SharpMapExec

SharpMapExec Una versión mejorada de CrackMapExec. Esta herramienta está diseñada para simplificar las pruebas de penetración de redes y crear una navaja suiza que funcione en Windows, un requisito común durante las simulaciones de amenazas internas. Además de escanear en busca de acceso, se pued...

CVE-2019-9978

CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Remote Code Execution in Social Warfare Plugin before 3.5.3 for Wordpress. This Poc does not require running an additional HTTP Server. Just pass your local IP and the desired port and the exploit will create a server in its own thread...

HashDump-BypassEDR

1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

xnLinkFinder

Acerca de - v8.2 Esta es una herramienta utilizada para descubrir endpoints, descubrir parámetros potenciales, generar una lista de palabras específica del objetivo y encontrar secretos para un objetivo dado. Puede encontrarlos mediante: rastreando un objetivo proporcionar un dominio/URL rastrean...

test-your-sysadmin-skills

:star: "Un gran Administrador no necesita saberlo todo, pero debería ser capaz de encontrar soluciones asombrosas para proyectos imposibles. " - cwheeler33 ServerFault :star: "Mis habilidades son hacer que las cosas funcionen, no saber mil millones de hechos. ... Si necesito arreglar un sistema,...

HackBrowserData

HackBrowserData HackBrowserData es una herramienta de línea de comandos para descifrar y exportar datos del navegador contraseñas, historial, cookies, marcadores, tarjetas de crédito, historial de descargas, localStorage, sessionStorage y extensiones desde el navegador. Es compatible con los...

system_bt_AOSP10_r33_CVE-2020-0377

Pila Bluetooth Fluoride Compilación y ejecución en AOSP Simplemente compile AOSP - Fluoride está allí por defecto. Compilación y ejecución en Linux Instrucciones para Ubuntu, probado en 14.04 con Clang 3.5.0 y en 16.10 con Clang 3.8.0 Descargar fuente root@kitploit: mkdir /fluoride cd /fluoride g...

Follina

Follina Notes related to CVE-2022-30190 FOLLINA: CVE-2022-30190 1. Uses Microsoft Support Diagnostic Tool MSDT 2. Exploits diagnostic window opened for Diagnosis and when executed properly, gives reverse shell to attacker. 3. Github: a. https://github.com/JohnHammond/msdt-follina b...

CVE-2022-46169

CVE-2022-46169 POC This is a Proof of Concept POC script for the CVE-2022-46169 vulnerability that affects Cacti version 1.2.22. Description The CVE-2022-46169 vulnerability allows an unauthenticated command injection in Cacti versions through 1.2.22 in order to achieve unauthenticated remote cod...

playwright

🎭 Playwright 文档 | API 参考 Playwright 是一个用于 Web 自动化和测试的框架。它通过单一 API 驱动 Chromium、Firefox 和 WebKit——可用于测试、脚本编写，以及作为 AI 代理的工具。 快速开始 选择适合您工作流程的路径： Playwright Test Playwright Test 是一个专为端到端测试构建的全功能测试运行器。它可在 Chromium、Firefox 和 WebKit 上运行测试，具备完整的浏览器隔离、自动等待和 Web 优先断言。 安装 root@kitploit: npm init...

CVE-2022-30190

CVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote code...

Wifi-Purple

🌐 WIFI-PURPLE 🌐 Automate script for wifi hacking This Python script, titled "WIFI-PURPLE," is a network tool designed for WiFi security testing and hacking. It provides a user-friendly command-line interface and utilizes popular network tools to perform various wireless network-related tasks...

wireguard-tools

wireguard-tools — tools for configuring WireGuard This supplies the main userspace tooling for using and configuring WireGuard tunnels, including the wg8 and wg-quick8 utilities. This project supports Linux, OpenBSD, FreeBSD, macOS, Windows, and Android. More information may be found...

CVE-2025-24893

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Template Injection SSTI vulnerability via Groovy template injection in the SolrSearch endpoint. Vulnerability Type : Server-Side Template Injection SSTI Component : XWiki SolrSearch RSS feed Impact : Remote Code Execution Affected Version ...

CVE-2023-25157

CVE-2023-25157 - GeoServer SQL Injection - PoC CVE: CVE-2023-25157 Date: 06/06/2023 Vendor/Software: GeoServer Severity: 9.8/10 - This script is a proof of concept for OGC Filter SQL Injection vulnerabilities in GeoServer, a popular open-source software server for sharing geospatial data. It send...

XSS2Shell

XSS2Shell XSS2Shell is an educational proof of concept for CVE-2026-64638 , demonstrating the impact of a pre-authentication XSS issue in vulnerable WordPress installations. With an administrator's explicit participation, the PoC captures a WordPress Application Password, publishes a temporary...

RCity-CVE-2024-27198

RCity - CVE-2024-27198 RCE y Creación de Cuenta de Administrador y CVE-2024-27199 Omisión de Autenticación Explotando CVE-2024-27198 y CVE-2024-27199 RCity es un script de Python que interactúa con un servidor TeamCity vulnerable. El CVE facilita la creación de cuentas de administrador no...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Exploit Usage: First : Upload fuse.c and exp.sh to the /tmp directory. You can use scp or python3 -m http.server to upload the file to the target. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE

Ivanti EPMM pre-auth RCE Dummy Target A simple demo application that shows how to reproduce the Ivanti EPMM pre-auth RCE vulnerability CVE-2026-1281 / CVE-2026-1340 for educational and security research purposes. Vulnerability Overview This vulnerability exploits Bash arithmetic expansion behavio...