Exploit for CVE-2021-3030

CVE-2021-3030 — Cute Editor 6.4 Reflected Cross-Site Scripting...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

Exploit for Code Injection in Grafana

CVE-2026-27876: Grafana SQL Expressions Arbitrary File Write t...

Fix-Apple-Mail-CVE-2020-9922

Fix-Apple-Mail-CVE-2020-9922 Apple Mail tiene una vulnerabilidad aterradora de cero clics. Las versiones de OS X anteriores a High Sierra no fueron parcheadas. https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c Lo hice rápidamente y solo lo probé en...

A-Red-Teamer-diaries

Diarios de un Red-Teamer Notas de acceso público sobre mis experimentos de pentesting/red teaming realizados en varios entornos/infraestructuras controladas que implican jugar con diversas herramientas y técnicas utilizadas por pentesters y redteamers durante una evaluación de seguridad. Proyecto...

sherloq

Un conjunto de herramientas forenses de imágenes digitales de código abierto Introducción "El análisis forense de imágenes es la aplicación de la ciencia de la imagen y la experiencia en el dominio para interpretar el contenido de una imagen y/o la imagen en sí misma en asuntos legales. Las...

Exploit for Out-of-bounds Read in Apple Ipados

JPEG XL auto-decodes in the iOS Messages preview path A deliv...

raink

Use LLMs for document ranking. Description There's power in AI in that you can "throw a problem at it" and get some result, without even fully defining the problem. For example, give it a bunch of code diffs and a security advisory, and ask, "Which of these diffs seems most likely to fix the...

spring-webmvc5

spring-webmvc5 Fork spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819 Maven Añade el siguiente contenido a las dependencias en el pom.xml del proyecto: root@kitploit: io.github.jaloon spring-webmvc5 5.3.39.1...

vuln-bank

Vulnerable Bank Application 🏦 A deliberately vulnerable web application for practicing application security testing of Web, APIs and LLMs, secure code review and implementing security in CI/CD pipelines. ⚠️ WARNING: This application is intentionally vulnerable and should only be used for...

CVE-2024-31449

CVE-2024-31449 Redis es una base de datos no relacional en memoria de código abierto. Resumen Vulnerabilidad de desbordamiento de búfer basado en pila presente en todas las versiones de Redis que incluyen el motor Lua. Relacionada con la función bit.tohex dentro del motor Lua el módulo bit se...

Searpy

🥀 Searpy 🔧 Herramienta de búsqueda por lotes, útil para recopilación y trazabilidad Compatible con py2 y py3 1. Instalación root@kitploit: git clone https://github.com/j3ers3/Searpy pip install -r requirements.txt 配置API及账号 ./config.py python Searpy -h 2. Ayuda root@kitploit: Searpy Engine Tookit...

envsec

envsec Gestión segura de secretos de entorno mediante almacenes de credenciales nativos del sistema operativo. Demo Características Almacena secretos en el almacén de credenciales nativo de tu sistema operativo no en archivos de texto plano Multiplataforma: macOS, Linux, Windows Organiza secretos...

pentest-ai

pentest-ai It doesn't flag. It proves. Website · Install · Why verification · Benchmarks · Limits · Discord ⚠️ Offensive tooling, authorized testing only. By installing you accept the AUP and Terms. See Responsible use ↓ Two minutes, no API key, no target of your own root@kitploit: pip install pta...

OpenTAXII

OpenTAXII TAXII server implementation in Python from EclecticIQ. OpenTAXII is a robust Python implementation of TAXII Services that delivers rich feature set and friendly pythonic API built on top of well designed application. OpenTAXII is guaranteed to be compatible with Cabby, TAXII client...

h3-cli

NodeZero MCP Server The NodeZero MCP Server is now available, enabling you to run and manage a locally hosted MCP Server that brings NodeZero’s Find, Fix, Verify FFV capabilities directly to your development and security workflows. MCP Readme h3-cli: CLI tool for the Horizon3.ai API h3-cli is a...

lxd-group-privesc-report

LXD Root Local Privilege Escalation to root via default lxd group membership and the lxd-installer package on Ubuntu. Demo runs on AWS EC2 Ubuntu Server 26.04 The bug is that Ubuntu Server 26.04's default install silently grants the primary user membership in the lxd group, a group that by LXD's...

dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with mode1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

CVE-Factory

CVE-Factory: Scaling Expert-Level Agentic Tasks for Code Security Vulnerability CVE-Factory is a Multi-Agent system for fully automated, end-to-end CVE reproduction. Given CVE records, the system automatically researches details, generates test cases, builds Docker environments, and validates tha...

depsguard

depsguard text | | | | /|/ \ ' / |/ | | | |/ | '/ | | | | / | \ | | || | | | | | | | ,|| ./|/ , |, |, || ,| | | |/ root@kitploit: Guarda tus dependencias contra ataques a la cadena de suministro. Binario estático único, cero dependencias de crates Rust. Por arnica Tabla de contenidos - Resumen -...