40594 matches found
Aura-State
Aura-State A Python framework for building LLM workflows as state machines, with formal verification built in. root@kitploit: pip install git+https://github.com/munshi007/Aura-State.git What this is Most LLM frameworks let you chain API calls and hope for the best. Aura-State takes a different...
swarm
swarm v0.6.0 English | 中文. Swarm is an open source modular distributed penetration testing Tool that use distributed task queue to implement communication in the master-slave mode system and use MongoDB for data storage. It consists of a distributed framework and function modules. The function...
PoC
PoC A collection of proof-of-concept codes from DARKNAVY. CVE-2025-43300 Target: iOS && macOS Version: before iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Target: Chrome Renderer Version: before 138.0.7204.96 CVE-2024-5274 Target: Chrome Renderer Version: before 125.0.6422.112 Blog Post: CVE-2024-527...
engine
Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...
CVE-2026-95625 Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade
The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...
CVE-2019-19609
CVE-2019-19609 Strapi Framework Vulnerable to Remote Code Execution well, I didnt found any exploit for CVE-2019-19609 so I wrote one. :/ Usage root@kitploit: python3 exploit.py A video https://youtu.be/alhZJmuUd2s More Information https://hack-fast.herokuapp.com/cve/CVE-2019-19609...
CVE-2022-22965_PoC
Spring Framework RCE exploitation Quick pentest notes Step 1: Find some endpoint in your target where is accepted POST/PUT methods + encode your payload URL encode root@kitploit: POST /path/upload HTTP/1.1 Host: Origin: Cookie: JSESSIONID=BE65B534335A5A2538624404C063B70C; Content-Type:...
PFQ
PFQ v6.2 Introduction PFQ is a functional framework designed for the Linux operating system built for efficient packets capture/transmission 10G, 40G and beyond, in-kernel functional processing, kernel-bypass and packets steering across groups of sockets/end-points. It is highly optimized for...
msfconsole-termux
msfconsole-termux How To Install Metasploit-Table on the Android Termux root@kitploit: pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXP root@kitploit: msfconsole -q -x "use...
Spring4shell-CVE-2022-22965-POC
Spring4shell RCE vulnerability This vulnerability affects Spring Core and allows an attacker to send a specially crafted HTTP request to bypass protections in the library’s HTTP request parser, leading to remote code execution. More info Here In order for this vulnerability to be exploited, sever...
vimana-framework
Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...
ThunderCloud
ThunderCloud Framework de Explotación en la Nube Uso root@kitploit: python3 tc.py -h | | | | | / | | | | | | | | | | | | | | | | | | | ' | | | | ' \ / |/ \ '| | | |/ | | | |/ | | | | | | | || | | | | | | / | | || | | || | | | / || ||,|| ||,||| ||/ ,|,| usage: tc.py -h -ce COGNITOENDPOINT...
theo
Theo Obsoleto, ya no se mantiene, no lo instales, no lo uses, ¡estás advertido! Theo pretende ser un framework de explotación y una herramienta de reconocimiento e interacción con blockchain. Características: Escaneo automático de contratos inteligentes que genera una lista de posibles exploits...
CVE-2023-22515
CVE-2023-22515: Confluence Data Center & Server Privilege Escalation Vulnerability Analysis Report 1. Overview CVE-2023-22515 is a critical Broken Access Control vulnerability discovered in Atlassian Confluence Data Center and Server products. An unauthenticated attacker can remotely reactivate...
RedPeanut
RedPeanut root@kitploit: oooooooooooooooooo ooooooooooooooooooooooooooooooooooooooo ooooooooooooooooooooooooooooooooo ooooooooooooooooooooooooooooooooooooooooooo oooooooooooooooooooooooooooo oooooooooooooooooooooooooooooooooooooo RedPeanutv0.3.0@b4rtik Actualmente en pruebas. Problemas conocidos ...
Apache-OFBiz-Authentication-Bypass
Apache OFBiz Authentication Bypass Vulnerability CVE-2023-51467 and CVE-2023-49070 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. The Apache OFBiz Enterprise Resource Planning ERP system, a versatile Java-based web framework widely utilized across industries, is...
T3SF
T3SF Framework de Simulación de Ejercicios Técnicos de Mesa Tabletop Tabla de Contenidos Acerca de Preparando las Cosas TODO CHANGELOG Contribuir Acerca de T3SF es un framework que ofrece una estructura modular para la orquestación de eventos basados en una lista maestra de eventos de escenario...
CVE-2023-36899
CVE-2023-36899 Reproduction environment and tooling for CVE-2023-36899, a cookieless session authentication bypass in the ASP.NET framework. Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework CVE-2023-36899 In modern web development, despite cookies being the preferred...
decider
Decider This work is licensed under a Creative Commons Attribution 4.0 International License. This project makes use of MITRE ATT&CK® - ATT&CK Terms of Use. 📰 3.0.0 - Kiosk is Here Decider is now login-less and responsive. Content updates have been simplified to copying files and restarting Docke...