vhostawesome

FunWithVhosts A tool designed to efficiently check for virtual hosts across multiple IP addresses. Description FunWithVhosts automates the process of identifying virtual hosts on given IP addresses. The script checks for open ports, specifically web server ports, and then tries to retrieve conten...

Subcert

Subcert Subcert is a subdomain enumeration tool, that finds all the valid subdomains from certificate transparency logs. Table of contents Setup Demo Contribute Contact Me Setup Step 1: Install Python 3 root@kitploit: apt-get install python3-pip Step 2: Clone the Repository root@kitploit: git clo...

CVE-2002-0346

CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...

Moodle-authenticated-RCE

Moodle 4.4.0 - Authenticated Remote Code Execution CVE-2024-43425 Exploit CVE: CVE-2024-43425 Affected Versions Moodle 4.4 to 4.4.1 Moodle 4.3 to 4.3.5 Moodle 4.2 to 4.2.8 Moodle 4.1 to 4.1.11 Description This exploit targets an authenticated Remote Code Execution RCE vulnerability in Moodle...

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator Quick poc test Generate the default poc for test root@kitploit: python cve-2023-38831-exp-gen.py poc or python cve-2023-38831-exp-gen.py CLASSIFIEDDOCUMENTS.pdf script.bat poc.rar Custom 1. Place the bait file and evil script file in the current directory,...

CVE-2024-48589

phpAbook 9.0i - Cross-Site Scripting XSS Vulnerability CVE-2024-48589 Summary: A Cross-Site Scripting XSS vulnerability was discovered in the rol parameter of index.php or the path section in the phpAbook application. This vulnerability allows an attacker to inject arbitrary JavaScript code into ...

CVE-2023-50465

MonicaHQ XSS Exploitation of MonicaHQ XSS Create an account Create a contact In Documents, upload a malicious SVG file root@kitploit: alert"Monicahq XSS Poc"; Access the uploaded file...

kalici-dosya-silme-araci

Permanent File Deletion Tool & Kalıcı Dosya Silme Aracı This project is a simple tool that allows users to permanently delete specified files. The program overwrites the specified file with random data, changes the content of the file, and then deletes it, effectively removing any traces of the...

CVE-2025-32463-lab

CVE-2025-32463 Vulnerability Lab Environment This project builds an experimental environment based on Docker for reproducing and testing the sudo local privilege escalation vulnerability CVE-2025-32463. The image contains the affected version of sudo, along with exploit scripts and auxiliary tool...

CVE-2024-1086-Exploit

🔒 CVE-2024-1086 Exploit Project 🛡️ Polished educational Linux kernel exploit for security research This project provides a robust, non-functional template for studying CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's netfilter: nftables component, enabling local privilege...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ EDUCATIONAL PURPOSE ONLY Lab environment and exploit script for the critical unauthenticated memory-leak vulnerability in MongoDB Server. 📋 Table of Contents Vulnerability Overview Affected Versions Installation Lab...

mutiny-fuzzer

Inicio rápido: Tutorial de Mutiny Publicación del blog aquí: http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html Enlaces a esta demostración en video de YouTube: https://www.youtube.com/watch?v=FZyR6MgJCUs Para más características orientadas a campañas de...

mutiny-fuzzer

Quickstart: Mutiny tutorial Blog post here: http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html Links to this YouTube video demo: https://www.youtube.com/watch?v=FZyR6MgJCUs For more features geared towards fuzzing campaigns/feedback/harnesses:...

CVE-2022-30190

CVE-2022-30190 The script is from https://github.com/JohnHammond/msdt-follina, just make it simple for me to use it and this script aim at generating the payload for more information refer the johnn hammond link...

csrf_casdoor

Casdoor – Cross-Site Request Forgery CSRF Summary Vulnerability: CSRF in /api/set-password allowing password changes without consent. Affected versions: All versions of the software are affected. No patched release is currently available. CVE: CVE-2023-34927 latest yet to be assigned. Exploit...

icebreaker

icebreaker Break the ice with that cute Active Directory environment over there. When you're cold and alone staring in at an Active Directory party but don't possess even a single AD credential to join the fun, this tool's for you. Sequentially automates 5 internal network attacks against Active...

expat_CVE-2024-28757

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

CVE-2025-56771

Description During analysis of the ecodotempo.com.br website, a Stored Cross-Site Scripting XSS vulnerability was discovered. This vulnerability allows an attacker to inject malicious scripts into fields that are subsequently rendered to other users without proper sanitization, specifically on th...

SR-71

All in One Recon Tool The purpose of this tool is to help bug hunters and pentesters during reconnaissance... Installation: Can be used on any system with python3 You can easily install SR-71 using pip: root@kitploit: pip3 install SR-71 To use it, just type "SR-71 " in your terminal If you want t...

amt_auth_bypass_poc

Intel AMT authentication bypass example This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5689 vulnerability. It is essentialy a mitmproxy script that simply blanks an Authorization header "response" field. Example usage: root@kitploit: mitmdump -p 8080 -dd...