nodexp

NodeXP - ¡Herramienta de Detección y Explotación para Servicios Node.js! NodeXP es una herramienta integrada, escrita en Python 2.7, capaz de detectar posibles vulnerabilidades en servicios Node.js así como explotarlas de forma automatizada, basada en el ataque ServerSideJavascriptInjection!...

inhale

Inhale - 恶意文件吸入器 Inhale 是一款恶意软件分析与分类工具，能够自动化并扩展多种静态分析操作。 此为测试版发布版本，用于测试、反馈及社区开发。 背景 Inhale 最初是我在从多个来源收集和分析大量恶意软件时使用的一系列小脚本。市面上已有许多框架和工具可以完成类似工作，但没有一个能真正匹配我快速查找、分类和存储大量文件信息的工作流程。有些工具还要求昂贵的 API 密钥及其他付费服务。 最终我将这些脚本整合成了一个可以快速部署和使用的工具，无论你是在研究服务器、笔记本电脑还是像树莓派这样低成本的计算机上运行都可以。 安装 本工具设计在 Linux 系统上运行，依赖...

CVE-2021-21985_PoC

CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

Log4Shell-CVE-2021-44228-Demo

Log4ShellCVE-2021-44228 Demo Environment Setup Client Anywhere that with ability to access the HTTP Server with curl command line Vulnerable App by Http Server with log4j Amazon Linux 2 x86 based EC2 Instance / CentOS Azure Virtual Machine root@kitploit: $ yum install docker -y $ systemctl enable...

LinkFinder

About LinkFinder LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. This way penetration testers and bug hunters are able to gather new, hidden endpoints on the websites they are testing. Resulting in new testing ground, possibility containing ne...

CVE-2022-22965-PoC_Payara

CVE-2022-22965 PoC - Descarga Arbitraria de Archivos en Payara Ejemplo mínimo de cómo reproducir la vulnerabilidad CVE-2022-22965 Spring en Payara/Glassfish. Payload alternativo para Payara/Glassfish que permite al usuario malicioso establecer una raíz web arbitraria, lo que lleva a la descarga...

Satellian-CVE-2020-7980

Satellian-CVE-2020-7980 Satellian is a PoC script that shows RCE vulnerability over Intellian Satellite controller Intellian Aptus Web. The following script will try to list all the binaries in the system and afterwards will allow the tester to interact directly with the server usually as root. P...

CVE-2026-53553

Goploy is an open-source automation deployment system. Prior to version 1.18.0, a severe path traversal vulnerability exists in its backend API endpoints, specifically /deploy/fileDiff File Compare, when handling file paths provided by the client. This issue has been patched in version 1.18.0...

CVE-2026-53507

oasdiff-action is a GitHub Action that detects breaking changes in OpenAPI specs and post a review on every pull request. Before version 0.0.51, the oasdiff actions resolved external $refs in the OpenAPI spec by default allow-external-refs: true. When an action runs on a pull request whose spec i...

SqliSniper

Features • Installation • Usage • Running SqliSniper • Contributing • SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers. It enhances the security assessment process by rapidly scanning and identifying potential vulnerabilities using...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 one-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

CVE-2016-4971

CVE-2016-4971 On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. See the post on my blog for some detail. Usage On your server, node wget.js On your test computer, wget http://url.to.your/server...

notionterm

notionterm Notionページにリバースシェルを埋め込む メモを取りながらハッキング こんなときに ➕: リバースシェルで攻撃者のIPを隠したい 攻撃者とターゲットマシンが直接通信しない。Notionがリバースシェルをホストするプロキシとして機能 レポート内でのデモ/クイックプルーフの挿入 高可用性で共有可能なリバースシェル デスクトップ、ブラウザ、モバイル 暗号化および認証されたリモートシェル こういうときは使わない ➖: 長時間のインタラクティブシェルセッション その場合はtacosを参照 なぜ？ 🤔...

cpx_proftpd

cpxproftpd PoC by Daniel Aldana for CVE-2015-3306 exploitation. Bug reported by Vadim Melihow. METHOD 1: usage: root@kitploit: python cpxproftp.py ex: root@kitploit: python cpxproftp.py 127.0.0.1 /etc/passwd /var/www/pass.txt then try: root@kitploit: http://127.0.0.1/pass.txt METHOD 2: usage:...

CVE-2021-44228-POC

CVE-2021-44228-POC exploit CVE-2021-44228 download nuclei sudo cp nuclei /usr/bin/nuclei sudo chmod +x /usr/bin/nuclei git clone https://github.com/sec13b/CVE-2021-44228-POC.git mv CVE-2021-44228-POC log4shellexploit mkdir yaml mv .yaml yaml/ run: python3 log4shellexploit.py http://iptoexploit...

awesome-shodan-queries

Awesome Shodan Search Queries 随着时间的推移，我收集了一系列有趣、搞笑且令人沮丧的搜索查询，用于输入 Shodan——这个（字面意义上的）互联网搜索引擎。有些返回令人捂脸的结果，而另一些则暴露出野外的严重和/或古老漏洞。 大多数搜索过滤器需要 Shodan 帐户。 你可以假设这些查询在可能的情况下只返回未加密/开放的实例。为了你自己的法律利益，如果它们不是开放的，请不要尝试登录（即使使用默认密码）！通过添加过滤器如 country:US 或 org:"Harvard University" 或 hostname:"nasa.gov" 来缩小结果范围。...

awesome-shodan-queries

Awesome Shodan Search Queries Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the literal internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild. Most...

Reverse_HTTPS_Bot

ReverseHTTPSBot 0.8 Descripción: Un troyano de acceso remoto https basado en Python para pruebas de penetración. El servidor está basado actualmente en NodeJS Requisitos del Bot: pip install requests pip install pyscreenshot Requisitos del Servidor: sh setup.sh para generar certificado autofirmad...

CVE-2022-0944

CVE-2022-0944 A proof of concept exploit for SQLPad RCE CVE-2022-0944 Usage root@kitploit: usage: main.py -h url lhost lport username password positional arguments: url URL to SQLPad lhost Listener host address for reverse shell lport Listener port for reverse shell username login username option...

CVE-2025-28915

CVE-2025-28915 Descripción de la vulnerabilidad: WordPress es una plataforma de blogs desarrollada con el lenguaje PHP, que permite montar sitios web de blogs personales en servidores con PHP y MySQL. WordPress ThemeEgg ToolKit 1.2.9 y versiones anteriores presentan una vulnerabilidad de código q...