airborn-IOS-CVE-2025-24252

iOS "Airborne" Vulnerabilities - Log Artifact Extractor This script is designed to help identify potential traces of the "Airborne" set of vulnerabilities primarily affecting Apple's AirPlay protocol by querying iOS system logs from a .logarchive bundle. It automates the execution of several log...

whatsapp-media-decrypt

WhatsApp Media Decrypt Una reciente investigación forense de alto perfil informó que “debido al cifrado de extremo a extremo empleado por WhatsApp, es prácticamente imposible descifrar el contenido del archivo descargado .enc para determinar si contenía algún código malicioso además del video...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

CVE-2025-0851

CVE-2025-0851 This vulnerability occurs in the Deep Java Library an open-source framework for Java deep learning when providing utilities for extracting tar and zip model archives used for loading models. A File Traversal vulnerability arises in the untar and unzip functions. Details: When creati...

xioc

xioc Extrae indicadores de compromiso de texto, incluyendo aquellos "escapados" como hxxp://banana.com, 1.1.1.1 y phish at malicious dot com. Instalación Descarga un binario precompilado desde https://github.com/assafmo/xioc/releases O... Usa go get: root@kitploit: go get -u github.com/assafmo/xi...

CVE-2025-68664-LangGrinch-PoC

📑 Table of Contents 🎯 Executive Summary 📂 Project Structure 🚀 Quick Start...

pcapan

pcapan A pcap capture analysis helper Usage: root@kitploit: $ git clone https://github.com/synacktiv/pcapan $ cd pcapan $ cargo run -- --pcap /tmp/capture.pcap --google -w whitelist.yaml Finished dev unoptimized + debuginfo targets in 0.04s Running target/debug/pcapan --pcap /tmp/log.tcpdump...

pmg

pmg Extract parameters/paths from urls usage : $ cat urls.txt | python3 PmG.py results Save results $ cat urls.txt | python3 PmG.py ResultsFile.txt here you can add more parameters/paths using regex :D root@kitploit: wordlist = r'url=|password=|link=|u=|word=|username=|linkid=', r'+CSCOU+',...

FOCA

FOCA Identificación de Organizaciones mediante Archivos Recopilados FOCA es una herramienta utilizada principalmente para encontrar metadatos e información oculta en los documentos que escanea. Estos documentos pueden estar en páginas web y pueden descargarse y analizarse con FOCA. Es capaz de...

gpg_reaper

GPG Reaper TL;DR: Obtener/Robar/Restaurar Claves Privadas GPG de la caché/memoria de gpg-agent Este POC demuestra un método para obtener claves privadas GPG de la memoria de gpg-agent en Windows. Normalmente esto solo debería ser posible dentro de un período de 10 minutos valor de...

CVE-2024-24919

Mass Auto Scanner for CVE-2024-24919 This script is designed to scan a list of URLs for the CVE-2024-24919 vulnerability on remote Check Point firewalls. It attempts to exploit the vulnerability by sending a malicious POST request to extract specified files from the target servers. Running the...

CVE-2019-14314

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Authenticated SQL Injection Usage root@kitploit: usage: cve201914314.py -h url loginuser loginpass username CVE-2019-14314 Hash Extractor positional arguments: url Wordpress blog URL loginuser Username to login with loginpass Password to logi...

CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit

CMS-Made-Simple-2.2.10---SQL-Injection-Exploit-with-Bug-Fixes The exploit has been fixed to support Python 3 CVE-2019-9053 Original exploit source: https://www.exploit-db.com/exploits/46635 Possible error and its fix Traceback most recent call last: File "46635.py", line 12, in from termcolor...

CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053-

CMS Made Simple = 2.2.9 Exploit de Inyección SQL CVE-2019-9053 📌 Descripción Este exploit apunta a una vulnerabilidad de inyección SQL no autenticada en CMS Made Simple = 2.2.9 CVE-2019-9053. La vulnerabilidad permite a los atacantes extraer información sensible como nombre de usuario, correo...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan This Metasploit-Framework module can be use to help companies to check the last Citrix vulnerabilites disclosed July 08, 2020. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Public reporting on July 8th, 2020 by Donny Maasland discussed how the vulnerability could be exploite...

EUVD-2026-72698

The WPML Multilingual CMS plugin for WordPress is vulnerable to time-based SQL Injection via the ‘elementIds’ parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes ...

Burp_Collector

Burp Collector Burp Collector is a multi-processing tool that is specifically designed to aid Pentesters and Bug Hunters in Web/Mobile Application testing. With its powerful capabilities, it streamlines the process of collecting and extracting information from Burp Suite files, empowering you to...

lpc_sniffer_tpm

TPM Specific lpc sniffer low pin count for ice40 stick Turn the ice40 stick into a LPC sniffer, only logging TPM specific messages. This repository is a duplicate of https://github.com/lynxis/lpcsniffer/, with modifications made to only log messages with start field 0101 and address between 24 an...

ntoskrnl-metadata

ntoskrnl-metadata An IDA Python script for extracting critical kernel metadata from Windows ntoskrnl.exe binaries. This tool automatically extracts function RVAs and EPROCESS structure offsets required for developing exploits targeting CVE-2026-40369 and other kernel vulnerabilities. Purpose This...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes Audio Leakage via URL Extraction Fixed & Rewarded 🛡️ Vulnerability Summary In 05/2025, I discovered a vulnerability in Instagram Web that allowed any user to extract the original video file from a Note and access the background audio , which was not meant to be publicly...