OSIB

OWASP Open Security Information Base OSIB Página do Projeto: https://owasp.org/www-project-open-security-information-base Repositório de Software: https://github.com/OWASP/OSIB Ferramentas Fornecidas: mkdocsmacroosib.py módulo Python instalável manualmente osibmacro.py macro para copiar que impor...

CVE-2026-22730-Scanner

Scanner & Exploit CVE-2026-22730 – SQL Injection nel MariaDB Vector Store di Spring AI Uno strumento professionale di valutazione della sicurezza per CVE-2026-22730 – una vulnerabilità critica di SQL injection scoperta nel MariaDB vector store di Spring AI. Questo strumento consente a penetration...

rtl8812au

RTL8812AU/21AU and RTL8814AU Wireless drivers Only for use with Linux & Android THESE DRIVERS IS DEPRECATED. Use the mac80211 drivers over at https://github.com/lwfinger/rtw88 Important! root@kitploit: Use "ip" and "iw" instead of "ifconfig" and "iwconfig" It's described further down, READ THE...

rtl8812au

Driver wireless RTL8812AU/21AU e RTL8814AU Solo per uso con Linux e Android QUESTI DRIVER SONO DEPRECATI. Utilizza i driver mac80211 su https://github.com/lwfinger/rtw88 Importante! root@kitploit: Use "ip" and "iw" instead of "ifconfig" and "iwconfig" It's described further down, READ THE README!...

SetupHijack

SetupHijack Aperçu SetupHijack est un outil de recherche en sécurité qui exploite des conditions de concurrence et une gestion non sécurisée des fichiers dans les processus d'installation et de mise à jour de Windows. Il cible les scénarios où des installateurs ou programmes de mise à jour...

cs_yara

csyara Cobalt Strike-Yara-Regeln überprüfen Referenzlinks https://github.com/CCob/BeaconEye BeaconEye-Fehlerbehebung: https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-gong-ji-fang-yu/untitled-1 Regel von https://raw.githubusercontent.com/CCob/BeaconEye/master/BeaconEye.cs beaconEye.yar...

Copy-Fail-CVE-2026-31431

Copy-Fail-CVE-2026-31431 Una riproduzione proof-of-concept della vulnerabilità del kernel Linux CVE-2026-31431 , nota anche come Copy Fail. Crediti a: Copy Fail Sistemi Interessati Versioni del kernel Linux 4.14 e successive La maggior parte delle distribuzioni principali rilasciate dal 2017 fino...

CVE-2026-30498

CVE-2026-30498 – Vulnerabilità CSRF AdminPanel 4.0 Panoramica ID CVE: CVE-2026-30498 Riservato da MITRE Scopritore: Mehdi Ben Hamou Esiste una vulnerabilità di Cross-Site Request Forgery CSRF nell'endpoint delete.php di AdminPanel 4.0. Questa vulnerabilità consente a un attaccante di attivare...

CVE-2023-30212-POC

CVE-2023-30212-POC Создание уязвимой среды Docker и эксплуатация уязвимости в Ourphp версии 7.2.0 CVE 2023 30212 Шаг 1. Скачайте и установите Docker в свою систему. Я использую Docker, потому что с ним Ubuntu устанавливается быстро и легко Шаг 2. Настройка окружения Docker root@kitploit: sudo...

strot

Die interne API jeder Website mit natürlicher Sprache reverse-engineeren Das Problem Moderne Websites laden Daten durch versteckte AJAX-Aufrufe: Die Daten sind nicht im HTML – sie werden über interne APIs abgerufen Sie müssen Netzwerkanfragen manuell inspizieren Komplexe Paginierungslogik, die in...

nagios-xi-5.7.5-bugs

nagios-xi-5.7.5-bugs An Nagios XI gemeldete Bugs CVE-2021-25296 Code-Stelle /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php Code-Ausschnitt root@kitploit: if !empty$pluginoutputlen $diskwmicommand .= " --forcetruncateoutput " . $pluginoutputlen; $servicewmicommand .=...

xalgorix

Xalgorix — Pentester IA open-source che dimostra le vulnerabilità La maggior parte degli scanner rileva. Xalgorix dimostra. Un agente LLM autonomo esegue una metodologia di pentest completa, poi un verificatore indipendente ri-sfrutta ogni scoperta prima che venga segnalata — così ottieni prove,...

Analysis-for-stage1-shellcode-loader-from-hacking-

Analyse des Stage-1-Shellcode-Loaders von Hacking Team Flussdiagramm des Codes Netzwerk-IoC https://172\.20\.20\.164 root@kitploit: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0;...

pwn2own2018

Pwn2Own 2018: Safari + macOS RCE no Safari, escape da sandbox e LPE para o kernel no macOS 10.13.3. Uso Instale o nasm e o tornado: root@kitploit: brew install nasm pip3 install tornado Verifique o config.py se quiser alterar o host ou as portas. Em seguida, inicie o servidor com ./server.py e...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

CVE-2019-13272

CVE-2019-13272 PTRACETRACEME CVE-2019-13272 स्थानीय विशेषाधिकार वृद्धि भेद्यता विश्लेषण PTRACETRACEME Linux कर्नेल में एक विशेषाधिकार वृद्धि भेद्यता है, जिसे जैन हॉर्न ने जुलाई 2019 में खोजा था। भेद्यता विश्लेषण: Ptrace एक सिस्टम कॉल है, यह एक ऐसी विधि प्रदान करता है जो एक प्रोसेस tracer को दूसरे...

exploits-rconfig

Exploits Drei Exploits für rconfig = 3.9.4 : root@kitploit: CVE-2019-19509 : authenticated RCE CVE-2019-19585 : Local Privilege Escalation root CVE-2020-10220 : unauthenticated SQLi rconfigrootRCEunauth.py : chaining the three CVEs above to get root reverse shell without authentication...

kube-trivy

Ein einfacher und umfassender Schwachstellenscanner für Kubernetes Zusammenfassung KubeTrivy ist eine Erweiterung von trivy für Kubernetes. KubeTrivy ist ein einfacher und umfassender Schwachstellenscanner für Kubernetes. KubeTrivy erkennt Schwachstellen in Betriebssystempaketen Alpine, RHEL,...

CVE-2025-24813

CVE-2025-24813 Script de preuve de concept PoC pour la vulnérabilité CVE-2025-24813 dans Apache Tomcat. Ce script a été modifié à partir du lien associé et adapté à mes besoins. Configuration de l'environnement Tomcat vulnérable Environnement basé sur l'image officielle Tomcat 9.0.90. Il supprime...

crtsh

crtsh Cliente de API para crt.sh O crtsh permite obter informações sobre um site HTTPS. Ex.: Pesquisar subdomínios. Esta ferramenta utiliza os logs de Transparência de Certificados. Para mais informações, consulte https://crt.sh/ Exemplo Subdomínios Pesquise subdomínios de example.com Organização...