Lucene search
+L

81371 matches found

Kitploit
Kitploit
•added 2026/09/25 8:52 a.m.•10 views

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...

7.8CVSS7.9AI score0.02615EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 8:19 a.m.•90 views

snuffleupagus

Snuffleupagus Módulo de seguridad para php7 y php8: ¡eliminando clases de bugs y aplicando parches virtuales al resto!...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 7:32 a.m.•159 views

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/25 7:16 a.m.•8 views

CVE-2017-1000117

CVE-2017-1000117 usage root@kitploit: $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git when git has problem, ifconfig is executed...

8.8CVSS7.5AI score0.77823EPSS
SaveExploits9
Kitploit
Kitploit
•added 2026/09/25 7:04 a.m.•15 views

failpoint

failpoint An implementation of failpoints for Golang. Fail points are used to add code points where errors may be injected in a user controlled fashion. Fail point is a code snippet that is only executed when the corresponding failpoint is active. Quick Start use...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/25 6:49 a.m.•11 views

sysctl_coalition_get_pid_list-dos

sysctlcoalitiongetpidlist-dos The sysctlcoalitiongetpidlist function in bsd/kern/syscoalition.c uses the coalitiongetpidlist function to collect a list of PIDs in a coalition. This function will return the number of PIDs if successful or a negative errno on failure. However, the...

9.3CVSS7.1AI score0.01436EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 6:37 a.m.•19 views

shfz

shfz Una herramienta de fuzzing para aplicaciones web basada en escenarios que admite la generación de fuzz mediante algoritmos genéticos. Características Fácil de personalizar las pruebas de fuzzing mediante la creación de scripts de escenarios en JavaScript / TypeScript Paquetes de terceros se...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 6:20 a.m.•82 views

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

6.5AI score
SaveExploits0References9
Kitploit
Kitploit
•added 2026/09/25 6:18 a.m.•117 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/25 5:47 a.m.•9 views

CVE-2024-12849-Poc

CVE-2024-12849-Poc 📜 Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of...

7.5CVSS7.8AI score0.46858EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 5:28 a.m.•11 views

AppleDOS

AppleDOS CVE-2018-4407 Basado en CVE-2018-4407 https://lgtm.com/blog/applexnuicmperrorCVE-2018-4407, este tweet y este video. El error es una vulnerabilidad de desbordamiento de montón en el manejo de paquetes maliciosos cuando el sistema operativo intenta enviar un mensaje ICMP que contiene...

8.8CVSS8AI score0.21223EPSS
SaveExploits11
Kitploit
Kitploit
•added 2026/09/25 5:14 a.m.•8 views

CVE-2024-12849

CVE-2024-12849 Error Log Viewer By WP Guru = 1.0.1.3 - Missing Authorization to Unauthenticated Arbitrary File Read Description The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the...

7.5CVSS7.8AI score0.46858EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 4:23 a.m.•12 views

SQLiDetector

SQLiDetector Script simple en Python compatible con el perfil BurpBounty que te ayuda a detectar inyecciones SQL "basadas en errores" enviando múltiples solicitudes con 14 payloads y verificando 152 patrones regex para diferentes bases de datos. root@kitploit:...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 4:22 a.m.•12 views

CVE-2023-27587-PoC

CVE-2023-27587-PoC The simple PoC of CVE-2023-27587 What is ReadToMyShoe? ReadtoMyShoe RTMS is a web application rust, yew and axum that lets you upload articles via URL or via directly pasting and listen to them later. Impact If an error occurs when adding an article, the website shows the user ...

7.4CVSS7AI score0.03857EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/25 4:20 a.m.•10 views

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Fallo de omisión de autenticación en Really Simple Security de Wordpress en Docker Descripción Los plugins Really Simple Security Free, Pro y Pro Multisite para WordPress, versiones 9.0.0 a 9.1.1.1, se ven afectados por una vulnerabilidad de omisión de autenticación. Este problem...

9.8CVSS7.6AI score0.82025EPSS
SaveExploits21References1
Kitploit
Kitploit
•added 2026/09/25 4:16 a.m.•11 views

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

7.8CVSS7.7AI score0.43409EPSS
SaveExploits6References2
Kitploit
Kitploit
•added 2026/09/25 3:58 a.m.•168 views

blind-sql-bitshifting

Blind SQL Injection via Bitshifting This is a module that performs blind SQL injection by using the bitshifting method to calculate characters instead of guessing them. It requires 7/8 requests per character, depending on the configuration. Usage root@kitploit: import blind-sql-bitshifting as x...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 3:54 a.m.•33 views

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 3:47 a.m.•12 views

dontgo403

dontgo403 es una herramienta para evitar errores 40X. Instalación Obtén la última versión para tu sistema operativo desde RELEASES Desactualizado por ahora O compílalo por tu cuenta RECOMENDADO: root@kitploit: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/25 3:36 a.m.•8 views

MAL-006

MAL-006: XML External Entity in "Try It" in WSO2 ESB An error-based XML External Entity XXE attack was identified in the WSO2 ESB "Try It" tool. Why no CVE? The vendor replied that "Try it is recommended to be disabled in production" and no public disclosure was made. Requirements: This...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder