ExtractedDefender

Just an attempt to group extracted data from Defender for research purposes. Orginal research from commial on LUA/VDM https://github.com/commial/experiments/tree/master/windows-defender WDextract https://github.com/hfiref0x/WDExtract...

CVE-2024-43965

CVE-2024-43965 SendGrid for WordPress = 1.4 - Unauthenticated SQL Injection Description The SendGrid for WordPress plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...

mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

CVE-2024-42327_Zabbix_SQLi

🛡️ Zabbix 7.0.0 SQL Injection Exploit Script A Python script to exploit a Zabbix 7.0.0 authenticated SQL injection vulnerability, supporting multiple modes of action including user data extraction, session token leaks, remote command execution RCE, and custom query injection. ⚠️ DISCLAIMER: This...

Steghide-Brute-Force-Tool

Steghide Brute Force Tool Execute a brute force attack with Steghide to file with hide information and password established. How it work Cloning this repo to your computer and typing in your terminal: git clone https://github.com/Va5c0/Steghide-Brute-Force-Tool.git To launch the script by typing:...

tinfoleak

tinfoleak L'outil open-source le plus complet pour l'analyse de renseignement sur Twitter Introduction tinfoleak est un outil open-source relevant des disciplines OSINT Open Source Intelligence et SOCMINT Social Media Intelligence, qui automatise l'extraction d'informations sur Twitter et facilit...

tinfoleak

tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...

zsteg

zsteg Description detect stegano-hidden data in PNG & BMP Installation root@kitploit: gem install zsteg Detects: LSB steganography in PNG & BMP zlib-compressed data OpenStego Camouflage 1.2.1 LSB with The Eratosthenes set Usage root@kitploit: zsteg -h Usage: zsteg options filename.png paramstring...

stegseek

⚡ Stegseek Stegseek es un cracker de steghide extremadamente rápido que se puede usar para extraer datos ocultos de archivos. Está construido como un fork del proyecto steghide original y, como resultado, es miles de veces más rápido que otros crackers y puede recorrer la totalidad de rockyou.txt...

fetchfox

FetchFox FetchFox is an AI powered scraping, automation, and data extraction library. It can scrape data from any webpage using just plain English. It is made by the developers of the FetchFox AI scraper. Getting started Install the package and playwright: root@kitploit: npm i fetchfox npx...

MyStyle Custom Product Designer <= 3.21.1 - SQL Injection

The MyStyle Custom Product Designer plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.21.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated...

mapsdumper

root@kitploit: ▒█▀▄▀█ ░█▀▀█ ▒█▀▀█ ▒█▀▀▀█ ▒█▀▀▄ ▒█░▒█ ▒█▀▄▀█ ▒█▀▀█ ▒█▀▀▀ ▒█▀▀█ ▒█▒█▒█ ▒█▄▄█ ▒█▄▄█ ░▀▀▀▄▄ ▒█░▒█ ▒█░▒█ ▒█▒█▒█ ▒█▄▄█ ▒█▀▀▀ ▒█▄▄▀ ▒█░░▒█ ▒█░▒█ ▒█░░░ ▒█▄▄▄█ ▒█▄▄▀ ░▀▄▄▀ ▒█░░▒█ ▒█░░░ ▒█▄▄▄ ▒█░▒█ by: @Tegal1337 MAPSDUMPER Demo • Installazione • Funzionalità • Crediti Uno strumento per...

CVE-2024-2876

CVE-2024-2876 - SQL-Injection-Schwachstelle in Email Subscribers von Icegram Express Übersicht CVE-2024-2876 ist eine kritische Sicherheitsschwachstelle, die im Plugin „Email Subscribers by Icegram Express" für WordPress gefunden wurde. Diese Schwachstelle betrifft Versionen bis einschließlich...

CVE-2024-13479

CVE-2024-13479 LTL Freight Quotes – SEFL Edition = 3.2.4 - SQL Injection non autenticata Descrizione Il plugin LTL Freight Quotes – SEFL Edition per WordPress è vulnerabile a SQL Injection tramite i parametri 'dropshipeditid' e 'editid' in tutte le versioni fino alla 3.2.4 inclusa, a causa di un...

CVE-2024-13481

CVE-2024-13481 LTL Freight Quotes – R+L Carriers Edition = 3.3.4 - SQL Injection non autenticata Descrizione Il plugin LTL Freight Quotes – R+L Carriers Edition per WordPress è vulnerabile a SQL Injection tramite i parametri 'editid' e 'dropshipeditid' in tutte le versioni fino alla 3.3.4 inclusa...

joomla.3.7.0exploit

CVE-2017-8917 Joomla SQLi PoC Questa repository contiene un proof of concept PoC semplice e adatto a CTF per la vulnerabilità di SQL injection comfields di Joomla CVE-2017-8917. L'obiettivo è mantenere il flusso di lavoro leggero mostrando comunque l'intero flusso di sfruttamento: rilevamento,...

CVE-2025-8018

Exploit CVE-2025-8018 – Food Ordering Review System v1.0 Questo repository fornisce un proof-of-concept PoC in Python per l'exploit di CVE‑2025‑8018 , una vulnerabilità di SQL Injection ad alta gravità scoperta nel Food Ordering Review System v1.0. La vulnerabilità viene attivata tramite il...

CVE-2024-1071-PoC-Script

Script de Exploração CVE-2024-1071 🚀 🌟 Aviso Legal Esta Prova de Conceito PoC foi criada apenas para fins educacionais e de teste ético. O uso desta ferramenta para atacar alvos sem consentimento mútuo prévio é ilegal. É de responsabilidade do usuário final obedecer a todas as leis aplicáveis,...

bulk_extractor

bulkextractor è uno strumento ad alte prestazioni per l'estrazione di dati forensi digitali. È un pulsante "ottieni prove" che scansiona rapidamente qualsiasi tipo di input immagini disco, file, directory di file, ecc. ed estrae informazioni strutturate come indirizzi email, numeri di carte di...

cyberchef-recipes

CyberChef è il cosiddetto 'Cyber Swiss-Army Knife' creato dal GCHQ. È uno strumento fantastico per la trasformazione, l'estrazione e la manipolazione dei dati nel tuo browser web. Tutto il merito a @GCHQ per aver creato lo strumento. Vedi: https://gchq.github.io/CyberChef/ Consigli Generali Scari...