whatsapp-mitd-mitm

WhatsApp MitD & MitM Introduction This repository contains PoC code and tools that were developed as part of our research 01 on remotely exploiting Man-in-the-Disk MitD vulnerabilities on WhatsApp for Android. As discussed in our blog post, the code and accompanying scripts found here, were used ...

XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: root@kitploit: --host Mandatory - our IP address for reverse connections...

CVE-2026-82692 D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsimgr.cgi. Performing a manipulation of the argument alias/username/password/volumelocation results in os command injection. It is possible to initiate the attack remotely...

CVE-2026-82692

D-Link DNS-340L and DNS-345 (versions up to 20260717 ) are vulnerable to an OS command injection in the CGI script /cgi-bin/iscsi_mgr.cgi . By manipulating the arguments alias , username , password , or volume_location , an attacker can inject and execute arbitrary OS commands. The attack can be ...

CVE-2026-82692 D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsimgr.cgi. Performing a manipulation of the argument alias/username/password/volumelocation results in os command injection. It is possible to initiate the attack remotely...

EUVD-2026-68503

A vulnerability was found in D-Link DNS-340L and DNS-345 up to 20260717. This affects an unknown part of the file /cgi-bin/iscsimgr.cgi. Performing a manipulation of the argument alias/username/password/volumelocation results in os command injection. It is possible to initiate the attack remotely...

CVE_2026_31694

CVE-2026-31694 Passive Scanner A passive Linux host assessment tool for CVE-2026-31694 , a FUSE readdir-cache out-of-bounds write in the Linux kernel. The scanner evaluates the running kernel, FUSE exposure, local package metadata, kernel source evidence, execution environment, and operating-syst...

CVE-2016-2107

CVE-2016-2107 Prueba simple para el oráculo de padding de OpenSSL de mayo de 2016 CVE-2016-2107 Instalación root@kitploit: $ go version go version go1.6.2 darwin/amd64 $ go get github.com/FiloSottile/CVE-2016-2107 Esta herramienta solo compila con Go 1.6+, y solo cuando se descarga en la posición...

submonitor

submonitor por xpl0ited1 Descripción Monitor de subdominios con capacidades de reporte a Slack, Discord y Telegram Uso: Configure los objetivos de escaneo en el archivo targets.txt, establezca la configuración de reporte en config.yaml, luego cree un cronjob para ejecutar cada día root@kitploit:...

CVE-2024-24576-Exploit

CVE-2024-24576-Exploit Las API Command::arg y Command::args indican en su documentación que los argumentos se pasarán al proceso hijo tal cual, independientemente del contenido de los argumentos, y que no serán evaluados por un shell. Esto significa que debería ser seguro pasar entradas no...

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

surf

Surf - Escala tus vulnerabilidades SSRF en entornos cloud modernos surf te permite filtrar una lista de hosts, devolviendo una lista de candidatos SSRF viables. Lo hace enviando una petición HTTP desde tu máquina a cada host, recogiendo todos los hosts que no respondieron y luego filtrándolos en...

log4j-CVE-2021-44228-workaround

log4j-CVE-2021-44228-workaround A. Solution Description This project provides a general purpose workaround for the log4j CVE-2021-44228 vulnerability, which can be used in case you do not have the alternative in short term to re-build your respective project or to patch the log4j-core jars. The...

ps5-uart

Cabecera de 24 pines cerca de salina EDM-010 root@kitploit: emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800...

scout

Scout Scout is a URL fuzzer and spider for discovering undisclosed VHOSTS, files and directories on a web server. A full word list is included in the binary, meaning maximum portability and minimal configuration. Aim and fire! Usage root@kitploit: Usage: scout command Available Commands: help Hel...

scout

Scout Scout es un fuzzer de URLs y un spider para descubrir VHOSTS, archivos y directorios no revelados en un servidor web. Una lista completa de palabras está incluida en el binario, lo que significa máxima portabilidad y mínima configuración. ¡Apunta y dispara! Usage root@kitploit: Usage: scout...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: ES File Explorer Unauthenticated HTTP Service An independently implemented, safety-conscious research harness and technical analysis for CVE-2019-6447 , an unauthenticated HTTP service exposed by vulnerable versions of ES File Explorer for Android. Authorized research only. Use thi...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

Galdralag-firmware

Galdr — Galdralag Firmware Open Invention Network This project is registered with theOpen Invention Network OIN. OIN is a defensive patent pool: members cross-license Linux-related patents so participants can ship and use open-source software with reduced patent exposure. Status: Waiting for:...

git-wild-hunt

git-wild-hunt A tool to hunt for credentials in the GitHub wild AKA githunt Getting started 1. Install the tool 2. Configure your GitHub token 3. Search for credentials 4. See results cat results.json | jq 📺 Demo Installation requirements: virtualenv, python3 1. git clone...