RsWindowsThingies

RsWindowsThingies Windows Thingies... but in Rust Tools listenmft Watch an entries' values change. root@kitploit: listenmft 0.2.0 Matthew Seyer See the differences in MFT attirbues. USAGE: listenmft.exe OPTIONS FLAGS: -h, --help Prints help information -V, --version Prints version information...

linux-smart-enumeration

First, a couple of useful oneliners ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...

inter-recon

inter-recon Script to perform automatic initial web and vulnerability recon. It has some checks in case of errors. There is a possibility to skip some checks, to restart them and/or to continue with the last point you stopped. This is because sometimes there are network issues like time limit on...

bread

🍞 BREAD BREAD BIOS Reverse Engineering & Advanced Debugger is an 'injectable' real-mode x86 debugger that can debug arbitrary real-mode code on real HW from another PC via serial cable. Introduction BREAD emerged from many failed attempts to reverse engineer legacy BIOS. Given that the vast...

CVE-2018-7747

CVE-2018-7747 CalderaForms 1.5.9.1 XSS WordPress plugin - tutorial CalderaForm is a WordPress plugin that makes it easy to create forms via drag and drop. During a recent engagement I happened to test some portals, one of which hosted a contact form created with this plugin. The custom...

CVE-2026-3576

CVE-2026-3576 - Wordpress Plugin Planyo Online Reservation System = 3.0 - Arbitrary File Read via SSRF This repo contains a python based Proof of ConceptPoC exploit for CVE-2026-3576. It can also be found in Exploit-DB here. I have also developed a Metasploit module for this exploit which can be...

featherduster

FeatherDuster and Cryptanalib FeatherDuster is a tool written primarily by Daniel "unicornfurnace" Crowley, along with community contributions, for breaking crypto; It tries to make the process of identifying and exploiting weak cryptosystems as easy as possible. Cryptanalib is the moving parts...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

CVE-2026-83593 WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-83593

The WPBot – AI ChatBot plugin for WordPress (versions up to and including 8.7.3 ) is vulnerable to an unauthenticated Stored Cross-Site Scripting (XSS) flaw via the 'conversation' parameter . The root cause is insufficient input sanitization and output escaping , compounded by a nonce check that ...

EUVD-2026-74688

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-19946 Awesome Support <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Denial via 'user_id' Parameter

The Awesome Support plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 6.3.9. This is due to a missing capability check on the wpasdomrdenyuser function, which unlike its counterpart wpasdomractivateuser does not enforce currentusercan'editusers' or...

gost

gost - GO Simple Tunnel A simple security tunnel written in Golang Features Listening on multiple ports Multi-level forward proxy - proxy chain Standard HTTP/HTTPS/HTTP2/SOCKS4A/SOCKS5 proxy protocols support Probing resistance support for web proxy Support multiple tunnel types TLS encryption vi...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.co...

nikto

nikto Nikto escáner de servidores web - https://cirt.net/Nikto2 Documentación completa - https://github.com/sullo/nikto/wiki Ejecutar normalmente: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h...

CVE-2018-25031

CVE-2018-25031 CVE-2018-25031 exploits tests Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. HowTo Find the documentation endpoint a...

CVE-2019-6446

CVE-2019-6446 Numpy Deserialization Command Execution NumPy is a powerful Python library primarily used for performing computations on multi-dimensional arrays. Experts have analyzed that versions less than or equal to 1.16.0 contain this vulnerability. The fix recommendation is to delete the...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

udp2raw

Udp2raw-tunnel A Tunnel which turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket, helps you Bypass UDP FireWallsor Unstable UDP Environment. When used alone,udp2raw tunnels only UDP traffic. Nevertheless,if you used udp2raw + any UDP-based VPN together,you can tunnel an...

RAUDI

🐳 RAUDI: Regularly and Automatically Updated Docker Images RAUDI Regularly and Automatically Updated Docker Images automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers. Table of Contents What is RAUDI Fork Setu...