CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 RCE autenticata di Windows Admin Center tramite WinREST/PowerShell invokeCommand. Utilizzo: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Variabili d'ambiente: root@kitploit: WACBASE - override target base URL default below WACPASS -...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120: exploit LPE per Windows Supporta sia x32 che x64. Testato su: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64. Utilizzo root@kitploit: CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe command...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

scripthunter

scripthunter Scripthunter è uno strumento che trova file javascript per un dato sito web. Per scansionare Google, esegui semplicemente ./scripthunter.sh https://google.com. Nota che potrebbe richiedere del tempo, motivo per cui scripthunter implementa anche un meccanismo di notifica per informart...

GHSA-298F-872V-2RCX ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption

Summary A malicious OCI registry can return a cyclic referrer graph e.g. A - A or A - B - A. The ORAS CLI's recursive referrer traversal does not track visited descriptors, so a cycle causes unbounded recursion and memory growth — a client-side denial of service. This affects oras discover...

ORAS CLI: Cyclic Referrer Graph Can Cause Unbounded Recursion and Resource Consumption

Summary A malicious OCI registry can return a cyclic referrer graph e.g. A - A or A - B - A. The ORAS CLI's recursive referrer traversal does not track visited descriptors, so a cycle causes unbounded recursion and memory growth — a client-side denial of service. This affects oras discover...

CVE-2026-60004-poc-gitea

CVE-2026-60004 Proof-of-Concept PoC Panoramica Questo repository contiene uno strumento proof-of-concept per CVE-2026-60004, un vettore di esecuzione remota di codice RCE autenticato o pre-autenticazione che interessa alcune versioni di Gitea tramite la tecnica di iniezione di hook diffpatch...

wp2shell-Exploit-Waf-Bypass

root@kitploit: | \ / / / / / | | /| / / \ / // / / / / / | |/ |/ / // // / / / / / / / |/|/////// ///// WordPress Pre-Auth RCE — CVE-2026-63030 + CVE-2026-60137 by Venexy M4xSec Nicht authentifizierte Remote-Codeausführung auf WordPress 6.8.0–6.8.5, 6.9.0–6.9.4, 7.0.0–7.0.1. Behoben in 6.8.6,...

IPCDump

ipcdump Ankündigungsbeitrag ipcdump ist ein Werkzeug zur Verfolgung der Interprozesskommunikation IPC unter Linux. Es deckt die meisten gängigen IPC-Mechanismen ab – Pipes, Fifos, Signale, Unix-Sockets, Loopback-Netzwerk und Pseudoterminals. Es ist ein nützliches Werkzeug zum Debuggen von...

fpicker

fpicker fpicker è una suite di fuzzing basata su Frida che offre una varietà di modalità di fuzzing per fuzzing in-process, come una modalità AFL++ o una modalità di tracciamento passivo. Dovrebbe funzionare su tutte le piattaforme supportate da Frida. Istruzioni di installazione Compilazione ed...

CVE-2026-64638-POC

CVE-2026-64638 — XSS2Shell XSS riflesso pre-autenticazione → Esecuzione remota di codice nel core di WordPress ⚠️ DISCLAIMER: Questo repository è destinato esclusivamente a ricerca di sicurezza autorizzata e scopi didattici. Non utilizzarlo contro sistemi di cui non si è proprietari o per i quali...

GoAT

GoAT Golang Advanced Trojan è un trojan creato in Go, che utilizza Twitter come server C&C. GoAT ha alcune capacità davvero uniche e impressionanti, tra cui l'esecuzione multithread dei comandi e un sofisticato modulo rootkit di autodifesa scritto in C. Se non hai familiarità con i malware, ti...

waybackurls

waybackurls Accept line-delimited domains on stdin, fetch known URLs from the Wayback Machine for .domain and output them on stdout. Usage example: root@kitploit: ▶ cat domains.txt | waybackurls urls Install: root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest Credit This tool was...

waybackurls

waybackurls Aceita domínios delimitados por linha no stdin, busca URLs conhecidas da Wayback Machine para .domain e as exibe no stdout. Exemplo de uso: root@kitploit: ▶ cat domains.txt | waybackurls urls Instalação: root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest Créditos Esta...

CVE-2026-55378 JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

EUVD-2026-67859

JS Recon is a JavaScript enumeration and SAST tool. From 1.2.1-beta.1 until 1.3.1-beta.2, the PR Branch Checker workflow in .github/workflows/prchecker.yml places github.headref and github.event.pullrequest.head.repo.fullname into BRANCHNAME and SOURCEREPO and interpolates those untrusted values...

CVE-2026-55378

JS Recon is a JavaScript enumeration and SAST tool. In versions 1.2.1-beta.1 through 1.3.1-beta.2 , the PR Branch Checker workflow in .github/workflows/pr_checker.yml interpolates untrusted values (github.head_ref and github.event.pull_request.head.repo.full_name) directly into a shell gh pr comm...

DirDar

DirDar v1.0 Beschreibung 🏴‍☠️ verbotene Verzeichnisse umgehen - Verzeichnisauflistung finden und identifizieren - Sie können es auch als Verzeichnis-Brute-Forcer verwenden Kompatibilität Dieses Tool ist mit allen Betriebssystemen kompatibel, solange ein GO-Compiler installiert ist. Installation Sie...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

godoh

🕳 godoh Um Prova de Conceito de Comando e Controle via DNS-over-HTTPS introdução godoh é uma estrutura framework de Comando e Controle de prova de conceito, escrita em Golang, que utiliza DNS-over-HTTPS como meio de transporte. Atualmente, os provedores suportados incluem Google, Cloudflare, mas...