cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...

ScannerCVE-2021-3156

ScannerCVE-2021-3156 Script to scan a list of hosts to check if they are vulnerable to CVE-2021-3156. If not vulnerable, the output is as follows: sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper sudoedit: a...

Platypus

Platypus A host management hub for fleets of Linux machines. Install the Platypus agent on every host you own; the agent dials back to your Platypus server over TLS + protobuf; from the server you get an interactive shell, file management, and network tunnelling on every managed host — through on...

auditd

root@kitploit: / | / // / / /| |/ / / / / / / / / / // / // / / // // / // |,/,///,/ Best Practice Auditd Configuration Idea The idea of this auditd configuration is to provide a best-practice baseline that is designed to load out-of-the-box on major Linux distributions covers a broad set of...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

Mini_httpd-CVE-2018-18778

minihttpd Arbitrary File Read Vulnerability CVE-2018-18778 Minihttpd is a miniature HTTP server that can maintain a certain level of performance about 90% of Apache while occupying minimal system resources. Therefore, it is widely used as an embedded server in various IoT devices routers, switche...

CVE-2022-0848

CVE-2022-0848 Remote Code Execution RCE in part-db 0.5.11 Change the host in bash file and run...

LadonGo

Ladon Scanner For Golang Wiki http://k8gege.org/Ladon/LadonGo.html Introduction LadonGo is an open source intranet penetration scanner framework, which can be used to easily detect segment C, B, A live hosts, fingerprint identification, port scanning, password explosion, remote execution, high-ri...

astsu

astsu How it works Scan common ports Send a TCP Syn packet to the destination on the defined port, if the port is open, use an nmap scan to check the service running on the port and prints all the ports found. Discover hosts in network Uses as a base the router's ip to map all possible ips. It th...

phantomprint

PHANTOMPRINT Passive Hybrid ANalysis Tool for Os-agnostic Multiprotocol PRofiling & INTelligence Fingerprint hosts on your network without sending a single packet. PHANTOMPRINT correlates multiple passive signals TCP/IP stack, TLS/JA4, DHCP Option 55, HTTP/2 HPACK, DNS behavior to identify...

CVE-2026-88263

XikeStor Layer3 switches have a missing-authentication flaw that allows an unauthenticated attacker to download configuration data over the network. The retrieved data may contain network configurations and passwords , enabling an attacker to operate the switch improperly or use it as a jump host...

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

LiveTargetsFinder

LiveTargetsFinder Generates lists of live hosts and URLs for targeting, automating the usage of Massdns, Masscan and nmap to filter out unreachable hosts Given an input file of domain names, this script will automate the usage of MassDNS to filter out unresolvable hosts, and then pass the results...

RCE

CVE-2022-31814 WebApp bug root@kitploit: import argparse import requests import time import sys import urllib.parse from requests.packages.urllib3.exceptions import InsecureRequestWarning requests.packages.urllib3.disablewarningsInsecureRequestWarning parser =...

vulners-scanner

vulners-scanner Description PoC of a host-based vulnerability scanner, which uses vulners.com API. Detects operating system, collects installed packages and checks vulnerabilities in it. Supported OS Currently support collecting packages for these operating systems: Debian-based debian, kali,...

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

CVE-2018-13257

Blackboard Learn CAS Ticket Host Header Spoofing An authentication module within Blackboard Learn is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation. A CAS service ticket is intended for only a specific service , but Blackboard Learn do...

CVE-2011-3192

CVE-2011-3192 Run it using python 3.7 or 3.10 tested on it 1. git clone https://github.com/futurezayka/CVE-2011-3192.git 2. cd ./CVE-2011-3192 3. pip install -r requirements.txt 4. python3 exploit.py host tasks example python3 exploit.py https://example.com 50...

CVE-2026-10520

CVE-2026-10520 Ivanti Sentry formerly MobileIron Sentry is an enterprise security gateway that proxies traffic between mobile devices and corporate backend resources: email, SharePoint, and internal web applications. It enforces Mobile Device Management MDM policies, terminates encrypted mobile...

CVE-2025-9074-Docker-Exploit

CVE-2025-9074 Docker Container Command Execution Tool A powerful Docker remote API exploitation tool for security research and testing of CVE-2025-9074 vulnerability. Core Advantages ✅ Fully automated container lifecycle management : Automatically creates temporary containers, cleans up after...