Lucene search
+L

67265 matches found

Nuclei
Nuclei
β€’added 2026/09/30 2:12 a.m.β€’59 views

DomainMOD <=4.13.0 - Cross-Site Scripting

DomainMOD through 4.13.0 contains a cross-site scripting vulnerability via /reporting/domains/cost-by-month.php in Daterange parameters. id: CVE-2019-15811 info: name: DomainMOD =4.13.1 to mitigate this vulnerability. reference: - https://www.exploit-db.com/exploits/47325 -...

6.1CVSS6.2AI score0.0699EPSS
SaveExploits5References5
Nuclei
Nuclei
β€’added 2026/09/30 2:12 a.m.β€’229 views

Mongo-Express - Remote Code Execution

Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...

9.8CVSS8.7AI score0.74519EPSS
SaveExploits0References5
Nuclei
Nuclei
β€’added 2026/09/30 2:12 a.m.β€’110 views

Spring Cloud Netflix - Server-Side Request Forgery

Spring Cloud Netflix 2.2.x prior to 2.2.4, 2.1.x prior to 2.1.6, and older unsupported versions are susceptible to server-side request forgery. Applications can use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server hosting the dashboard. An attacke...

6.5CVSS7AI score0.10214EPSS
SaveExploits0References5
Nuclei
Nuclei
β€’added 2026/09/30 2:12 a.m.β€’53 views

Osclass Security Advisory 3.4.1 - Local File Inclusion

A directory traversal vulnerability in OSClass before 3.4.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter in a render action to oc-admin/index.php. id: CVE-2014-6308 info: name: Osclass Security Advisory 3.4.1 - Local File Inclusion author: daffainfo...

5CVSS5.9AI score0.2226EPSS
SaveExploits6References5
Kitploit
Kitploit
β€’added 2026/09/30 2:01 a.m.β€’13 views

barq

barq barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...

5.9AI score
SaveExploits0
CVE
CVE
β€’added 2026/09/30 2:00 a.m.β€’9 views

CVE-2026-102847

The gedelumbung HospitalManagement software is vulnerable to Cross-Site Scripting (XSS) due to a flaw in the Guest Book component. Specifically, the kirim function within the file application/modules/web/controllers/buku_tamu.php fails to properly handle the nama , email , and pesan arguments. Th...

5.3CVSS3.9AI score0.00273EPSS
SaveExploits0References6
Kitploit
Kitploit
β€’added 2026/09/30 1:58 a.m.β€’14 views

Lockdoor-Framework

Lockdoor v2.3 ⚠️ This project is not maintained anymore. ⚠️ Find more at https://g.co/kgs/TtYRJJP Table of contents Table of contents Changelog πŸ“Œ : Badges πŸ“Œ : Support me πŸ’° : Contributors ⭐ : Versions 06/2021 : 2.3 03/2020 : 2.2.3 Blogs & Articles πŸ“° : Overview πŸ“™ : Features πŸ“™ : Pentesting Tools...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/30 1:47 a.m.β€’27 views

LiveContainer

LiveContainer An app launcher that runs iOS apps without actually installing them! Crowdin Project: | Documentation:liveconainer.github.io LiveContainer LiveContainer is an app launcher not emulator or hypervisor that allows you to run iOS apps inside it. Allows you to install unlimited apps 3...

5.8AI score
SaveExploits0References19
Kitploit
Kitploit
β€’added 2026/09/30 1:46 a.m.β€’230 views

beef

=============================================================================== Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

6AI score
SaveExploits0References9
Kitploit
Kitploit
β€’added 2026/09/30 1:37 a.m.β€’14 views

CVE-2021-41773

ApacheRCE ApacheRCE is a small little python script that will allow you to input the apache version 2.4.49-2.4.50 and then input a list of ip addresses from a text file and mass run the exploit on them, this can be useful if you are running mutiple websites and you want to see if they can all be...

9.8CVSS8.2AI score0.99992EPSS
SaveExploits167
Kitploit
Kitploit
β€’added 2026/09/30 1:36 a.m.β€’20 views

SharpStrike

SharpStrike SharpStrike is a post-exploitation tool written in C that uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/30 1:30 a.m.β€’274 views

redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/30 1:29 a.m.β€’13 views

XSHOCK

⚑ xShock ShellShock ⚑ Written by TMRSWRR Version 1.0.0 xShock ShellShock CVE-2014-6271 This tool exploits shellshock. Instagram: TMRSWRR πŸ–ΌοΈ Screenshots πŸ–ΌοΈ πŸ“Ή How to use πŸ“Ή Click on the image... πŸ“’ Read Me πŸ“’ All founded directories will be saved in vulnurl.txt file. The results of the executed commands...

10CVSS8.5AI score0.99999EPSS
SaveExploits140References1
Kitploit
Kitploit
β€’added 2026/09/30 1:24 a.m.β€’20 views

MSSQLand

✈️ MSSQLand Land gracefully in your target Microsoft SQL Server MS SQL DBMS, as if arriving on a business-class flight with a champagne glass in hand. πŸ₯‚ MSSQLand is a C Microsoft SQL Server MSSQL / MS SQL post-exploitation tool built for red team operators. Designed to run inside the target...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/30 1:18 a.m.β€’21 views

Ghost

Ghost Framework Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Installation pip3 install git+https://github.com/EntySec/Ghost...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/09/30 1:17 a.m.β€’25 views

CTFs

CTFs Writeups / Files for some of the Cyber CTFs that I've done I've also included a list of CTF resources as well as a comprehensive cheat sheet covering tons of common CTF challenges !NOTE There is now a web mirror of this repo at hackback.zip Table of Contents Resources YouTube Channels Practi...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/30 1:12 a.m.β€’18 views

FFM

Freedom Fighting Mode FFM FFM is a hacking harness that you can use during the post-exploitation phase of a red-teaming engagement. The idea of the tool was derived from a 2007 conference from @thegrugq. It was presented at SSTIC 2018 video and the accompanying slide deck is available at this url...

6.2AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/30 1:12 a.m.β€’11 views

p0wnedShell

p0wnedShell PowerShell Runspace Post Exploitation Toolkit Author: Cn33liz and Skons Version: 2.6 License: BSD 3-Clause What is it: p0wnedShell is an offensive PowerShell host application written in C that does not rely on powershell.exe but runs powershell commands and functions within a powershe...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/30 1:04 a.m.β€’11 views

smokedmeat

SmokedMeat CI/CD Red Team Framework Like Metasploit, but for CI/CD pipelines. From the makers of thepoutine Build Pipeline SAST scanner at BoostSecurity Labs. Warning: This tool is for authorized security testing only. SmokedMeat exists because CI/CD pipeline threats are deeply underestimated...

6.1AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/09/30 1:00 a.m.β€’12 views

CVE-2024-21338

CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...

7.8CVSS8.3AI score0.5981EPSS
SaveExploits13
Rows per page
Query Builder