Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping bsc1274788. CVE-2026-63074: CMP Indefinite Cache Growth of ExtraCerts bsc1274797...

system_bt_AOSP10_r33_CVE-2020-0413

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

nvd

nvd Fast, simple library in Go to fetch CVEs from the NVD U.S. National Vulnerability Database feeds. Install root@kitploit: go get github.com/daehee/nvd Usage The nvd package provides a Client for fetching CVEs from the official NVD feeds: root@kitploit: // nvd client with ./tmp working dir...

007-TheBond

Light Weight OSNIT Script for All platfrom Disclaimer : - DeadShot0x7 will not responsible if you misuse the script . You can download the script on various platform Linux : 1. Clone the Repository by using git clone command 2. git clone 007-TheBond 3. cd 007-TheBond 4. pip install -r...

CVE-2023-28771-PoC

CVE-2023-28771-PoC PoC for CVE-2023-28771 based on Rapid7's excellent writeup Requires the scapy Python library for sending IKE packets. root@kitploit: usage: CVE-2023-28771-poc.py -h --cmd CMD --lhost LHOST --lport LPORT rhost positional arguments: rhost options: -h, --help show this help messag...

CVE-2022-40146_Exploit_Jar

Apache Batik SSRF to RCE Jar Exploit Component link https://github.com/apache/xmlgraphics-batik Blog https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading Usage Modify the line 11 in...

CVE-2022-46169

CVE-2022-46169 - Unauthenticated Remote Code Execution in Cacti What is Cacti and its vulnerability? Cacti is an open-source operational monitoring tool written in PHP, MySQL/MariaDB, which provides a friendly interface. The vulnerability was found in 2022 which affected all versions before 1.2.2...

Heartbleed_Dockerfile_with_Nginx

Testing Heartbleed with Nginx Dockerfile This repository contains Dockerfile of Nginx with the vulnerable OpenSSL version 1.0.1f for testing CVE-2014-0160 Heartbleed Vulnerability. Base Docker Image debian:latest Installation 1. Install Docker Example with Debian: apt-get install -y docker 2...

laravelN00b

laravelN00b Incorrect configuration allows you to access .env files or reading env variables. LaravelN00b automated scan .env files and checking debug mode in victim host. Scan rationale Scan host. Resolve IP adress and check .env file in IP Adress Checking debug mode Laravel Read .env variables...

CVE-2017-3881-Cisco

CVE-2017-3881 Cisco Catalyst RCE Proof-Of-Concept Apr 10, 2017 Do you still have telnet enabled on your Catalyst switches? Think twice, here’s a proof-of-concept remote code execution exploit for Catalyst 2960 switch with latest suggested firmware. Check out the exploit code here. What follows is...

CVE-2022-36804-PoC-Exploit

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for CVE-2022-36804 BitBucket Critical Command Injection. This attack generally requires public repos to be enabled, however session cookies are also compatible with this exploit. Note: this exploit includes automatic repo detection which ...

CVE-2025-63406-PoC

CVE-2025-63406 PoC Installation root@kitploit: Install dependencies pip install -r requirements.txt Or use a virtual environment python3 -m venv venv source venv/bin/activate On Windows: venv\Scripts\activate pip install -r requirements.txt Usage root@kitploit: python3 CVE-2025-63406.py -u -n -p ...

CVE-2025-69985

CVE-2025-69985: Exploit for Authentication Bypass to RCE in FUXA ≤1.2.8 📌 General Description This repository contains a Proof of Concept PoC and detailed technical documentation about the vulnerability CVE-2025-69985 , which affects FUXA versions ≤1.2.8. The vulnerability allows an unauthenticat...

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

A China-nexus cyber espionage actor tracked asFire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System TACACS servers, and Linux management hosts used to route, authenticate, and manage high-value...

Apollo

Apollo A simple, lightweight Remote Access Tool written in Python Apollo is a cross-platform Windows, Linux, FreeBSD & MacOS Remote Access Tool for Python 3.4+. Its features are currently very basic but allow for post-exploitation remote code execution as well as obtaining information on the clie...

Pulsar

Pulsar Pulsar es una herramienta para la exfiltración de datos y comunicación encubierta que te permite crear una transferencia de datos segura, un chat extraño o un túnel de red a través de diferentes protocolos. Por ejemplo, puedes recibir datos desde una conexión TCP y reenviarlos al destino...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

httpx v1.11.0

Features • Installation • Usage • Documentation • Notes • Join Discord httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. It is designed to maintain result reliability with an increased number of threads. Features Simple and modular...

CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2019-16278-Nostromo-1.9.6-RCE This repository contains an exploit for CVE-2019-16278 in Nostromo Web Server 1.9.6, allowing remote code execution via a directory traversal vulnerability. The script uses pwntools to establish a reverse shell. For educational and authorized testing use only...

CVE-2022-41082-POC

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...