CVE-2019-16759

vBulletin RCE 5.x Obtener Email + SMTP CVE-2019-16759 Esta herramienta extrae y vuelca Email + SMTP del servidor de base de datos USO root@kitploit: $ git clone https://github.com/mas1337/CVE-2019-16759.git && cd CVE-2019-16759 $ ./vb-email-smtp.sh list.txt Aviso legal Todo el código en este...

guasap-whatsapp-foresincs-tool

Guasap Forensic The Guasap Forensic implemented in Python under the GNU General Public License, for the extraction and analysis of files, data bases and logs for forensic WhatsApp. What it does? 1. Check root in device 2. Extract DB and multimedia files no root 3. Extract and analyze deleted...

CVE-2025-5777-Exploit

CVE-2025-5777 Exploit Tool 🔥 A powerful educational tool designed to demonstrate and analyze the vulnerability CVE-2025-5777 affecting Citrix NetScaler VPN. This project is part of the GO-TO CVE initiative. ⚠️ For educational purposes only. Do NOT use this on systems you don't own or have explicit...

CVE-2024-3094_xz_check

CVE-2024-3094 xz Check Script This repository contains a Bash script and a one-liner command to verify if a system is running a vulnerable version of the "xz" utility, as specified by CVE-2024-3094. See the description and impact statement below from information available via RedHat...

CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit Proof of Concept tool for extracting users and password hashes via the CVE-2026-63030 wp2shell vulnerability. Vulnerability Information CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 Type : Pre-Auth...

Cisco-UCM-SQLi-Scripts

Scripts de CVE-2019-15972 Cisco UCM SQLi Scripts que se pueden usar para explotar CVE-2019-15972, un problema de SQLi autenticado en Cisco Unified Call Manager UCM. Enumerar tablas - enumera todas las tablas en la base de datos subyacente y coloca los nombres de las tablas en un archivo de texto...

Cisco-Smart-Exploit

Cisco-Smart-Exploit Exploit de Cisco SmartInstall CVE-2018-0171 Inspirado en C. Papathanasiou PoC Este script de Python 3 utiliza el puerto 4786 en un dispositivo Cisco que ejecuta SmartInstall para explotar CVE-2018-0171. Con el uso de este exploit, un atacante puede crear un payload, enviarlo a...

FollinaExtractor

FollinaExtractor Extract payload URLs from Follina CVE-2022-30190 docx and rtf files usage: extractfollina.py -f C:\path\to\file.rtf...

Winrar-CVE-2023-40477-POC

CVE-2023-4047 PoC By Wild Pointer Read Research: https://wildptr.io/winrar-cve-2023-40477-poc-new-vulnerability-winrar-security-research/ Recvol3.cpp Vulnerability: https://www.rarlab.com/vulnrev3names.html, https://www.win-rar.com/ Vulnerable: WinRAR = 6.22 How to Test? You can generate your own...

pwn-pulse

pwn-pulse.sh Exploit para la vulnerabilidad de lectura arbitraria de archivos en Pulse Connect Secure SSL VPN CVE-2019-11510 Script creado por braindead @BishopFox. Basado en investigación de Orange Tsai y Meh Chang. Gracias también a Alyssa Herrera y 0xDezzy por sus aportes adicionales. Un enorm...

CVE-2025-24071_PoC

CVE-2025-24071PoC CVE-2025-24071: Filtración de hash NTLM mediante extracción de RAR/ZIP y archivo .library-ms Windows Explorer inicia automáticamente una solicitud de autenticación SMB cuando se extrae un archivo .library-ms de un archivo .rar, lo que lleva a la divulgación del hash NTLM. El...

CVE-2026-77697

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction...

CVE-2026-77697

ManageEngine Endpoint Central (by Zohocorp) versions below 11.4.2540.23 are affected by a Privilege Escalation vulnerability during JAR extraction. The flaw allows a locally authenticated user with low privileges to escalate their permissions, with changed scope impacting the confidentiality, int...

EUVD-2026-72340

Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction...

VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS

Pentest Tools — /network Repository of scripts for auditing and penetration testing of networks. Use only on devices with formal authorization. CVE-2018-14847 — MikroTik Winbox Credential Extractor Description Exploits the unauthenticated file read vulnerability in the MikroTik RouterOS Winbox...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 es una vulnerabilidad en el módulo tarfile de Python que permite escrituras arbitrarias de archivos fuera del directorio de extracción al extraer archivos tar no confiables. El problema ocurre al usar TarFile.extract o TarFile.extractall con filter="data" o...

lehack-2026-challenge

LeHack 2026 Challenge A 3-tier challenge demonstrating impact of direct disk mounting. Challenge Overview Level| Goal| Technique ---|---|--- 1| Access the unencrypted disk| Set boot cmdline to init=/bin/bash in grub 2| Crack vault1 LUKS| Extract header → hashcat → unlock & mount vault 3| Crack...

CVE-2025-65320

CVE-2025-65320 Title Cleartext Storage of Sensitive Licensing Material in Process Memory in Abacre Restaurant Point of Sale POS Overview A vulnerability exists in Abacre Restaurant Point of Sale POS versions = 15.0.0.1656 where sensitive licensing data is stored in cleartext in process memory...

joomla.3.7.0exploit

CVE-2017-8917 PoC de SQLi en Joomla Este repositorio contiene un proof of concept PoC simple y apto para CTF para la vulnerabilidad de inyección SQL comfields de Joomla CVE-2017-8917. El objetivo es mantener el flujo de trabajo ligero mientras se muestra el flujo completo de explotación: detecció...

weape

wEAPe 无线EAP提取器脚本（Weape） ============================================ 自动提取EAP 802.1x用户名 由Daniel Compton在Info-Assure Ltd开发 https://github.com/commonexploits/weape.git 安装 root@kitploit: git clone https://github.com/commonexploits/weape.git 使用方法 root@kitploit: ./weape.sh 功能 将无线网卡设置为监听模式 列出所有接入点（AP）...