INtrack

INtrack - Internet Crawler & Security Scanner INtrack is a powerful, multi-threaded security scanner and internet crawler designed for network reconnaissance, vulnerability detection, and security assessment. It can scan for a wide variety of instances, vulnerabilities, IoT devices, exposures, an...

PiFinger

root@kitploit: | \ | | | | | | | | .--. .--./ .---. .--. | / | | | | .-. | / /';/ /\ /'\ | | | | | | | | | | | | \ .//| ., | | || || ||.', '..' --- Just for fun and security...

CVE-2026-31431

CVE-2026-31431 — Local Privilege Escalation via AFALG 2026-04-29 — I am publishing this exploit one day after sharing it on theMyDigitalLife forum. It does not require Python; it is written in C and compiled to the smallest possible size using: root@kitploit: musl-gcc -static -Os -o exploit...

CVE-2021-22053

CVE-2021-22053 CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability Description Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the...

AutoDirbuster

root@kitploit: / | / / / / / / / / /| |/ / / / / / / / / / / / / / / / / / / / / // / // // / // / / / / // / // // / / // |,////// /./,///// Ejecutar y guardar automáticamente escaneos ffuf para múltiples IPs Contenido Ejecución rápida FAQ ¿Por qué? ¿Cuál es el uso recomendado? ¿Qué...

cve-exploit

CVE-EXPLOIT Use this software only for legal purposes. I am in no way responsible for your actions. Use python 3.11.2 Made by Edu0x01 DESCRIPTION cve-exploit is a hub for finding CVEs and exploits. It is based on the official NIST, ExploitDB and Github databases. The tool makes it quick and easy ...

CVE-2026-8206

CVE-2026-8206 Vulnerability: Unauthenticated Account Takeover — Password Reset Email Hijacking in Kirki Customizer Framework CVSS v3.1 9.8 / 10.0 CRITICAL Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 1. Overview CVE-2026-8206 is an Unauthenticated Account Takeover vulnerability in Kirki Customizer...

CVE-2024-4577-checker

CVE-2024-4577 Vulnerability Checker The CVE-2024-4577 Vulnerability Checker is a Bash script designed to scan multiple domains for the CVE-2024-4577 vulnerability in PHP-CGI. This tool allows security researchers and system administrators to quickly assess whether their systems or a list of domai...

WhatsRCE

WhatsRCE This is a Automated Generate Payload for CVE-2019-11932 WhatsApp Remote Code Execution 1. Auto install GCC no harm command, you can see this is open-source 2. Saving to .GIF file How To Use ? root@kitploit: sudo apt install git git clone https://github.com/KeepWannabe/WhatsRCE cd WhatsRC...

CVE-2026-60004

CVE-2026-60004 Gitea diffpatch RCE ★ CVE-2026-60004 Gitea diffpatch Git Hook RCE PoC ★ https://github.com/user-attachments/assets/403a70f4-4ff4-4ab7-b11c-d73d70adaf0b Overview CVE-2026-60004 is a Remote Code Execution RCE vulnerability in Gitea. The diffpatch API applies a supplied patch with git...

wordpress-cve-2018-6389

WordPress-CVE-2018-6389 WordPress Core - 'load-scripts.php' Denegación de Servicio = 4.9.4 Fecha: 05/02/2018 Enlace del software: WordPress Versión: = 4.9.4 Probado en: KaLi Linux 2018.1 CVE: CVE-2018-6389 Descubierto por: Barak Tawily Exploit por: Javier Olmedo ¿CÓMO USARLO? Clona este repositor...

TIDoS-Framework

TIDoS 攻撃的なWebアプリケーションペネトレーションテストフレームワーク。 重要 : 新しいQt5インターフェースは完成していますが、追加の依存関係があります。更新されたインストール手順をご確認ください。 ハイライト :- このフレームワークの概要は以下の通りです。 偵察から脆弱性分析まですべてをカバーする完全な多用途フレームワーク。 5つの主要フェーズがあり、14のサブフェーズに分割され、合計108のモジュールで構成されています。 偵察フェーズには50のモジュール（アクティブおよびパッシブ偵察、情報漏洩モジュールを含む）があります。...

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-

Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212- Download files from my repostry using git clone git clone https://github.com/JasaluRah/Creating-a-Vulnerable-Docker-Environment-CVE-2023-30212-.git now to set docker image Creating docker image use the command sudo docker build -t work . To...

CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40032: Simple Task Managing System - 'login' and 'password' SQL Injection Unauthenticated Exploit Title: Simple Task Managing System - 'login' and 'password' SQL Injection Unauthenticated Date: 2022-01-09 Exploit Author: Hamdi Sevben Vendor Homepage:...

CobaltStrikeDos

Una vulnerabilidad de denegación de servicio DoS CVE-2021-36798 fue encontrada en Cobalt Strike. La vulnerabilidad se corrigió en la versión 4.4. Se puede encontrar más información aquí Uso root@kitploit: python3 CobaltStrikeDos.py https://1.1.1.1 root@kitploit: $ python3 CobaltStrikeDos.py...

bluebox

Note; this repository makes references to external repositories known as Git submodules. After cloning this repository, please make sure to run the following commands to clone those submodules: root@kitploit: git submodule init git submodule update BlueBox BlueBox is a collection of scripts and...

private-landing

Private Landing Aprende autenticación construyéndola correctamente. Demo en vivo · Modelo de amenazas · Flujos de autenticación · ADRs Nota de la demo: El endpoint de inicio de sesión está protegido por desafíos PoW adaptativos — los fallos repetidos devuelven una dificultad de prueba de trabajo...

CVE-2025-29927

CVE-2025-29927 in Next.js 15.2.0 How to Run: root@kitploit: git clone https://github.com/nyctophile0969/CVE-2025-29927 cd CVE-2025-29927 npm install [email protected] npm run dev...

CVE-2021-3129

CVE-2021-3129 RCE sin autenticación en Laravel Ignition mediante carga de archivos Resumen de la CVE En versiones afectadas de Laravel Ignition, un atacante puede ejecutar código arbitrario debido al uso inseguro de filegetcontents y fileputcontents. Esto solo es explotable en sitios web que usan...

cve-2021-41773

CVE-2021-41773 – Apache Path Traversal Report Summary Vulnerability found in Apache HTTP Server 2.4.49 that can expose sensitive files on the system through a Path Traversal attack depending on the web server configuration Path Traversal: An attacker can access files outside the web root using...