scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage root@kitploit: Usage: scout command Available Commands: help Hel...

scout

Scout Scoutは、Webサーバ上で非公開のVHOST、ファイル、ディレクトリを発見するためのURLファザー兼スパイダーです。 バイナリには完全なワードリストが含まれているため、最大の移植性と最小の設定で使用できます。照準を定めて発射！ 使用法 root@kitploit: Usage: scout command Available Commands: help Help about any command url Discover URLs on a given web server. version Display scout version. vhost Discover...

POC_CVE-2026-42880

CVE-2026-42880 — 通过 ServerSideDiff 泄露 ArgoCD Secret 一个用于复现和检测 CVE-2026-42880 的实验室环境。该漏洞是 Argo CD 中的一个严重漏洞，其 ServerSideDiff gRPC 处理器会将 Kubernetes Secret 数据暴露给只读用户。 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2026-42880 GHSA| GHSA-3v3m-wc6v-x4x3 CVSS| 9.6（严重） — AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N 受影响版本| ArgoCD...

CVE-2024-7928

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances. How to Use FOFA : app="FASTADMIN" Install the script requirements: root@kitploit: pip install -r requirements.txt Single Target: root@kitploit: python CVE-2024-7928.py -u https://target:9090 Bulk...

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 Rewrited Exploit In Python How To Use: Make sure Python3 is installed at system. Run "python3 CVE-2017-5638.py URL -c COMMAND". URL endpoint needs to be an '.action' file. Don't forget to give it parameters before running the script. Example Use: NOT TESTED This exploi...

CVE-2021-46069

CVE-2021-46069 Exploit Title: 车辆服务管理系统 - 'Mechanic List' 存储型跨站脚本 XSS Exploit Author: SANU P.L CVE: CVE-2021-46069 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46069...

CVE-2021-46078

CVE-2021-46078 漏洞利用标题：车辆服务管理系统 - 多处文件上传导致存储型跨站脚本攻击 漏洞利用作者：SANU P.L CVE：CVE-2021-46078 CVSS：4.8 中危 参考来源： https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting https://nvd.nist.gov/vuln/detail/CVE-2021-46078...

safenet-soho-security-framework

SafeNet SOHO Security Framework SafeNet is a production-grade Zero-Trust Network Access ZTNA framework specifically engineered for Small Office/Home Office SOHO environments. By orchestrating a secure, identity-aware VPN overlay utilizing the WireGuard protocol, SafeNet provides granular control...

CVE-2023-6972-Exploit-Arbitrary-File-Deletion

CVE-2023-6972 Proof of Concept PoC Description This repository contains a Proof of Concept PoC exploit for CVE-2023-6972. The vulnerability allows for Unauthenticated Arbitrary File Deletion AFD in Wordpress Backup Migration Plugin Note: A comprehensive technical breakdown, full case study, and...

bbqsql

BBQSQL A Blind SQL Injection Exploitation Tool Table Of Contents What is BBQSQL? Overview of Readme High Level Usage Install BBQSQL Options Query Syntax Overview HTTP Parameters Export Config Import Config Custom Hooks Found a Bug? Can I Help? What's Up with the Name? What is BBQSQL? Blind SQL...

shellshock-cgi

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage root@kitploit: $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: root@kitploit: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI +...

CVE-2025-20281-Cisco

CVE-2025-20281 - Comprobador de Vulnerabilidad RCE de Cisco ISE Este script verifica la presencia de la vulnerabilidad CVE-2025-20281 en Cisco Identity Services Engine ISE e ISE-PIC, la cual permite ejecución remota de código sin autenticación RCE como root debido a una validación de entrada...

odin

Odin Odin is a central IoC scanner based on Loki Table of Contents General Info Requirements Fetching Deploying Loki Collecting Parsing General Info This application Loki latest version and download it on all machines using a powershell script and run it then this app receives the respose from al...

CVE-2023-22894

Unauthenticated Strapi Exploit: CVE-2023-22894 This repository contains a proof of concept PoC exploit for CVE-2023-22894, which allows unauthenticated users to leak sensitive information and hijack Strapi administrator accounts by exploiting Strapi's filtering functionality on private fields...

CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink control href attribute escape vulnerability CVE-2022-44666 0day. This is the story about another forgotten 0day fully disclosed more than 4 years ago by John Page aka hyp3rlinx. To understand the report, you have to consider i'm stupid :- And my...

CVE-2014-0346

CVE-2014-0160 Heartbleed Test Script This script checks for the infamous Heartbleed vulnerability CVE-2014-0160 in SSL/TLS servers. 📜 Credits Based on the original script by Jared Stafford [email protected] Modified and updated by Songül Kızılay for educational and research purposes ⚠️...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

netstat2neo4j

Neo4jを使用したNetstat可視化 説明 グラフは、大規模データセット内の異常やパターンを発見するのに役立ちます。 このスクリプトは、複数のホストからnetstat情報を取得し、Neo4jにインポート可能な形式に整形します。 Neo4jにクエリを実行することで、特定のホストへの接続、特定のホストからの接続、使用状況やプロトコルなどを調べることができます。 サンプルファイル exampleディレクトリには、ツールをテストできるファイルがすでにいくつか用意されています。 また、検索の可能性について基本的なアイデアを得るためのサンプルクエリも見つけることができます。 ステータス...

jspanda

JSPanda JSpanda is client-side prototype pollution vulnerability scanner. It has two key features, scanning vulnerability the supplied URLs and analyzing the JavaScript libraries' source code. However, JSpanda cannot detect advanced prototype pollution vulnerabilities. How JSPanda works? Uses...

CVE-2025-53072-CVE-2025-62481

CVE-2025-53072 & CVE-2025-62481 Vulnerabilidad en el producto Oracle Marketing de Oracle E-Business Suite componente: Marketing Administration. ¿Cómo funciona este método de detección? Esta plantilla de Nuclei detecta instancias de Oracle E-Business Suite vulnerables a CVE-2025-53072 y...