Larascript

root@kitploit: | | | | | | / || '| / |/ | / || '|| || ' \ | | | | | | || | | | |\ | | | | || | || | || ,||| ,||/ ||| ||| ./ | || Authors: @pwnedshell & @rsgbengi 📌 What its Larascript? Larascript is a script which take advantage from CVE-2018-15133 and can execute remote commands if a...

SocialEngineering-Templates

SocialEngineering-Templates 一个 SET 框架模板...

puppeteer-extra

puppeteer-extra Este es el monorepo de puppeteer-extra, un framework de plugins modular para puppeteer. :- 🌟 Para la documentación principal, dirígete al paquetepuppeteer-extra. También hemos introducido recientemente soporte para Playwright; si te interesa, dirígete a playwright-extra...

evillcode

🔥 Evillcode - Modular MITM Framework Modular cybersecurity framework developed in Python for analysis, monitoring, and simulation of MITM attacks in local networks. It allows students and professionals to understand the inner workings of networks, protocols, and vulnerabilities in controlled...

Untrue

Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...

GhostStrike

HEAD Project 2 is LIVE: GhostStrike Fully automated Spring4Shell CVE-2022-22965 + GitLab RCE framework 100% written from scratch • Python • 2025 Features: • Auto listener nc/tmux Modular design spring4shell.py, payloads/ Colorized output + banner Ready for future exploits LFI-to-RCE, Confluence,...

btlejuice

BtleJuice Framework Introducción BtleJuice es un framework completo para realizar ataques Man-in-the-Middle en dispositivos Bluetooth Smart también conocidos como Bluetooth Low Energy. Se compone de: un núcleo de interceptación un proxy de interceptación una interfaz web dedicada bindings de Pyth...

CVE-2025-64328_FreePBX-framework-Command-Injection

CVE-2025-64328 FreePBX Authenticated Command Injection in framework module Simple proof of concept repository for CVE-2025-64328 FreePBX Authenticated Command Injection in the framework module. Full writeup here: https://theyhack.me/CVE-2025-64328-FreePBX-Authenticated-Command-Injection/ curl pro...

CVE-2018-1000529

CVE-2018-1000529 NVD CVE-2018-1000529: https://nvd.nist.gov/vuln/detail/CVE-2018-1000529 MITRE CVE-2018-1000529: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1000529 Stored XSS in Grails Fields Plugin =2.2.7 This repository was used to demonstrate a proof of concept of the vulnerability fo...

CVE-2024-38828

CVE-2024-38828 Vulnerability Description The test checks behavior/reaction in Spring Framework with and without the CVE-2024-38828 vulnerability. In ByteArrayHttpMessageConverter, memory is allocated in ByteArrayOutputStream based on the Content-Length request header, which may not match reality ...

blackash-cve-2025-6389

🔥 CVE-2025-6389 — 严重 WordPress 零日漏洞（远程代码执行） wpvultheme 🧩 这是什么？ CVE-2025-6389 是一个 严重（CVSS 9.8） 漏洞，存在于被流行主题广泛使用的 Sneeit Framework WordPress 插件（≤ 8.3）中。 它允许 未认证远程代码执行 —— 这是最危险的 Web 漏洞类型。 ⚠️ 严重性与影响 🔓 无需登录 💥 可能完全接管服务器 📤 攻击者可上传 shell、添加管理员用户或修改主题/插件文件 🧬 已在野外 被积极利用 🎯 影响任何使用 Sneeit Framework 或捆绑了该框架的主题（例如...

TriSuElla-AIDLCA-Framework

🔱 TriSuElla-AIDLCA Framework One Unified Continuous Trust, Risk, Security & Compliance Layer for Conventional Systems, Generative AI & Autonomous Multi-Agent Workloads Software Version : 3.4.0 | Framework Version : 3.4.0 | Status : Institutionalized Production-Ready, DevSecOps-Ready & CI-Verified...

CVE-2024-38819-POC

CVE-2024-38819: Proof of Concept PoC This is a proof of concept for the CVE-2024-38819 vulnerability, which I reported, demonstrating a path traversal exploit. Execution Steps 1. Build the Docker image Spring Boot 3.3.4, based on Spring Framework 6.1.13 root@kitploit: cd vuln docker build -t...

testng-team__testng_CVE-2022-4065_7-5

Documentation available at TestNG's main web site. Release Notes 7.4.0 7.3.0 7.1.0 7.0.0 Need help? Before opening a new issue, did you ask your question on Google group...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

CVE-2022-22965

CVE-2022-22965 Spring4Shell-PoC Version Spring Framework 5.2.20 and 5.3.18 Patched version: Spring Framework 5.3.18 and 5.2.20 Spring Boot 2.6.6 and 2.5.12 Details Spring Core is the core component of Spring Framework. This is the foundation to build other components in the Spring Framework...

React2Shell

🚀 R2S - Next.js RSC 漏洞利用框架 用于 Next.js React Server Components RCE 的高级后渗透利用框架 特性 • 安装 • 使用 • 命令 • 示例 📋 概述 R2S 是一个针对 Next.js React Server Components 漏洞（CVE-2025-55182）的综合性利用与后渗透利用框架。它提供了一个交互式 shell，具备高级功能，可用于渗透测试，包括文件传输、持久化、枚举、权限提升检测等。 🎯 关键能力 ✅ 自动化漏洞扫描 - 批量扫描多个目标 ✅ 交互式 RCE shell - 带目录导航的状态化命令执行 ✅...

westone-CVE-2021-45232-scanner

westone-CVE-2021-45232-scanner Apache APISIX Dashboard earlier versions 2.10.1 has security vulnerability on unauthorized access. the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on...

phishing-frenzy

Phishing Frenzy 基于 Ruby on Rails 的网络钓鱼框架 文档与信息 最新的相关文档可在下方官方 Phishing Frenzy 网站上找到 Phishing Frenzy 网站 请将任何工单或问题提交到 GitHub issues 页面 Phishing Frenzy 工单 如需直接联系我们，请使用官方 Phishing Frenzy 网站 Phishing Frenzy 网站...

TekDefense-Automater

TekDefense-Automater Version: 0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html Automater is a tool that I originally created to automate the OSINT analysis of IP addresses. It quickly grew and became a tool to do...