printix-CVE-2022-29551

CVE-2022-29551 Simple Release | Print Friendly A "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to install malicious printer drivers...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

Linux-Kodachi

Overview Login Credentials Terminal Server & Desktop XFCE | Username: kodachi | Password: Security4All Kodachi 9 is Fully Functional Kodachi 9 development is complete and the platform is fully functional. Every component — standalone binaries, terminal server version, desktop edition Debian XFCE,...

CVE-2022-1388

CVE-2022-1388 https://support.f5.com/csp/article/K23605346 This vulnerability may allow an unauthenticated attacker to gain network access to BIG-IP systems through the management port and/or their own IP addresses to execute arbitrary system commands, create or delete files, or disable services...

debugHunter

debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...

git-wild-hunt

git-wild-hunt A tool to hunt for credentials in the GitHub wild AKA githunt Getting started 1. Install the tool 2. Configure your GitHub token 3. Search for credentials 4. See results cat results.json | jq 📺 Demo Installation requirements: virtualenv, python3 1. git clone...

oopso

oopso An easy-to-use client-side OSINT query builder for discovering exposed file managers across search engines. Version: 1.0 Features Multi-engine support: Automatically translates fingerprints into native query syntax for Shodan, FOFA, ZoomEye, and Censys Extensive coverage: Built-in signature...

Gemini-api-key-hunter

Gemini API Key Toolkit A toolkit for discovering, validating, and testing exposed Google Gemini API keys. It consists of two components: Gemisc.py – A high-speed Python scanner that discovers exposed Google API keys from websites and JavaScript files, verifies them against the Gemini API, and...

D-Link

D-Link CVE-2017-12943 Explanation of D-Link modem hack vulnerability The vulnerability recently published for accessing the modem without needing its password, the method is very simple and relies only on directories that are simply placed. In this episode, I will help you how to work with the...

CVE-2025-31161_exploit

CVE-2025-31161 / CVE-2025-2825 python exploit To process a single URL, use the command: python3 script.py -u http://example.com To process a file containing a list of URLs one per line, use the command: python3 script.py -l urls.txt To specify the number of threads, use the -t flag. The script...

static-file-checker

static-file-checker Checks Djangos /static/staticfiles.json for exposed creds using nuclei...

DVR-Exploiter

DVR-Exploiter root@kitploit: Exploit Title: DVR Credentials Exposed Date: 09/04/2018 Exploit Author: Fernandez Ezequiel DVR-Exploiter By: Belahsan Ouerghi Contact: www.facebook.com/ouerghi.belahsan Youtube Tutorial: https://www.youtube.com/watch?v=vdnATjE4II Dorks: intitle:"DVR Login"...

RepoReaper

RepoReaper Overview RepoReaper is a precision tool designed to automate the identification of exposed .git repositories across a list of domains and subdomains. By processing a user-provided text file with domain names, RepoReaper systematically checks each for publicly accessible .git files. Thi...

poc-2025-9074

CVE-2025-9074 | Docker API CVE-2025-9074 PoC（概念验证） 针对 CVE-2025-9074 的高级利用框架，目标为未经认证的 Docker API 端点，并集成交互式命令 Shell。 概述 本工具自动利用暴露的、未启用认证机制的 Docker API 实例，允许在目标主机上创建完整容器并执行命令。该工具具备自定义交互式 Shell，可实现无缝的后渗透操作。 注意： 这是自定义的概念验证实现。我并未发现 CVE-2025-9074。 演示 初始利用 自动化漏洞检测、镜像拉取、容器创建与初始化 交互式命令执行 具备命令执行能力的后渗透 Shell...

redis-checker

redis-checker Detecta servidores Redis expuestos root@kitploit: usage: redis-checker.py -h -u URL -f FILE -p PROXY -P PORT -s SSL options: -h, --help show this help message and exit -u URL, --url URL URL to test -f FILE, --file FILE File of urls -p PROXY, --proxy PROXY Proxy for debugging -P PORT...

XWiki - Information Disclosure

XWiki 16.7.0 to 16.10.11, 17.4.4, and 17.7.0 using XJetty contains an information disclosure vulnerability caused by exposed context allowing static access to files in webapp/ folder, letting attackers access sensitive files, exploit requires use of XJetty package. id: CVE-2025-55749 info: name:...

WPBot <= 8.4.9 - Cross-Site Scripting

WPBot = 8.4.9 is vulnerable to stored cross-site scripting via the conversation parameter in the qcldwbchatbotconversationsave AJAX action. The AJAX nonce qcsecretbotnonceval123qc is publicly emitted on every frontend page via wplocalizescript under the ajaxnonce key, making it freely obtainable ...

uncover

使用多个搜索引擎快速发现互联网上暴露的主机。 功能 • 安装 • 用法 • 配置 • 运行 Uncover • 加入 Discord uncover 是一个 Go 语言封装的工具，利用知名搜索引擎的 API 快速发现互联网上暴露的主机。它专为自动化而设计，因此你可以查询它并将其结果与现有的管道工具一起使用。 功能 同时查询多个搜索引擎 支持的搜索引擎 Shodan Censys FOFA Hunter Quake ZoomEye Netlas CriminalIP PublicWWW HunterHow Google Onyphe Driftnet DayDayMap NerdyData...

CVE-2017-9841

CVE-2017-9841 Laravel-RCE: CVE-2017-9841 CVE-2017-9841 is a critical remote code execution RCE vulnerability that affects the PHPUnit library, widely used for automated testing in PHP. This flaw allows an attacker to execute arbitrary commands on the server if they can access a specific PHPUnit...

strafer

Strafer Elasticsearch 感染正呈指数级增长。攻击者利用开放和暴露的 Elasticsearch 接口在云和非云部署中触发感染。在此次演讲中，我们将发布一款名为 "STRAFER" 的工具，用于检测 Elasticsearch 实例中的潜在感染。该工具允许安全研究人员、渗透测试人员和威胁情报专家检测运行恶意代码的已受损和已感染 Elasticsearch 实例。该工具还使您能够针对以云数据库为目标的恶意软件进行高效研究。在此版本的工具中，支持以下模块： Elasticsearch 实例信息收集与侦察 Elasticsearch 实例在互联网上的暴露情况 检测...