ACFE qui permet une exécution de code à distance conduisant à...
domdig
DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...
nomore403
NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...
dorkbot
dorkbot Scan Google or other search results for vulnerabilities. dorkbot is a modular command-line tool for performing vulnerability scans against sets of webpages returned by Google search queries or other supported sources. It is broken up into two sets of modules: Indexers - modules that retur...
Magneto-PolyShell
Magento 2 RCE Exploit - неаутентифицированная загрузка файла для RCE ⚠️ Этот инструмент предназначен только для образовательного и авторизованного тестирования безопасности. Несанкционированное использование против систем, которые вам не принадлежат, незаконно. Этот эксплойт нацелен на критическую...
msf-auxiliarys
msf-auxiliarys моя коллекция вспомогательных пост-модулей metasploit Описание root@kitploit: эта рабочая директория содержит различные вспомогательные модули metasploit, написанные мной для помощи в решении типовых задач пост-эксплуатации. Загрузка/Установка 1º - Скачайте модуль с github 2º -...
taser
Taser TASER Tests et Ressources de Sécurité est une bibliothèque d’abstraction utilisée pour simplifier la création d’outils de sécurité offensifs. Les différents protocoles et classes aident à rationaliser le développement d’outils personnalisés lors des engagements. Le répertoire examples...
OpenNebula-CVE-2025-56534
OpenNebula-CVE-2025-56534 Exploit Title : OpenNebula 6.10.0.1 - Stored XSS Cross-site Scripting in the custom authenticator driver Exploit Author : Mark Artamonov Vendor Homepage : https://opennebula.io/ Tested Version : OpenNebula 6.10.0.1 Affected Versions : OpenNebula Подтверждение концепции...
autovpn
!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...
haklistgen
haklistgen Turns any junk text into a usable wordlist for brute-forcing. Installation root@kitploit: go install github.com/hakluke/haklistgen@latest Usage Examples Scrape all words out of an HTTP response to build a directory bruteforce wordlist: root@kitploit: curl https://wikipedia.org |...
CVE-2023-43874-e107-CMS-Stored-XSS---MetaCustomTags
e107 CMS XSS stocké v2.3.2 Auteur : Sergio Description : Plusieurs vulnérabilités de Cross Site Scripting XSS dans e017 CMS v.2.3.2 permettent à un attaquant local d'exécuter du code arbitraire via un script spécialement conçu dans les champs Copyright et Auteur du menu Meta & Custom Tags. Vecteu...
sjcam
Lelouch : Recherche sur le firmware SJCAM SJ4000 et firmware personnalisé Trocar para Português Brasil Notes de rétro-ingénierie, outils pour le firmware, code de preuve de concept et une interface de firmware personnalisé pour la version Allwinner V3 du SJCAM SJ4000 Air. Article de recherche Ce...
gf
gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...
PT-2026-81052
Name of the Vulnerable Software and Affected Versions ACPT Pro - Custom Post Types Plugin for WordPress versions 2.0.63 and earlier Description PHP Object Injection occurs when an application deserializes untrusted data, allowing an attacker to manipulate the resulting object and potentially...
nexmon
What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...
lazyrecon
root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...
crlfuzz
CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin...
