Doozer

Doozer Doozer is an extensible, automated hash cracking utility used to automate the parsing, cracking, and organization of password hashes. Currently, Doozer supports nt/lm, ntlmv1, and ntlmv2 hashes from Responder or SAM, but sports a modular architecture that allows other hash types to be...

Xerror

Xerror Xerror is an automated penetration tool , which will help security professionals and non professionals to automate their pentesting tasks. Xerror will perform all tests and, at the end generate two reports for executives and analysts. Xerror provides GUI easy to use menu driven...

CVE-2022-34265

CVE-2022-34265 Usage start root@kitploit: docker-compose build docker-compose up -d stop root@kitploit: docker-compose down PoC verification of Django vulnerability CVE-2022-34265 A vulnerability CVE-2022-34265 in Django was disclosed on July 5, 2022 US time. This article describes our discussion...

CVE-2026-33033-PoC

CVE-2026-33033 PoC Denial-of-service via base64 whitespace CPU amplification in DjangoMultiPartParser A single 2.5 MB HTTP request can tie up a Django worker for 5 seconds , achieving 2,100x CPU amplification over a normal request of the same size. No authentication is required. Affected Versions...

aura-botnet

Aura Botnet Servidor C2 El servidor C2 del botnet utiliza el framework Django como backend. Está lejos de ser el servidor web más eficiente, pero esto se compensa con lo siguiente: Django es extremadamente portable y por lo tanto bueno para propósitos de prueba/educativos. El servidor y la base d...

aura-botnet

Aura Botnet C2 Server The botnet's C2 server utilizes the Django framework as the backend. It is far from the most efficient web server, but this is offset by the following: Django is extremely portable and therefore good for testing/educational purposes. The server and database are contained...

CVE-2025-57833

Django FilteredRelation Alias SQL Injection Vulnerability CVE-2025-57833 A SQL injection vulnerability in Django that emerged after about a year, at first glance it appears to be caused by an alias since aliases cannot be precompiled. This vulnerability affects the FilteredRelation feature in the...

static-file-checker

static-file-checker Checks Djangos /static/staticfiles.json for exposed creds using nuclei...

CVE-2014-0472

CVE-2014-0472 Use root@kitploit: docker-compose up -d Access localhost:8083 Reference: https://www.djangoproject.com/weblog/2014/apr/21/security/ 1. One or more views are present which construct a URL based on user input commonly, a "next" parameter in a querystring indicating where to redirect...

SecurityManageFramwork

SecurityManageFramwork-SeMF README English | 中文 Introduction SEMF is a security management platform for enterprise intranet, which includes functions of asset management, vulnerability management, account management, knowledge base management and security scanning automation. It can be used for...

RedTeam_toolkit

RedTeam Toolkit Note: Only legal activities should be conducted with this project. Red Team Toolkit is an Open-Source Django Offensive Web-App containing useful offensive tools used in the red-teaming together for the security specialist to identify vulnerabilities. The cybersecurity open-source...

CVE-2026-1312

CVE-2026-1312 is a high-severity Django SQL injection vulnerability: when a column alias containing a dot is used in QuerySet.orderby, combined with FilteredRelation dynamically constructing queries via dictionary expansion, an attacker may be able to inject malicious SQL Affected versions:...

Grafiki

Grafiki Grafiki is a Django project about Sysmon and graphs, for the time being. In my opinion EventViewer, Elastic and even Kibana, are not graphic enough. The current threats are complicated and if attackers think in graphs, defenders also must do it. This is a proof of concept, the code was no...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

petereport

PeTeReport PeTeReport Pe nTe st Report es una herramienta de informes de vulnerabilidades de aplicaciones de código abierto diseñada para ayudar en los esfuerzos de pentesting/redteaming, simplificando la tarea de escribir y generar informes. Centrada en la seguridad de productos, la herramienta...

django_sqli_target_CVE-2025-64459

This repository does not have a README...

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

CVE-2022-28346

CVE-2022-28346 A flaw was found in the Django package, which leads to a SQL injection. This flaw allows an attacker using a crafted dictionary containing malicious SQL queries to compromise the database completely. Table of Contents CVE-2022-28346 Description Environment Proof of Concept and...

CVE-2022-28346

CVE-2022-28346 PoC Impact: Potential SQL injection in QuerySet.annotate, aggregate, and extra. Installation root@kitploit: poetry install python manage.py makemigrations python manage.py migrate python manage.py loaddata data.json python manage.py runserver PoC root@kitploit: ?field=poc.title" FR...

CVE-2025-64459

CTF Challenge: Django ORM Injection CVE-2025-64459 Category: Web Security Difficulty: Medium Vulnerability: CVE-2025-64459 - Django ORM Filter Injection 📝 Description We built a secure merch shop with admin panel. Can you bypass the authentication and find the private admin note URL:...