2549649 matches found
ettercap
A suite for man in the middle attacks Copyright 2001-Current The Ettercap Dev Team INTRODUCTION Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive...
CVE-2022-26134
Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a security advisory for their Confluence Server and Data Center applications, highlighting a critical severit...
CVE-2022-46649
CVE-2022-46649 PoC exploit for CVE-2022-46649, a command injection vulnerability in the /cgi-bin/iplogging.cgi endpoint. The vulnerability allows authenticated attackers to execute arbitrary OS commands via crafted tcpdumpParams. Overview Vulnerability: OS Command Injection Endpoint:...
dissect
dissect Dissect es un framework y conjunto de herramientas de respuesta a incidentes y forense digital que permite acceder y analizar rรกpidamente artefactos forenses de varios formatos de disco y archivo, desarrollado por Fox-IT parte de NCC Group. Este proyecto es un paquete meta, que instalarรก...
dissect
dissect Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT part of NCC Group. This project is a meta package, it will install all other Dissect modules wi...
Chrome-Skia-CVE-2024-7966
Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html Steps to reproduce: root@kitploit: Apply the chromium.diff patch to chromium. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to...
cve-2021-44228
CVE-2021-44228 This repository represents a simplified simulation of infamous CVE-2021-44228 issue. Aside from system properties and other dictionary structures lookups, Apache Log4j also implements JNDI lookup feature for various reasons. The JNDI can obtain services from a number of service...
NextRecon
NextRecon NextRecon is a simple Python-based reconnaissance tool designed for bug bounty hunters, security researchers, and penetration testers. It performs passive recon by collecting archived URLs from the Wayback Machine and fetching leaked credentials from the BreachCollection API. It also...
CVE-2021-30551
CVE-2021-30551 My exp for chrome V8 CVE-2021-30551 You can found your chrome version by chrome://version or go to http://whatsmyuseragent.org/ You can set up a webserver locally using python like: root@kitploit: python3 -m http.server 8080 And the test it by accessing http://127.0.0.1:8080...
slopShell
slopShell php webshell Since I derped, and forgot to talk about usage. Here goes. For this shell to work, you need 2 things, a victim that allows php file uploadyourself, in an educational environment and a way to send http requests to this webshell the client script is the 100% best way to...
CVE-2023-45503
CVE-2023-45503 Vulnerability Details Overview In Macrob7 Macs Framework Content Management System CMS versions 1.1.4f and prior, insecure handling of user input leads to 16 SQL injection vulnerabilities. The ability to execute arbitrary SQL queries can lead to private data being leaked including...
CVE-2023-30092
CVE-2023-30092 All Details about CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Software Link: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Vulnerability Type: SQL Injection Affected Component: QTY Parameter Impact Denial of Service:...
matchlock
Matchlock Experimental: This project is still in active development and subject to breaking changes. Matchlock is a CLI tool for running AI agents in ephemeral microVMs - with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Your secrets never enter the VM. Why...
CVE-2024-4577
CVE-2024-4577 - PHP CGI Argument Injection RCE Summary CVE-2024-4577 is a critical PHP CGI argument injection vulnerability that affects Windows systems running PHP in CGI mode. This flaw allows remote attackers to inject arguments into PHP's command line via specially crafted URLs, leading to...
RevShell
๐ฅ RevShell Project โ Advanced Windows Reverse Shell root@kitploit: โโโโโโ โโโโโโ โโโ โโ โโโโโโ โโโ โโ โโโโโโ โโโ โโโ โโโ โ โโโโโ โ โโโโ โโ โโโ โ โโโโ โโโ โโ โ โโโโ โโโโ โโโ โโโ โโโโโ โโโ โโโ โ โโโโ โโโโโโโโ โโโโ โโโโ โโโโ โโโโโโโ โโโ โ โโโ โโโ โ โโโโโโ โโโ โโโ โ โโโโ โโโโ โโโโ โโโโโโโโโโโ โโโโ...
CVE-2026-63030
CVE-2026-63030 WordPress REST Batch Route-Confusion SQL Injection CVE-2026-63030 Proof of Concept Research, Exploit Development & Documentation by Ch4120N โ ๏ธ Legal Disclaimer This repository and the accompanying tool exploit.py are intended strictly for educational purposes, authorized penetration...
Eaton-UPS-Companion-Exploit
Overview The Eaton UPS Companion software checks for an update every single week over an insecure HTTP connection and evals the content of whatever is at the update URL. This allows an attacker to craft a JavaScript function which uses the low-level OS operations that already exist in the backend...
CVE-2022-32988
CVE-2022-32988 Affected products We have not yet tested Asus models other than those listed. However we suspect it may also work on other models with the same firmware version. root@kitploit: DSL-N14UB1 V.1.1.2.3805 Overview In router Asus DSL-N14U-B1 1.1.2.3805 was discovered to contain a stored...
CVE-2022-30040
Tenda AX1803 v1.0.0.12890 Denial-of-service Vulnerability Overview Manufacturer's website infomation: https://www.tenda.com.cn/profile/contact.html Firmware download address: https://www.tenda.com.cn/download/default.html Vulnerability description The vulnerability lies in rootfs In / goform /...
PISmith
PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection DefensesCOLM 2026 This is an official implementation of PISmith: Reinforcement Learning-based Red Teaming for Prompt Injection Defenses Environment Setup PISmith has been tested using Python 3.10 and CUDA Version: 12.9 1...