CVE-2024-22120-RCE-with-gopher

Usage root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Summary This exploit was created to exploit an XXE XML External Entity. Through it, I read the backend code of the web service and found an endpoint where I could use gopher to make internal requests on...

CVE-2023-24044

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip root@kitploit: pip install CVE-2023-24044 Run bellow command to check CVE-2023-24044 -h Configurations 2. We integrated with the Telegram A...

CVE-2019-16113-Dockerfile

Bludit Directory Traversal Vulnerability CVE-2019--16113 Bludit-3.9.2 is a lightweight CMS that only requires a LAMP environment to run. During image upload, Bludit checks the file extension but does not delete the file in time; an attacker can also achieve directory traversal by controlling the...

bluehood

Bluehood Bluetooth Neighborhood - Track BLE devices in your area and analyze traffic patterns. WARNING: Alpha Software This project is in early development and is not ready for production use. Features may change, break, or be removed without notice. Use at your own risk. Data collected should be...

semcms

Semcms का परिचय SEMCMS एक विदेशी व्यापार वेबसाइट सामग्री प्रबंधन प्रणाली CMS है जो कई भाषाओं का समर्थन करती है। root@kitploit: v4.8 Download Link: http://www.sem-cms.com/TradeCmsdown/php/semcmsphp4.8.zip कमजोरियों के कारण: /xcR45qAdmin/SEMCMSMenu.php पंक्ति 66 भेद्यता कोड: root@kitploit:...

CVE-2013-2977

IBM Lotus Notes PNG Integer Overflow - CVE-2013-2977 IBM Lotus Notes is the client of a collaborative client-server plataform, being IBM Lotus Domino the application server. The email-client capability is one of its most important and used features. IBM Lotus Notes fails to correctly parse a PNG...

CVE-2026-73633

CVE-2026-73633 Apache Struts S2-072 — PoC + Environment Principle: It comes from the JSON population of the server-side enabled JSON body plugin "JSON population" is a core feature provided by the JSON plugin in Struts 2, which can be simply understood as an automatic data conversion mechanism...

PHP-Shell-Detector

Web Shell Detector Web Shell Detector – is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has ...

CVE-2020-13933

CVE-2020-13933 Lab Shiro 1.6.0 Authentication Bypass Vulnerability PoC http://127.0.0.1:8080/res/%3bpoc Lab Environment Code Description ShiroConfig.java: Permission configuration: when requesting /res/ resources, it returns a 302 redirect to the login page for authentication. NameController.java...

Cartero

Cartero URL http://section9labs.github.io/Cartero/ Description A robust Phishing Framework with a full featured CLI interface. The project was born out necessity through of years of engagements with tools that just didn't do the job. Even though there are many projects out there, we were not able...

HASH

HASH HTTP Agnostic Software Honeypot HASH is a framework for creating and launching low interactive honeypots. 🌟 Why HASH? The main philosophy of HASH is to be easy to configure and flexible to mimic any software running on HTTP/HTTPs. With the minimum footprint possible to avoid being detected a...

GTScan

GTScan The Nmap Scanner for Telco. With the current focus on telecom security, there used tools in day to day IT side penetration testing should be extended to telecom as well. From here came the motivation for an nmap-like scanner but for telco The current security interconnect security controls...

CVE-2020-8840

CVE-2020-8840 Environment root@kitploit: jdk 8u161 windows10 1903 Procedure root@kitploit: 1.Create a java file named Exploit.java with code you wanna run in it & compile it 2.Create a http server using python or other tools at the same dir of class file 3.Create a ldap server using marshalsec:...

PhantomEvasion

PHANTOM EVASION 3.0 Phantom-Evasion is an antivirus evasion tool written in python both compatible with python and python3 capable to generate almost fully undetectable executable even with the most common x86 msfvenom payload. The following OSs officialy support automatic setup: 1. Kali Linux 2...

CVE-2023-26984

CVE-2023-26984 Vulnerability Explanation: An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request. Attack Vectors: The attacker had to log in with the user role and reset the password. Then intercep...

CVE-2023-38890

CVE-2023-38890 Description Online Shopping Portal Project V3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in t...

Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287

इस रिपॉजिटरी में README नहीं है।...

Shellshock_vuln_Exploit

🚨 Shellshock RCE Exploit CVE-2014-6271 This is a Python exploit for the Shellshock vulnerability CVE-2014-6271, which affects GNU Bash. The exploit targets CGI scripts on vulnerable web servers and establishes a reverse shell to the attacker's machine. CVE ID CVE-2014-6271 Disclaimer This tool is...

College-Management-System-course_code-SQL-Injection-Authenticated

College Management System - 'coursecode' SQL Injection Authenticated 1. Description: College Management System 1.0 allows SQL Injection via parameter 'coursecode' in /College-Management-System/admin/asign-single-student-subjects.php. Exploiting this issue could allow an attacker to compromise the...

CVE-2026-20896

CVE-2026-20896 प्रयोगशाला यह रिपॉजिटरी एक नियंत्रित और अधिकृत वातावरण में CVE-2026-20896 समस्या का पता लगाने के लिए एक छोटी, स्व-निहित प्रयोगशाला प्रदान करती है। अवलोकन प्रयोगशाला में शामिल है: poc.py: मेरी अनुकूलित प्रूफ-ऑफ-कॉन्सेप्ट स्क्रिप्ट जो समस्या को प्रदर्शित करती है और ब्राउज़र-रेडी कुकी...