geoserver-

GeoServer CVE-2024-36401 Exploitation Tool GeoServer CVE-2024-36401 Environment: JDK8 Disclaimer: For authorized testing only. The author bears no responsibility for any consequences caused by user misuse. Please comply with laws and regulations! 1. Default payload: POST /geoserver/wfs HTTP/1.1...

CVE-2023-22515

Red Team Tool - Confluence Unauthorized Add Admin User CVE-2023-22515 Exploit Tool Vulnerability Scope root@kitploit: 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server = 8.1.4 8.2.0 = Confluence Data Center and Confluence Server =...

CVE2_Jenkins_RCE

Jenkins CLI Websocket Hijacking - PoC A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability affecting Jenkins versions 2.217-2.441. This exploits targets the Jenkins CLI that can be used to remotely access and issue commands to a Jenkins control server...

mquery

mquery: Blazingly fast Yara queries for malware analysts Ever had trouble searching for malware samples? Mquery is an analyst-friendly web GUI to look through your digital warehouse. It can be used to search through terabytes of malware in a blink of an eye: Under the hood we use our UrsaDB, to...

adapt

概述 ADAPT 是一款对 Web 应用执行自动化动态应用渗透测试的工具。它旨在提升渗透测试工作的准确性、速度和信心。ADAPT 自动检测多种行业标准 OWASP Top 10 漏洞，并根据这些潜在漏洞输出分类结果。ADAPT 还利用 OWASP ZAP 的功能执行自动化的主动与被动扫描以及自动爬取。由于 ADAPT 工具的灵活性，所有这些功能和测试都可以通过配置文件启用或禁用。有关测试和配置的更多信息，请访问 ADAPT wiki。 工作原理 ADAPT 使用 Python 构建自动化框架，利用行业标准工具（如 OWASP ZAP 和...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

uncover

使用多个搜索引擎快速发现互联网上暴露的主机。 功能 • 安装 • 用法 • 配置 • 运行 Uncover • 加入 Discord uncover 是一个 Go 语言封装的工具，利用知名搜索引擎的 API 快速发现互联网上暴露的主机。它专为自动化而设计，因此你可以查询它并将其结果与现有的管道工具一起使用。 功能 同时查询多个搜索引擎 支持的搜索引擎 Shodan Censys FOFA Hunter Quake ZoomEye Netlas CriminalIP PublicWWW HunterHow Google Onyphe Driftnet DayDayMap NerdyData...

uncover

Quickly discover exposed hosts on the internet using multiple search engines. Features • Installation • Usage • Configuration • Running Uncover • Join Discord uncover is a go wrapper using APIs of well known search engines to quickly discover exposed hosts on the internet. It is built with...

overkill

Overkill Overkill es un exploit para una vulnerabilidad parcheada que afecta a QNAP QTS. Debido a la forma en que QNAP divulga las vulnerabilidades, no estoy seguro de si este problema tiene un CVE o no. Sin embargo, probablemente fue parcheado en noviembre de 2020 y abril de 2021. El n-day fue...

kanha

Kanha - A web-app pentesting suite written in rust 🦀 Installation ⦾ Subcommands ⦾ Contribute Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzing, Reverse dns lookup, common http response, subdomain takeover detection and...

jebmcp

Un servidor y plugin MCP rápido y sin pulir para JEB Pro. Probado en Cline, Cursor y RooCode. Referencia: https://github.com/mrexodia/ida-pro-mcp Instalación Requisitos root@kitploit: Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ Uso Copia el archivo src/jebmcp/MCP.py ...

proxmark3

proxmark3: el repositorio oficial de Proxmark! ⚠️ Este repositorio ha sido archivado. Ya no se mantiene. El desarrollo activo se ha trasladado a RRG Proxmark3 - Iceman Fork El proxmark3 es una potente herramienta RFID de propósito general, del tamaño de una baraja de cartas, diseñada para espiar,...

POC-CVE-2026-19679

CVE-2026-19679 — sanitización insuficiente de los nombres de archivo subidos validación de entrada Estado: CONFIRMADO en un laboratorio 6.7.2-14.el9 2026-08-20. POST /rest/auditFile con tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" devolvió HTTP 200 y registró AuditFile 1000002: el...

CVE-2022-1442

CVE-2022-1442 WordPress Plugin Metform = 2.1.3 - Improper Access Control Allowing Unauthenticated Sensitive Information Disclosure Description The is vulnerable to sensitive information disclosure due to improper access control in the /core/forms/action.php file which can be exploited by an...

ricerca-tesi

ricerca-tesi recursos de investigación para cve-2026-7228 Herramientas Instalación de virtual-box instalación de virtual-box: https://www.virtualbox.org/wiki/Downloads Instalación de iso windows 11 https://www.microsoft.com/it-it/software-download/windows11 Instalación de distro linux: lubuntu...

dump1090

Dump1090 README Dump 1090 es un decodificador de Modo S diseñado específicamente para dispositivos RTLSDR. Las principales características son: Decodificación robusta de mensajes débiles, con Dump1090 muchos usuarios observaron mayor alcance en comparación con otros decodificadores populares...

CVE-2024-4577-PHP-CGI-argument-injection-RCE

PHP CGI参数注入到RCE CVE-2024-4577 - 利用代码 CVE-2024-4577 PHP CGI漏洞已成为一个关键安全缺陷，允许通过参数注入实现远程代码执行。该漏洞在多个PHP版本中被发现，主要影响Windows上运行在特定区域设置（繁体中文、简体中文、日语）下的服务器。 该漏洞利用PHP CGI模式，绕过了以前的安全措施，使未经身份验证的攻击者能够执行任意代码。 使用方法 利用脚本： root@kitploit: usage: python exploit.py -t http://127.0.0.1 -c calc options: -h, --help...

CVE-2019-0803

CVE-2019-0803 Win32k Elevación de Privilegios Poc Captura de pantalla Referencia robar token de seguridad https://github.com/mwrlabs/CVE-2016-7255...

CVE-2022-46364-Poc

Exploit CVE-2022-46364 Apache CXF SSRF mediante MTOM XOP:Include | CVSS 9.8 CRÍTICO Vulnerabilidad Apache CXF -s -d -t, --target - Endpoint SOAP CXF vulnerable requerido -s, --ssrf-url - URL interna para exfiltrar requerido -d, --domain - Dominio objetivo por defecto: localhost --plain-soap -...

IPGeoLocation

IPGeoLocation ==== A tool to retrieve IP Geolocation information Powered by ip-api Requirements Python 3.x termcolor colorama Download/Installation git clone https://github.com/maldevel/IPGeoLocation pip3 install -r requirements.txt --user if pip3 is missing: apt-get install python3-setuptools...