CVE-2025-99999

CVE-2025-99999 - HSM Firmware Authentication Bypass Description Critical authentication bypass in HSM Firmware v4.5.0 allowing key extraction. Affected Systems HSM Firmware v4.5.0 all builds Financial institutions using this HSM for SWIFT transaction signing IOCs IP| Port| Description ---|---|---...

CVE-2019-14751_PoC

CVE-2019-14751PoC A Proof of Concept for CVE-2019-14751 Vulnerability Description NLTK Downloader before version 3.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction. For...

CVE-2024-44000

EN GenCookieSessionHijack is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies. This allows the attacker to hijack active admin sessions and gain unauthorized access to the WordPress admin dashboard. Features Extract cookies from WordPre...

keepass-password-dumper

KeePass 2.X Master Password Dumper CVE-2023-32784 Update The vulnerability was assigned CVE-2023-32784 and fixed in KeePass 2.54. Thanks again to Dominik Reichl for his fast response and creative fix! Clarification: the password has to be typed on a keyboard, not copied from a clipboard see the H...

firmware-reverse-engineering

Habilidades de Ingeniería Inversa de Firmware Cinco habilidades de agente de OrbitCurve para extracción de firmware, análisis estático, ingeniería inversa con Ghidra, emulación y reportes de seguridad, por Hussein Muhaisen. La colección empaqueta los flujos de trabajo existentes, referencias,...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar Path Traversal Scanner Detects npm packages vulnerable to CVE-2026-31802 , a path traversal vulnerability in the tar npm package that allows arbitrary file writes during archive extraction. Features Scans package-lock.json for vulnerable tar versions Checks nodemodules fo...

sccmsqlclient

sccmsqlclient A dedicated MSSQL client for SCCM database exploration and exploitation. Recon queries Run PowerShell scripts on managed clients Extract secrets Installation PIPX root@kitploit: $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP You can install by cloning the...

gitbleed_tools

GitBleed 工具 - 用于从镜像的 Git 仓库中提取数据 关于 此仓库包含可用于下载和分析克隆仓库与镜像 Git 仓库之间差异的 Shell 脚本。有关 Git 行为中底层特性的更多信息，请访问阅读我们的博文。 这些脚本的作用是什么？ 这些脚本将克隆给定的 Git 仓库，分别以常规克隆和镜像（"--mirror"）选项进行。然后，它会在两者之间创建差异，试图找出仅存在于镜像模式中的仓库部分。最后，将运行 gitleaks 检查差异部分是否存在任何秘密，并使用 "git log" 创建一个包含提交内容的单一文件，以便更轻松地进行分析。...

Seth

Seth Seth is a tool written in Python and Bash to MitM RDP connections by attempting to downgrade the connection in order to extract clear text credentials. It was developed to raise awareness and educate about the importance of properly configured RDP connections in the context of pentests,...

binwalk

Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...

killcast

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...

wordlist_generator

wordlistgenerator Tool wordlistgenerator generates unique to your target wordlist with techniques mentioned in tomnomnom's video "Who, What, Where, When". It takes URLs from gau to extract directories, file names or words on pages. As additional feature it can extract HTML comments. By default to...

CVE-2025-8088-WinRAR-Proof-of-Concept-PoC-Exploit-

CVE-2025-8088 WinRAR Proof of Concept PoC-Exploit This repository contains a Proof of Concept PoC script for CVE-2025-8088 , a path traversal vulnerability in WinRAR versions up to 7.12. This PoC demonstrates how attackers could exploit the vulnerability to place malicious files outside the...

box-js

box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: root@kitploit: npm install box-js --global box-js is also available: as a Cuckoo module see the integrations directory and Nwinternights/CuckooBoxjs; as a Dockerfile see integrations/README.md; as a...

PyNightmare

PyNightmare PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSAM fully written in python3 Explanation CVE-2021-36934 is a recently discovered vulnerability found by @jonasLyk allowing non-admin users to copy all registry hives which contain very private information like hashes which could lead to...

CVE-2017-5638_struts

I extended Scott Campbell's script further, made it more complicated : While "HTTPStrutsAttack" will stop 100% of the recon, there was still miniscule chance that if a scanner hits a vulnerable system, even though we'd block the scanner, vulnerable system might still do the wget included in the...

toutatis

Toutatis 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Toutatis is a tool that allows you to extract information from...

toutatis

Toutatis 👋 你好！如有任何专业咨询或合作，请通过以下邮箱联系我： [email protected] 📧 请尽量使用你的工作邮箱进行沟通。让我们保持简洁高效，全部使用英文！ Toutatis 是一款可从 Instagram 账户中提取信息的工具，例如邮箱、电话号码等。 BTC 捐赠地址：1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ 💡 前提条件 Python 3 🛠️ 安装 通过 PyPI pip install toutatis 通过 GitHub root@kitploit: git clone...

Azur3Alph4

Azur3Alph4 About Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach RCE achieved position. Token extraction and many other tools will not execute successfully without starting in this position. This module should be used for...

urx

Extracts URLs from OSINT Archives for Security Insights. Urx is a command-line tool designed for collecting URLs from OSINT archives, such as the Wayback Machine and Common Crawl. Built with Rust for efficiency, it leverages asynchronous processing to rapidly query multiple data sources. This too...