Lucene search
+L

2362 matches found

Kitploit
Kitploit
•added 2026/09/27 11:54 p.m.•197 views

miteru

This repository does not have a README...

5.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 10:27 p.m.•46 views

git-dumper

git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: root@kitploit: pip install git-dumper Usage root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional...

6.6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 9:00 p.m.•17 views

GitHacker

GitHacker A multi-threaded .git folder exploitation tool. Reconstructs the target repository in full — source code, commit history, branches, stashes, remotes, tags — even when DirectoryListings is disabled, by brute-forcing well-known refs. The accompanying research site at...

6AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/27 11:21 a.m.•13 views

DirDar

DirDar v1.0 Description 🏴‍☠️ bypass forbidden directories - find and identify dir listing - you can use it as directory brute-forcer as well Compatabily This tool is compatible with all kind of operating systems as long as you have GO compiler installed Install You can use this command if you have...

6.4AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/27 6:08 a.m.•18 views

XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: root@kitploit: --host Mandatory - our IP address for reverse connections...

6.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/27 4:05 a.m.•19 views

Swego

Swego Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features Usage Run the binary If you don't want to build it, binaries are availables on https://github.com/nodauf/Swego/releases Otherwise, build-essential should be installed and GOPATH...

6.1AI score
SaveExploits0References1
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•52 views

Issabel PBX 4.0.0-6 - Directory Listing

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory id: CVE-2023-37599 info: name: Issabel PBX 4.0.0-6 - Directory Listing author: ritikchaddha severity: high description: | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker...

7.5CVSS7.3AI score0.03632EPSS
SaveExploits1References2
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•240 views

Sharp Multifunction Printers - Directory Listing

It was observed that Sharp printers are vulnerable to an arbitrary directory listing without authentication. Any attacker can list any directory located in the printer and recover any file. id: CVE-2024-33605 info: name: Sharp Multifunction Printers - Directory Listing author: gy741 severity: hig...

7.5CVSS8.2AI score0.06047EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•91 views

WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure

The WordPress Download Manager plugin before version 3.3.07 does not prevent directory listing on web servers that don't use htaccess, allowing unauthorized access to files stored in the download-manager-files directory. id: CVE-2024-13126 info: name: WordPress Download Manager 3.3.07 -...

5.8AI score0.00473EPSS
SaveExploits1References3
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•123 views

Milesight Routers - Information Disclosure

A critical security vulnerability has been identified in Milesight Industrial Cellular Routers, compromising the security of sensitive credentials and permitting unauthorized access. This vulnerability stems from a misconfiguration that results in directory listing being enabled on the router...

7.5CVSS7.4AI score0.59609EPSS
SaveExploits5References5
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•22 views

WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing

FastDup WordPress plugin 2.2 contains a directory listing vulnerability caused by lack of access restrictions in sensitive directories, letting attackers view export files, exploit requires no authentication. id: CVE-2023-6592 info: name: WordPress FastDup = 2.1.9 Sensitive Information Exposure -...

5.3CVSS6.8AI score0.00905EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•47 views

JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

JetBackup WordPress plugin = 2.0.9.9 does not use index files to prevent directory listing in certain configurations, letting malicious actors leak backup files, exploit requires access to the web server. id: CVE-2023-7165 info: name: JetBackup = 2.0.9.7 - Sensitive Information Exposure via...

8AI score0.01915EPSS
SaveExploits2References3
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•54 views

PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory

PrestaShop versions after 1.5.0.0 and before 1.7.6.6 are vulnerable to information exposure through directory listing in the upload directory due to a missing index.php file. id: CVE-2020-15081 info: name: PrestaShop 1.7.6.6 - Information Exposure via Upload Directory author: 0xAkoko severity: lo...

5.3CVSS5.9AI score0.01648EPSS
SaveExploits0References3
Nuclei
Nuclei
•added 2026/09/27 2:09 a.m.•84 views

WordPress Ninja Job Board < 1.3.3 - Direct Request

WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerability. The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated directory listing which allows the download of uploaded resumes. id: CVE-2022-2544...

7.5CVSS7.3AI score0.04267EPSS
SaveExploits2References5
Kitploit
Kitploit
•added 2026/09/27 2:06 a.m.•21 views

BigBountyRecon

BigBountyRecon BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It...

10CVSS8.1AI score0.99222EPSS
SaveExploits5References1
Kitploit
Kitploit
•added 2026/09/25 11:53 p.m.•10 views

CVE-2023-43261

CVE-2023-43261 - PoC Milesightルーターの重大な脆弱性:機密情報の漏えいと不正アクセスを可能にする 日付: 2023年10月1日 製品ベンダー: Milesight 旧社名: Xiamen Ursalink Technology Co., Ltd. 影響を受ける製品: UR5X、UR32L、UR32、UR35、UR41。その他の産業用セルラールーターも影響を受ける可能性があります。 影響を受けるファームウェア:...

7.5CVSS8AI score0.59609EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/25 12:13 p.m.•12 views

wayBackLister

WaybackLister v1.1 — FR13ND0x7F 作 Wayback Machine のアーカイブ済み URL から潜在的なディレクトリリスティングを発見します。 🕵️‍♂️ できること WaybackLister は、Wayback Machine にアクセスしてドメインの履歴 URL を取得し、一意のパスを解析し、それらのパスのいずれかが現在 ディレクトリリスティング を公開しているかどうかをチェックする偵察ツールです。高速でマルチスレッド対応であり、セキュリティ評価やバグバウンティの偵察で実用的に使えるように作られています。 🚀 特徴 Wayback Machine...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 9:05 a.m.•26 views

google-dorks

google-dorks 2026年1月更新 こちらもお読みください、私のMediumブログスペース:👩‍💻Proviesec Security Mediumの記事 - 読む 目次 はじめに 私が愛用するGoogle Dork 検索フィルター 演算子 検索語句 OR アイデア リンク 例 Google Dorksを防ぐには はじめに ⭐ GitHubでスターを付けてください — 大きな励みになります! ⭐ 何かGoogle Dorkがあれば、PullRequestを作成するか、Twitterで私に連絡してください。 Google Dorksに関する私のMedium記事 Google...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 5:10 a.m.•11 views

GLPwn

GLPwn GLPIハックツールです。Apacheのディレクトリリスティングおよび/またはCVE-2020-15175を利用して、ファイルと有効なセッションをダンプします。 誰が脆弱か? /filesフォルダに対してApacheのディレクトリリスティングが既に有効になっている任意のGLPIインスタンス デフォルトのApache2サーバで動作している9.5.1より前のすべてのGLPIインスタンス 何ができるか? GLPwnはGLPIの/filesフォルダ内のすべてのファイルをダンプできます。これには管理者セッション、ログ、データベースダンプ、チケット添付ファイルが含まれます。...

9.1CVSS8.3AI score0.7155EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/24 5:02 p.m.•14 views

CVE-2026-7071-access-Control

CodeAstroオンライン求人ポータル(PHP MySQL)における未認証の履歴書公開 詳細 ベンダー: CodeAstro 製品: Online Job Portal Project in PHP MySQL バージョン: 1.0 脆弱性タイプ: 不適切なアクセス制御 / 情報漏えい CWE: CWE-284、CWE-200、CWE-548 影響を受けるエンドポイント: /users/user-cvs/ 影響: すべてのユーザーの履歴書への未認証アクセス 説明...

6.9CVSS6.1AI score0.0051EPSS
SaveExploits0
Rows per page
Query Builder