Apache-CVE-2021-41773

CVE-2021-41773 Apache HTTP Server Path Traversal Contributors 이희수@lheeeesoo Apache HTTP Server 2.4.49 has a vulnerability where it fails to properly block encoded parent paths during URL path normalization. An attacker can use values like .%2e to traverse outside the directories that the web serv...

CVE-2025-9074-Docker-Desktop-Container-Escape

CVE-2025-9074: Docker Desktop Container Escape PoC Proof of Concept exploit for CVE-2025-9074 - a critical container escape vulnerability in Docker Desktop that allows unauthenticated access to the Docker Engine API. Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-9074 CVSS Score|...

WinRAR-Exploit-Tool---Rust-Edition

WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path Traversal Exploit Tool - Written in Rust A high-performance, memory-safe implementation of the WinRAR CVE-2025-8088 exploit tool, rewritten in Rust for better reliability and performance. Features ADS Exploitation - NTFS Alternate Data...

exif-gps-tracer

exif-gps-tracer A python script which allows you to parse GeoLocation data from your Image files stored in a dataset.It also produces output in CSV file and also in HTML Google Maps Prerequisite To run this script fluently , 1 You should have Google Maps API 2 You should enable Map JavaScript API...

CVE-2022-40684

CVE-2022-40684 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

bitbang-cli

BitBang CLI bitbang is a single static binary remote-access multitool. From any browser: an interactive shell and file browser access to the remote machine. You can also reach web apps on that machine's network. Beyond the browser, it does TCP port forwarding, file copy, and terminal sharing. It...

BootStomp

BootStomp BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For more info please refer to the BootStomp paper at https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 To...

tricorne

Tricorne A Fedora Remix for offensive security. "My treasure? If you want it, I'll let you have it. Seek it out! I left everything at that place!" Gol D. Roger The short version Kali owns Debian. BlackArch owns Arch. Parrot owns the "security-focused desktop" niche. No one owns RPM-world offensiv...

lykan

lykan Lykan is a leak analysis program written in C that generates visual graphs of the analysed data. It receives as inputs raw password text dumps where the passwords are separated by '\n' and extracts statistical information about the dumps, including the top passwords, character popularity et...

Metamorph

Metamorph Introduction This tool is a command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows ETW AutoLogger sessions. AutoLoggers automatically start tracing specific ETW providers upon system boot, making them useful for capturing events th...

submonitor

submonitor by xpl0ited1 Description Subdomain monitor with reporting capabilities to Slack, Discord and Telegram Usage: Configure the scanning targets on the targets.txt file, set the reporting config at the config.yaml, then create a cronjob to execute every day root@kitploit: crontab -e 0 8...

hook

Hook Hook exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there is a builtin low privileged user named status that this script...

dirty-pipe-poc

Dirty Pipe POC CVE-2022-0847 POC - https://dirtypipe.cm4all.com/ Description This exploit attempts to use the CVE-2022-0847 vulnerability to overwrite a read only file. When make exploit is run, it will: 1. Create a readonlyfile.txt 2. Execute the dirtypipe exploit. 3. Check if the dirtypipe...

HardeningMeter

Hardening Meter Copyright c OfriOuzan B4MB1 Want to read more about the security mechanisms? Binary files security mechanisms System security mechanisms Description HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and...

0-click-RCE-Exploit-for-CVE-2024-9932

CVE-2024-9932 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858329238153072668 This repository contains a proof-of-concept exploit for CVE-2024-9932, an unauthenticated arbitrary file upload vulnerability in the Wux Blog Editor WordPress plugin, leading to...

Switcheroo

Switcheroo Nintendo Switch JailBreak PoC This is a proof-of-concept of exploiting the CVE-2016-4657 vulnerability to allow for future jail-breaking of the Nintendo Switch console. Please beware that this is not a complete jailbreak, and the code shared here is for academic purpose only! We...

USP

USP Features This Go program establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload binary or script. It offers two trigger options: USB Persistence: The payload is executed whenever a USB device is inserted. Boot Persistence: The...

nextdns

NextDNS CLI Client NextDNS CLI is a command-line tool that allows you to use NextDNS's DNS-over-HTTPS DoH service with advanced capabilities. Although the most advanced features will only work with NextDNS, this program can work as a client for any DoH provider or a mix of NextDNS + another DNS...

evilact

evilact Escáner rápido de vulnerabilidades para CVE-2025-55182 y CVE-2025-66478 en aplicaciones Next.js que usan React Server Components. Compatible con escaneo masivo, confirmación de RCE y verificaciones concurrentes de alto rendimiento. Instalación root@kitploit: git clone...

kraken

Kraken is a simple cross-platform Yara scanner that can be built for Windows, Mac, FreeBSD and Linux. It is primarily intended for incident response, research and ad-hoc detections not for endpoint protection. Following are the core features: Scan running executables and memory of running process...