dbdtct

dbgdtct Desctiption dbgdtct is a Python-based tool designed to help you detect if a web application is deployed in debug mode—a critical misconfiguration that can expose sensitive information and increase the risk of exploitation in production environments. Installation root@kitploit: git clone...

WG-CVE-2026-1555-Linux

root@kitploit: ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝...

CVE-2025-9074-POC

CVE-2025-9074-POC Proof-of-Concept exploit for CVE-2025-9074 ⚠️ Legal Disclaimer This PoC is released for educational and authorized security testing purposes only. Unauthorized exploitation of systems is illegal and unethical. Use this PoC only on environments you own or have explicit permission...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba Print Job Name Command Injection Overview CVE-2026-4480 is a command injection vulnerability affecting certain Samba printing configurations that use external print commands. The vulnerability exists because Samba inserts user-controlled print job metadata...

CVE-2025-63296

CVE-2025-63296 Summary KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and...

CrushFTP-auth-bypass-CVE-2025-31161

CrushFTP Authentication Bypass - CVE-2025-31161 A comprehensive toolkit for exploiting CVE-2025-31161, an authentication bypass vulnerability in CrushFTP that allows unauthorized user account creation. 🔍 What is CVE-2025-31161? CVE-2025-31161 is a critical authentication bypass vulnerability in...

inception

नोट: यह टूल अब सक्रिय विकास के अधीन नहीं है, कृपया PCILeech देखें। INCEPTION Inception एक भौतिक मेमोरी हेरफेर और हैकिंग टूल है जो PCI-आधारित DMA का दोहन करता है। यह टूल FireWire, Thunderbolt, ExpressCard, PC Card और किसी भी अन्य PCI/PCIe HW इंटरफेस पर हमला कर सकता है। Inception का लक्ष्य DMA का...

CVE-2009-4623

CVE-2009-4623 Shell remota en CVE-2009-4623: Obtén un shell no interactivo, abre otro shell para un uso avanzado !!! uso: CVE-2009-4623.sh hostnameandPath ejemplo: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php opciones: -h esta basura...

netzob

नेटज़ॉब : प्रोटोकॉल रिवर्स इंजीनियरिंग, मॉडलिंग और फज़िंग .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 पूर्ण दस्तावेज़ीकरण यहाँ देखें: https://netzob.github.io/netzob/ नेटज़ॉब के बारे में नेटज़ॉब संचार प्रोटोकॉल के रिवर्स...

andriller

Andriller CE समुदाय संस्करण Andriller - यह स्मार्टफोन के लिए फोरेंसिक टूल्स के संग्रह वाली एक सॉफ्टवेयर उपयोगिता है। यह Android उपकरणों से केवल-पढ़ने योग्य, फोरेंसिक रूप से ध्वनि, गैर-विनाशकारी अधिग्रहण करता है। इसमें पैटर्न, PIN कोड, या पासवर्ड के लिए शक्तिशाली लॉकस्क्रीन क्रैकिंग जैसी सुविधाएँ...

cve-2025-55182

CVE-2025-55182 aka React2Shell Setup test enviornment root@kitploit: kiot :: /react2shell » docker compose build --no-cache kiot :: /react2shell » docker compose up POC Payload 1. RCE with response in body root@kitploit: POST / HTTP/1.1 Host: localhost:3000 Next-Action: whatever Content-Type:...

node9-proxy v2.8.3

🛡️ Node9 What did your AI agent actually do? Find out. Node9 sits between your AI agent and the tools it can use — discover what it's already been doing, protect against risky actions in real time, and review what happened over any time window. Works with Claude Code · Codex CLI · Antigravity agy ...

CVE-2025-29927-scanner

Escáner de CVE-2025-29927 Este script de Python identifica hosts vulnerables a CVE-2025-29927, una vulnerabilidad de autorización incorrecta en el middleware de Next.js que puede permitir la omisión de autenticación. El script comprueba el uso de Next.js, identifica la versión, detecta la cabecer...

dirtypipe

DESCARGO DE RESPONSABILIDAD Este código es solo con fines educativos y de investigación. No lo utilices en sistemas que no poseas o para los que no tengas permiso de prueba. El autor no se hace responsable de ningún uso indebido, daño o consecuencia legal derivada del uso de este código. DirtyPip...

CVE-2019-12937-ToaruOS

CVE-2019-12937 ToaruOS is an open-source computer operating system written in C, a hobbyist operating system developed by an undergraduate computer science student at the University of Illinois. ToaruOS runs on POSIX and x86 architectures. Its main features include support for processes and...

CVE-2025-63406-PoC

CVE-2025-63406 PoC Installation root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Usage root@kitploit: python3 CVE-2025-63406.py -u -n -p ...

POC_CVE-2026-45185

CVE-2026-45185 Laboratorio de Validación de Plantillas Nuclei Este repositorio no es un repositorio de PoC de exploits de propósito general. Es un laboratorio de validación local para reproducir y revisar el comportamiento de una plantilla CVE-2026-45185 destinada a ser contribuida a...

GhostUnlock-SM-S918U

GhostUnlock — Samsung Galaxy S23 Ultra SM-S918U1, dm3q Temp...

CVE-2023-37073

CVE-2023-37073 Telnet default credentials can lead to information disclosure and denial-of-service DoS attacks. Steps To reporduce This affect the AP AR-5310 root@kitploit: Telnet 192.168.1.1 username:user password:user Then Boom ... You logged in Information disclosure through Telnet default...

hotpatch-for-apache-log4j2

Log4jHotPatch هذه أداة تقوم بحقن وكيل Java في عملية JVM قيد التشغيل. سيحاول الوكيل تصحيح طريقة lookup لجميع مثيلات org.apache.logging.log4j.core.lookup.JndiLookup المحملة لإرجاع السلسلة "Patched JndiLookup::lookup" بشكل غير مشروط. إنه مصمم لمعالجة ثغرة تنفيذ التعليمات البرمجية عن بُعد...