Solr-SSRF

Solr-SSRF CVE-2021-27905 The repeat package in the Burp file contains specific steps for reproduction. The POC is a detection plugin for Xray...

AutoSploit

Docker deployment instructions tl;dr Using docker-compose: root@kitploit: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker docker-compose run --rm autosploit Using just Docker: root@kitploit: git clone https://github.com/NullArray/AutoSploit.git cd Autosploit/Docker If y...

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - exploit for SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of...

Creosote

Creosote Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559. The tool recursively traverses the given directory searching for python files. When the tool finds python files it scans them for the tarfile module and then parses the code into an AST to loo...

CVE-2021-34646

CVE-2021-34646 PoC this vulnerability detail by NVD Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink...

CVE-2024-34472

CVE-2024-34472 Description: An authenticated user can abuse Blind SQL injection vulnerability exists in the mliRealtimeEmails.php file. The ordemGrid parameter in a POST request to /mailinspector/mliRealtimeEmails.php does not Properly sanitize input, allowing an authenticated attacker to execute...

chaoskube

chaoskube chaoskube periodically kills random pods in your Kubernetes cluster. Why Test how your system behaves under arbitrary pod failures. Example Running it will kill a pod in any namespace every 10 minutes by default. root@kitploit: $ chaoskube INFO0000 starting up dryRun=true interval=10m0s...

wordlist_generator

wordlistgenerator Tool wordlistgenerator generates unique to your target wordlist with techniques mentioned in tomnomnom's video "Who, What, Where, When". It takes URLs from gau to extract directories, file names or words on pages. As additional feature it can extract HTML comments. By default to...

PiFinger

root@kitploit: | \ | | | | | | | | .--. .--./ .---. .--. | / | | | | .-. | / /';/ /\ /'\ | | | | | | | | | | | | \ .//| ., | | || || ||.', '..' --- Just for fun and security...

cve-2017-5638

cve-2017-5638 cve-2017-5638 Vulnerable site sample This project aims to demonstrate the CVE-2017-5638 exploitation for educational purpose. For more informations, see https://cwiki.apache.org/confluence/display/WW/S2-045 Legal Disclaimer This project is made for educational and ethical testing...

CVE-2024-50986

CVE-2024-50986: DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementine v.1.3.1 Researcher: Utkarsh r1971d3 LinkedIn NIST CVE Link:...

CVE-2024-37383-exploit

Exploit Title: Roundcube mail server exploit for CVE-2024-37383 Stored XSS Google Dork: Exploit Author: AmirZargham Vendor Homepage: Roundcube - Free and Open Source Webmail Software Software Link: Releases · roundcube/roundcubemail Version: Roundcube client version earlier than 1.5.6 or from 1.6...

CVE-2024-7135

CVE-2024-7135 El plugin Tainacan para WordPress es vulnerable al acceso no autorizado a datos debido a una comprobación de capacidad faltante en la función 'getfile' en todas las versiones hasta la 0.21.7 inclusive. La función también es vulnerable a directory traversal. Esto permite a atacantes...

CVE-2019-16097

CVE-2019-16097 This program is only for security research, do not use it illegally! Vulnerability Impact Attackers can create an administrator account, upload malicious images, and infect clients using the repository. Affected Component Harbor Affected Versions 1.7.0-1.8.2 Remediation Upgrade to...

SDK-SMS-Stack

SMS Stack Sms Stack is a Framework to provide TPC/IP based characteristics to the GSM Short Message Service. This framework works in multiple environments to provide a full stack integration in a service. The main layer features techniques to control the order and the number of sms for a given...

wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 20 de agosto de 2020 Plugin 0day de Wordpress La vulnerabilidad de elFinder es una vulnerabilidad bien conocida, mi script solo cambia la ruta a "/wp-content/plugins/wp-file-manager/". Deja de pedirme correcciones en el script o cualquier otra cosa. RTFM...

PassBreaker

PassBreaker PassBreaker is a command-line password cracking tool developed in Python. It allows you to perform various password cracking techniques such as wordlist-based attacks and brute force attacks. Features Wordlist-based password cracking Brute force password cracking Support for multiple...

cloudbunny

CloudBunny CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. You can read more about the tool here: https://tinyurl.com/y8p48wb3 How works In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye. To use the tools...

droidcarve

DroidCarve DroidCarve is capable of analyzing an Android APK file and automate certain reverse engineering tasks. This repository contains the server and client component. The Frontend The frontend is a React application, which you can find in the client/ subfolder. The Backend The backend is a...

Log4j-JNDIServer

Log4j-JNDIServer This project will help to test the Log4j CVE-2021-44228/CVE-2021-45046 vulnerabilities. Installation and Building Load the project on Intellij Idea Select JDK in "Projects Settings" CTRL + ALT + SHIFT + S In "Project Settings", create the Artifact - "Artifacts" - "Create JAR from...