Lucene search
+L

51616 matches found

Kitploit
Kitploit
added 2026/09/13 6:04 p.m.43 views

spacesiren

SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 5:36 p.m.8 views

SpoofThatMail

SpoofThatMail Bash script to check if a domain or list of domains can be spoofed based in DMARC records File with domains One per line: root@kitploit: sh SpoofThatMail.sh -f domains.txt One single domain: root@kitploit: sh SpoofThatMail.sh -d domain...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:36 p.m.194 views

socialscan

socialscan socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 5:34 p.m.4 views

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

9.8CVSS8AI score0.9466EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 5:33 p.m.9 views

Cr3dOv3r

Cr3dOv3r Your best friend in credential reuse attacks. You give Cr3dOv3r an email then it does two simple useful jobs with it: Search for public leaks for the email and returns the result with the most useful details about the leak Using haveibeenpwned API and tries to get the plain text password...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 5:24 p.m.5 views

TrashEmail

tl;dr TrashEmail is hosted Telegram bot that can save your private email address by offering disposable email address. It can create, manage, disposable email address and link them with your telegram bot chat. Where is the bot? - @trashemailbot How can I create dispoable mail id? - Decide a...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 5:22 p.m.6 views

wildlogger

root@kitploit: \ \ / | | | | | \ \ /\ / / | | | | | | \ / / / | | |/ | | | / \ / |/ |/ \ '| \ /\ / | | | | | | || | | | | | / | / / |||,| |/ , |, ||| / | / | |/ |/ Description A keylogger designed for Windows operating system that captures connection information, device system information,...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 5:02 p.m.8 views

GitFive

🐍 Now Python 3.13 compatible ! Description GitFive is an OSINT tool to investigate GitHub profiles. Main features : Usernames / names history Usernames / names variations Email address to GitHub account Find GitHub's accounts from a list of email addresses Lists identities used by the target Clon...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 4:52 p.m.9 views

cve_manager

Project Description A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their associated products on a daily schedule. The spreadsheet can then be manually interpreted for risk to your specific organization. Based off of a...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:51 p.m.56 views

clusterfuzz

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

6AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/13 4:47 p.m.5 views

CVE-2025-25965

CVE-2025-25965: Cross-Site Request Forgery CSRF in Online Banquet Booking System v1.2 Introduction Cross-Site Request Forgery CSRF remains one of the most overlooked yet dangerous vulnerabilities affecting web applications today. CVE-2025-25965 is a newly discovered CSRF vulnerability in the...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:43 p.m.5 views

CVE-2023-6444-POC

CVE-202306444-POC Proof of concept on Unauthenticated Administrator Email Disclosure CVE-2023-6444 Usage: python3 cve-2023-6444.py $URL https://vulners.com/cvelist/CVELIST:CVE-2023-6444...

5.3CVSS5.9AI score0.02463EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 4:34 p.m.8 views

CVE-2023-51764-POC

based on https://github.com/duy-31/CVE-2023-51764 and https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text its just some poc port to python 3.x...

5.3CVSS5.9AI score0.02635EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/13 4:26 p.m.9 views

WhatBreach

WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 4:17 p.m.5 views

CVE-2018-15131

Zimbra Collaboration User Enumeration Script CVE-2018-15131 How to use The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it. root@kitploit: root@kali ./cve-2018-15131-user-enum.py --host...

5.3CVSS6AI score0.01878EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 4:17 p.m.8 views

Sinister

Sinister root@kitploit: This small python script can do really awesome work. Sinister is Keylogger Generator for Windows/Linux, which sends key-logs & screenshot via email with other juicy target info written in Python 3. Disclaimer :computer: This project was created only for good purposes and...

6.5AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 4:10 p.m.5 views

CVE-2023-28467

MyBB 1.8.33 User CP email persistent XSS root@kitploit: - MyBB 1.8.33 User CP email persistent XSS - Mybb version "@cve.com Solution Upgrade MyBB version 1.8.34 or higher...

6.1CVSS6.5AI score0.0051EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:03 p.m.81 views

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 4:00 p.m.8 views

CVE-2023-08-21-exploit

Exploit Title: Axigen if xhr1.readyState === XMLHttpRequest.DONE hcookie = new URLxhr1.responseURL.search.split"="1...

6.1CVSS6.5AI score0.52721EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 3:58 p.m.5 views

CVE-2023-5561-PoC

PoC CVE-2023-5561 - WordPress User Email Disclosure Description This script exploits the CVE-2023-5561 vulnerability in WordPress to enumerate and disclose user email addresses via the /wp-json/wp/v2/users API endpoint. Requirements Python 3.x requests library Install the required library:...

5.3CVSS6.5AI score0.03862EPSS
SaveExploits4
Rows per page
Query Builder