fortinet-fortiweb-cve-2025-64446-58034

Scopri le vulnerabilità di Fortinet FortiWeb CVE-2025-64446, CVE-2025-58034 1. Panoramica Fortinet FortiWeb è un dispositivo Web Application Firewall WAF ampiamente implementato nei sistemi aziendali per proteggere le applicazioni web dalle minacce comuni. Poiché FortiWeb si trova spesso nello...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest Xamarin files from an APK. Installing Run the installer script: root@kitploit:...

npm_poisoning_poc

Guardians 2027 AI package lab Reusable setup for the first Gu...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

lupo

For instructions on how to use Lupo, visit https://github.com/malienist/lupo/wiki/Lupo-Wiki Lupo — Malware IOC Extractor Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and instructions, please see this post:...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs è un servizio Git leggero e auto-ospitato, simile a una versione privata di GitHub, progettato per funzionare facilmente su server con poche risorse. La vulnerabilità CVE-2025-8110 è una grave falla di sicurezza che consente a un attaccante di bypassare le restrizioni...

CVE-2021-4045

🔍 CVE-2021-4045: Vulnerabilità di Iniezione di Comandi in TP-Link Tapo C200 CVE-2021-4045 📌 Riepilogo CVE-2021-4045 è una vulnerabilità di iniezione di comandi scoperta nella fotocamera TP-Link Tapo C200 , che consente a un attaccante di prendere il controllo totale del dispositivo con privilegi...

maskprocessor

maskprocessor High-Performance word generator with a per-position configurable charset Mask attack Try all combinations from a given keyspace just like in Brute-Force attack, but more specific. Advantage over Brute-Force The reason for doing this and not to stick to the traditional Brute-Force is...

CVE-2024-24590

CVE-2024-24590 La deserializzazione di dati non fidati può verificarsi nelle versioni da 0.17.0 a 1.14.2 dell'SDK client della piattaforma ClearML di Allegro AI, consentendo a un artefatto caricato malevolmente di eseguire codice arbitrario sul sistema di un utente finale quando viene interagito...

CVE-2024-32019-POC

CVE-2024-32019-POC Netdata ndsudo lokale Privilegieneskalation – Workflow und POC CVE-2024-32019 Workflow Automatischer Exploit Ressourcen Workflow !TIP Bitte lesen Netdata ist ein Tool zur Überwachung von Anwendungen und Systemen. Es läuft auf Port 19999 und ist leicht zu finden: root@kitploit:...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

Struts2Shell

Struts2Shell Un exploit e libreria per CVE-2017-5638 - il bug Apache Struts2 S2-045. Installazione root@kitploit: $ npm install -g struts2shell Installazione come libreria root@kitploit: $ npm install struts2shell Opzioni della riga di comando root@kitploit: -h, --help mostra le informazioni...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

NimbusPWN-CVE-2022-29799-29800

NimbusPwn — Escalação de Privilégio Local em networkd-dispatcher !NOTE Outras d...

rootend

rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage root@kitploit: . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |...

rootend

rootend rootend هي أداة تعداد ورفع صلاحيات تلقائية لأنظمة nix مكتوبة بلغة Python. للقائمة الكاملة لأدواتنا، يرجى زيارة موقعنا علىhttps://www.twelvesec.com/ كتب بواسطة: nickvourd twitter maldevel twitter servo الاستخدام root@kitploit: . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /|...

Drupal_REST-RCE_Unauthenticated

CVE-2019-6340 — Drupal RESTful Web Services RCE Implementazione Python dell'exploit di esecuzione di codice in remoto per CVE-2019-6340, basata sull'analisi del modulo Metasploit e sul lavoro precedente di leonjza. Differenza chiave rispetto a EDB-46459: utilizza POST invece di GET, bypassando la...

cve-2023-4966-iocs

Suche nach CVE-2023-4966 IoCs Skript: check-cve-2023-4966.py Das Skript durchsucht die Citrix NetScaler-Protokolle nach möglichen Ausnutzungen von CVE-2023-4966. Verwendung root@kitploit: usage: check-cve-2023-4966.py -h --nologline logdirpath Python script to check CitrixNetScaler logs for...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...