CVE-2018-15982_EXP

CVE-2018-15982EXP Usage root@kitploit: msfvenom -p windows/exec cmd=notepad.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=notepad.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin output exp.swf and index.html。 Demo https://twitter.com/Evi1cg/status/1071284773169950721...

CVE-2025-69599

CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...

censys-subdomain-finder

Censys 子域名查找工具 重要说明 ：截至2024年底，Censys 不再向免费账户提供 API 访问权限。 这是一个利用 Censys Search 中存储的证书透明度日志来枚举子域名的工具。它应能返回任何曾由公开 CA 签发过 SSL 证书的子域名。 看它如何运行： root@kitploit: $ python censys-subdomain-finder.py github.com 正在 Censys 中搜索 github.com 的子域名 在大约 1.7 秒内找到 42 个 github.com 的唯一子域名 - hq.github.com -...

censys-subdomain-finder

Censys subdomain finder Important note : As of late 2024, Censys does not provide API access to free accounts anymore. This is a tool to enumerate subdomains using the Certificate Transparency logs stored in Censys Search. It should return any subdomain who has ever been issued a SSL certificate ...

PE_CVE-CVE-2021-3156

PECVE-CVE-2021-3156 Exploit for Ubuntu 20.04 using CVE-2021-3156, enhanced with simple and automated post-exploitation scripts Besides the root shell you can have: -A .txt file with all the idrsa ssh keys configured in the server. See the script: getallsshkeys.sh -A privshell executable that allo...

urlgrab

Welcome to urlgrab 👋 A golang utility to spider through a website searching for additional links with support for JavaScript rendering. Install root@kitploit: go get -u github.com/iamstoxe/urlgrab Features Customizable Parallelism Ability to Render JavaScript including Single Page Applications su...

SlackPirate

SlackPirate - Slack Enumeration and Extraction Tool This is a tool developed in Python which uses the native Slack APIs to extract 'interesting' information from a Slack workspace given an access token. As of May 2018, Slack has over 8 million customers and that number is rapidly rising - the...

CVE-2024-21626-runcPOC

Vulnerability Reproduction CVE-2024-21626 docker runc Escape Vulnerability 1. Vulnerability Overview Vulnerability Name| docker runc Escape Vulnerability ---|--- CVE ID| CVE-2024-21626 Disclosure Date| 2024-01-31 Characteristic| / Affected Versions| runc @ v1.0.0-rc93, 1.1.11 2. Exploitation &...

web-brutator

Web Brutator Bruteforce rápido y modular de interfaces web 📥 Instalación root@kitploit: python3 -m pip install -r requirements.txt ⏩ Uso root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /...

web-brutator

Web Brutator Fast Modular Web Interfaces Bruteforcer 📥 Install root@kitploit: python3 -m pip install -r requirements.txt ⏩ Usage root@kitploit: $ python3 web-brutator.py -h . / \ / \ \ | \ \ / | / | \ // // | \ | | /\ \ | \ \ \ \ / \ \ \ /\ /| \ \ // | | \ | | / | /| | / | | | / /\ / \ / |...

lighty-sqlinj-demo

title: Ep4 - Network-Related Vulnerability members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 Related vulnerability: root@kitploit: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. Confirm:...

haiti

HAITI HA sh I denT ifI er What is it? A CLI tool and library to identify hash types hash type identifier. CLI library Features 675+ hash types detected Modern algorithms supported SHA3, Keccak, Blake2, etc. Hashcat and John the Ripper references CLI tool & library Hackable Installation...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suite es un proyecto para escanear vulnerabilidades y explotar sistemas automáticamente. Características CLI Escaneo y explotación completamente automáticos Detectar el rango de IP de red sin ninguna entrada del usuario Detección de vulnerabilidades basada en versiones de...

FirmAE

FirmAE FirmAE is a fully-automated framework that performs emulation and vulnerability analysis. FirmAE significantly increases the emulation success rate From Firmadyne's 16.28% to 79.36% with five arbitration techniques. We tested FirmAE on 1,124 wireless-router and IP-camera firmware images fr...

kostebek

Reconnaissance Tool Introduction The Kostebek is a reconnaissance tool which uses firms' trademark information to discover their domains. Reference : https://evren.ninja/en/post/recon-is-everywhere/ Demo video : Setup Downloading Kostebek git clone https://github.com/esecuritylab/kostebek...

kostebek

Herramienta de Reconocimiento Introducción Kostebek es una herramienta de reconocimiento que utiliza información de marcas comerciales de empresas para descubrir sus dominios. Referencia : https://evren.ninja/en/post/recon-is-everywhere/ Video de demostración : Configuración Descargando Kostebek...

Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

POC_CVE-2025-32433

⚠️ Ethical Disclaimer This repository contains code that demonstrates a real CVE CVE-2025-32433. Use it only in environments where you have explicit authorization. Never test this exploit against systems you do not own or manage. Unauthorized use is illegal, unethical, and harmful to the...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

laurel

Linux Audit – Registro utilizable, robusto y fácil LAUREL es un complemento de postprocesamiento de eventos para auditd8 que genera registros de auditoría JSON enriquecidos y útiles, adecuados para configuraciones modernas de monitoreo de seguridad. La documentación correspondiente a la última...