685288 matches found
Emat
Emat Emat is an advanced scraping tool designed to collect email accounts from platforms like Gmail, Yahoo, Hotmail, and government email services. However, it's crucial to emphasize that the script should only be used for educational purposes and not for any abusive or unethical activities. To...
webuploader-0.1.15-Demo
webuploader-v-0.1.15 Component Has an Unauthorized File Upload Vulnerability Introduction: Baidu's WebUploader component has a file upload vulnerability. This vulnerability is caused by the upload page of the WebUploader component not strictly filtering file types or file extensions. Attackers ca...
MoxaPass
This is a sample exploit for CVE-2016-9361. It retrieves the SNMP community string and 'admin' password for many kinds of Moxa device. It uses Moxa's UDP/4800 proprietary management protocol. The protocol lacks security, and using the 'unlock' function code does not require a password. This explo...
ncentral-compromise-ioc-triage
N-central Compromise IoC Triage Read-only defensive hunting toolkit for post-exploitation artifacts associated with N-able N-central authentication bypass vulnerabilities CVE-2026-18556 and CVE-2026-18577. The PowerShell endpoint scanner flags indicators published by N-able and Huntress; it never...
optionsbleed
optionsbleed This is a proof of concept code to test for the Optionsbleed bug in Apache httpd CVE-2017-9798. Please consider using the tool Snallygaster instead, it has a check for optionsbleed included: root@kitploit: snallygaster -t optionsbleed host usage root@kitploit: optionsbleed -h -n N -a...
msiscan
MSI Analyzer This Python script for Linux can analyze Microsoft Windows .msi Installer files and point out potential vulnerabilites. It was developed by Michael Baer @derbaer0 in the SEC Consult Vulnerability Lab. Currently, it is mostly suited for a local privilege escalation also described in o...
CVE-2024-12471
CVE-2024-12471 Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator input type="hidden" name="...
CVE-2024-2667-Poc
CVE-2024-2667-Poc 🚀 Description The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation in the /wp-json/instawp-connect/v1/config REST API endpoint in all versions up to, and including, 0.1.0.22. This...
CVE-2024-12849-Poc
CVE-2024-12849-Poc 📜 Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of...
mindmanager-poc
mindmanager-poc Affected application: MindManager23setup.exe Platform: Windows Issue: Local Privilege Escalation via MSI installer Repair Mode EXE hijacking race condition Discovered and reported by: Pawel Karwowski and Julian Horoszkiewicz Eviden Red Team Proposed mitigation:...
DEMO-Proof-of-Concept-Temporal-Memory-Inconsistency-in-cldflt.sys-CVE-2025-62221
Technical Analysis and Proof-of-Concept: Temporal Memory Inconsistency in cldflt.sys CVE-2025-62221 DEMO Proof-of-Concept: Temporal Memory Inconsistency in cldflt.sys CVE-2025-62221 CVE-2025-62221: This repository provides a comprehensive technical analysis and a Proof-of-Concept PoC demonstratio...
CVE-2024-9593-Exploit
CVE-2024-9593-Exploit The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attacker...
Splunk-RCE-poc
Splunk RCE - PoC Proof of concept exploit for CVE-2023-46214, SVD-2023-1104 Usage The Splunk instance URL, username, password, reverse shell IP, and port are all required as command-line parameters. For example: root@kitploit: $ python3 CVE-2023-46214.py --url --username --password --ip --port...
postgres-bruteforcer
postgres-bruteforcer About This Go script reads a list of usernames and passwords from a file called creds.txt and tests them against a PostgreSQL database. The script accepts an IP of the PostgreSQL server as a command line argument or a text file of ip's. If an access is granted, the script...
YellowKey-WinRE-Remediation
YellowKey WinRE Remediation Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes autofstx.exe from the offline WinRE image's BootExecute value and refreshes WinRE registration so BitLocker trust is...
r2rs
root@kitploit: \ \ \ / / | / / /| /\ \ | | / | | / \ || /\ | / / / / / / react2rubyshell !IMPORTANT DISCLAIMER: The burden of responsibility for any actions taken with this script falls squarely on the individual executing it. Use this only against systems you own or have explicit...
fuel-cms-cve-2018-16763-python3-port
FUEL CMS 1.4.1 Python 3 Compatibility Port Overview This repository contains a Python 3 compatibility port of the original proof-of-concept for CVE-2018-16763 affecting FUEL CMS 1.4.1. The original proof-of-concept was written by 0xd0ff9. This repository does not claim authorship of the original...
CVE-2025-20362-Cisco-Scanner
CVE-2025-20362 Scanner A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Authentication Bypass CVE-2025-20362. CVE-2025-20362 allows unauthenticated attackers to bypass authentication and access restricted WebVPN resources through path traversal / normalization flaws. Overview Thi...
cve-2026-5950-bind9-resolver-dos
CVE-2026-5950 - BIND 9 Resolver DoS Research notes and defensive guidance for CVE-2026-5950, an unbounded resend loop vulnerability in the BIND 9 resolver state machine. Overview CVE-2026-5950 affects recursive BIND 9 resolvers. Under specific retry and bad-server handling conditions, a remote...