Cybersec

Offensive CyberSec Cheat Sheet A highly dynamic, single-file HTML cheat sheet designed for Red Teamers, Pentesters, and CTF players. Tired of typing the same Reverse Shell payloads and constantly replacing your local IP and port? This tool eliminates the "Typo Fatigue" and cognitive load during...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

CVE-2026-43499-aristotle

CVE-2026-43499 — aristotle au/KDDI Xiaomi XIG04 Local privilege escalation tmp-root for the au/KDDI Xiaomi "aristotle" XIG04 on Android 12 , via CVE-2026-43499. It is a device-owner rooting primitive: it roots your own phone e.g. to re-enable ADB when developer options are unreachable. This is an...

pastenum

Pastenum Pastenum es una herramienta de enumeración de volcados de texto. Está diseñada para ayudar a encontrar y enumerar volcados de datos y doxs publicados en sitios públicos. Actualmente busca en los sitios github.com, gist.github.com, pastebin.com, pastee.org y pastie.org. Pastenum es una...

ravage

Ravage Ravage is an evidence-first CLI for assessing a running web application that you own or are explicitly authorized to test. It combines deterministic reconnaissance and validation with an optional model-driven attack loop, while keeping scope, authentication, traffic accounting, and evidenc...

CVE-2022-24086

CVE-2022-24086 Probado con: magento 2.4.3 y datos de ejemplo Imagen de Docker: docker.io/bitnami/magento:2.4.3-debian-10-r0 Nombre: root@kitploit: var this.getTemplateFilter.filter$order.shippingaddress.cityvar...

Laravel-debug-Checker

Laravel-debug-Checker CVE-2021-3129 Checker By ./MrMad Refrence : https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 install module root@kitploit: python -m pip install -r requirements.txt installation on linux root@kitploit: git clone...

shodscript

ShodScript Automate exploit and PoC execution against Shodan search results. Query Shodan, filter targets, and run your scripts against every match - concurrently, with structured output and export. Why You have a PoC script that takes an IP and port. You want to run it against every host matchin...

SHA256-CDP

SHA256-CDP: Cyclic Digit-sum Projection GPU-accelerated rainbow table implementation of the CDP structural analysis framework for SHA-256. Built on the findings of the CDP paper DOI: 10.5281/zenodo.20627240, this repository provides a complete, working implementation of CDP-based rainbow chain...

DOCxNGINxFX

WORDLISTxGENERATORxFX Versión 1.0 Versión 2.0 WORDLISTxGENERATORxFX renombrado a DOCxNGINxFX Versión 3.0 DOCxNGINxFX Escribí esto para devolver algo a la gran y poderosa comunidad de código abierto que comparte su conocimiento o frameworks y de quienes he aprendido tanto. La función principal de ...

fix-CVE-2020-15228

Fix CVE-2020-15228 set-env, add-path in Github-Actions This script changes lines in your github action file. You give it a directory name, and it searches for all files with the ".sh" or ".yml" extension. It recognizes these lines: root@kitploit: echo ::set-env name=FOOBAR::$FOOBAR echo ::set-env...

DotNetHookerToolkit

InjectorCli + ManagedHookHostProj This repository contains two projects that are designed to be used together: InjectorCli: A .NET Framework 4.8 console injector built on frida-clr Frida.dll ManagedHookHostProj: A .NET Framework 4.8 helper DLL with native exports via 3F .NET DllExport used to...

rmx3888-cve-2026-43499-config

Configuración del exploit CVE-2026-43499 para realme RMX3888 Información del dispositivo Marca/Modelo : realme RMX3888 Versión de Android : 16 SDK 36 ID de compilación : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Arquitectura : ARM...

CVE-2024-10914

CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...

CVE-2018-16119

CVE-2018-16119: Ejecución Remota de Código Autenticada en TP-Link WR1043ND Resumen CVE-2018-16119 es una vulnerabilidad crítica de ejecución remota de código autenticada que afecta a los routers TP-Link TL-WR1043ND. Esta vulnerabilidad permite a atacantes autenticados ejecutar comandos arbitrario...

CVE-2019-13272

CVE-2019-13272 Linux local root exploit Linux 4.10 5.1.17 PTRACETRACEME local root CVE-2019-13272 root@kitploit: In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local...

envsec

envsec Secure environment secrets management using native OS credential stores. Demo Features Store secrets in your OS native credential store not plain text files Cross-platform: macOS, Linux, Windows Organize secrets by context e.g. myapp.dev, stripe-api.prod, work.staging Track secret metadata...

dirtyclone-exploit

DirtyClone Exploit Framework CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '| | | | | | | |/ | ' \ ...

CVE-2021-42013_Reverse-Shell

CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI Usage : root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:port/ LHOST LPORT More info: root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:8083...

CVE-2026-43499-Redmi-Turbo5

CVE-2026-43499 Exploit for Redmi Turbo 5 This preload library is built from the duchamp-root source code. ⚠️ WARNING: For educational and authorized security research purposes only. This repository provides a proof-of-concept exploit for CVE-2026-43499 GhostLock targeting the Xiaomi Redmi Turbo 5...