xll_windows_reverse_shell

xllwindowsreverseshell xll windows reverse shell In your Attacker Kali machine: root@kitploit: git clone https://github.com/n3rdh4x0r/xllwindowsreverseshell.git 1. Update the revsh.ps1 2. create python http server root@kitploit: python3 -m http.server 9999 In your Attacker Windows machine: 1. Mov...

CVE-2025-55182-Toolbox

React2Shell: Comprehensive Exploitation Tool for CVE-2025-55182 Author: lamaper / BITs2Sys Version: 1.0.1 License: MIT 📝 Tool Introduction This tool is an automated penetration testing tool specifically designed for CVE-2025-55182 React Server Components / Next.js prototype pollution leading to...

sigma-ai

AgentShield Sigma Rules What is This Repository? This repository contains detection rules that help identify when an AI agent is being attacked or manipulated. Think of it as a library of "threat signatures" -- each rule describes a pattern that, when matched against an agent's log data, signals...

GhostLock-for-OnePlus15T

GhostLock — OnePlus 15T 잠금 해제된 부트로더locked bootloader OnePlus 15T 기기를 대상으로 하는 커널 익스플로잇. CVE-2026-43499 를 사용하여 부트로더를 잠금 해제하거나 boot.img를 수정하지 않고 루트 권한을 획득합니다. 승인된 보안 연구 및 교육 목적으로만 사용하십시오. 원본GhostLock-for-OnePlus 저장소에서 수정되었으며, OnePlus 15TPLZ110 / SM8850 / Snapdragon 8 Elite의 물리 메모리 레이아웃과 CPU 타이밍에 맞게...

CVE-2025-30208

中文 | English Vite Dev Server Vulnerability Scanner 一个内外网通吃的自动化扫描器 An automated tool for scanning Vite development server vulnerabilities. This tool utilizes the FOFA API to collect potential targets and automatically detects specific vulnerabilities. Features Auto Automatic target asset collectio...

CVE-2024-30851-jasmin-ransomware-path-traversal-poc

Jasmin ransomware web panel path traversal PoC EducationalPurposes https://github.com/codesiddhant/Jasmin-Ransomware I discovered a pre-auth path traversal vulnerability in the Jasmin Ransomware web panel CVE-2024-30851, allowing an attacker to deanonymize panel operators and dump decryption keys...

mastyf.ai

mastyf.ai Perimeter security for your AI. Runtime enforcement, policy control, and full audit trail for every AI action. Website · Quick start · Policy · Dashboard · GitHub The problem AI agents can read your files, push code, query databases, execute shell commands, and call external APIs. They ...

CVE-2026-25177

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2020-12077

CVE-2020-12077 MapPress Maps Pro 2.53.9 - Remote Code Execution RCE due to Incorrect Access Control in AJAX Actions Description The pro version of this plugin registers several AJAX actions that call functions which lack capability checks and nonce checks, specifically the ‘ajaxget’, ‘ajaxsave’,...

ad-autopwn

AD AutoPwn Zero-Auth to Domain Admin — Automated Active Directory Attack Chain A fully automated penetration testing tool that chains 25+ attack techniques to compromise Active Directory environments. Designed for authorized security assessments. root@kitploit: /\ | \ /\ | | | \ / | | | / \ || | ...

CVE-2025-63353

CVE-2025-63353: Predictable Wi-Fi Password Vulnerability in FiberHome GPON ONT Devices References Based on research by Hanianis original CVE disclosure at CVE-2025-63353 Thanks to the security researchers who identified this vulnerability. Legal Disclaimer This information is provided for...

CVE-2024-25600_Nuclei-Template

CVE-2024-25600Nuclei-टेम्पलेट CVE-2024-25600 के लिए Nuclei टेम्पलेट और POC के बारे में जानकारी विवरण 📝 वर्डप्रेस के लिए Bricks थीम संस्करण 1.9.6 तक इसे शामिल करते हुए सभी संस्करणों में रिमोट कोड निष्पादन की कमजोरी है। यह अप्रमाणित हमलावरों को सर्वर पर कोड निष्पादित करने में सक्षम बनाता है। यह...

Crow-Eye

Crow-Eye — Windows Forensics Engine A forensic time machine for Windows. Crow-Eye doesn't just detect — it reconstructs what actually happened on the timeline, from acquisition all the way to a verdict traceable to its source records. Table of Contents Overview ✨ Highlights 👥 Who Crow-Eye Is For ...

trueseeing

README trueseeing is a fast, accurate and resillient vulnerability scanner for iOS/Android apps. We operate on the Dalvik VM level for Android -- i.e. we don't care if the target app is obfuscated or not. Capability Currently we can: Automatically scan app for vulnerabilities, reporting in...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

CVE-2021-38602

CVE-2021-38602 A stored cross site scripting vulnerability is present on the Article editing page in version 5.8.7 of PluXML. User input is not properly sanitized in multiple fields. Vulnerable Fields: Headline optional: Content: Once inserted, XSS can be triggered by visiting the posted article ...

CVE-2024-32002-Exploit

root@kitploit: !/bin/bash git init hook cd hook mkdir -p y/hooks cat y/hooks/post-checkout dotgit.txt git hash-object -w --stdin dot-git.hash printf "120000 %s 0\ta\n" "$cat dot-git.hash" index.info git update-index --index-info index.info git commit -m "add-symlink" git remote add origin...

CVE-2024-10924

POC لـ CVE-2024-10924 يسمح خلل في معالجة الأخطاء في REST API للمكوّن الإضافي Really Simple Plugins الخاص بـ WordPress الإصدارات من 9.0.0 حتى 9.1.1.1 شاملة للمهاجم، عند تفعيل المصادقة الثنائية 2FA، بتجاوز المصادقة والسيطرة على حساب مستخدم أو مسؤول موجود. بما أنني شخص لطيف، ستجد أيضًا الإصدار 9.1.1...

CVE-2022-28368-handler

CVE-2022-28368-handler इस रिपॉजिटरी में एक python स्क्रिप्ट है जो dompdf कैश्ड फ़ॉन्ट एक्सप्लॉइट CVE-2022-28368 के अधिकांश भाग को संभालेगी, आपको बस अनुरोध बनाना होगा। यह एक्सप्लॉइट शुरू करने के लिए एक ट्रिगर स्ट्रिंग भी प्रदान करेगा : उपयोग root@kitploit: usage: CVE-2022-28368.py -h -d...

PwnzzAI

🍕 Welcome to PwnzzAI/pəʊnzɑː/ Shop – The Vulnerable Pizza Shop! 💻 At PwnzzAI Shop, every slice serves up a helping of holistic AI security instruction. This hands-on learning platform prepares professionals to understand the protection of AI technologies broadly delivered through an engaging,...