ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

ketshash

Ketshash Una pequeña herramienta para detectar conexiones NTLM privilegiadas sospechosas, en particular el ataque Pass-The-Hash, basada en los registros del visor de eventos. La herramienta se publicó como parte de la investigación "Pass-The-Hash detection" - más detalles sobre la detección de...

CVE-2020-28502

CVE-2020-28502 node-XMLHttpRequest RCE NVD Description This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously async=False on xhr.open, malicious user input flowing into xhr.send could result in arbitrary code bein...

python-haystack

python-haystack memoria forense |travis| |coverage| |landscape| |pypi| |docs| Inicio rápido: Guía de uso rápido en la carpeta docs/. CLI de Haystack-reverse en la carpeta docs/. Más documentación Introducción: python-haystack es un framework de análisis de heap, enfocado en la búsqueda e ingenier...

CVE-2015-1635

️⃣ CVE-2015-1635 Requirements: Python = 3.6 Install requirements with: pip3 install -r requirements.txt Usage example: python3 MS15-034.py -u http://targeturl.com/ -c -d Args:...

Rocket-Chat-3.12.1-PoC-CVE-2021-22911-

Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Go login page 2. Register new account, set password as P@$$w0rd!1234 3. Run script -u = Low priv user email No 2fa -a = Administrator email -t = URL Eg: http://rocketchat.local python3 rocketchat.py -u [email protected] -a [email protected] -t...

CVE-2023-24329-lab

CVE-2023-24329 — Laboratorio de Diferencial de Analizador Parser Differential Solo con fines educativos. Este laboratorio existe para demostrar una vulnerabilidad real en un entorno seguro y aislado. No lo ejecutes nunca contra sistemas que no te pertenezcan. No reutilices el código de filtro...

Moniker-Link--CVE-2024-21413-

🔗 Moniker Link CVE-2024-21413 — A Practical Guide to the Outlook Zero-Click Vulnerability 📌 1. Introduction CVE-2024-21413 , commonly referred to as the Moniker Link vulnerability , is a critical security flaw in Microsoft Outlook that enables attackers to leak user credentials without requiring...

CVE-2025-55182-in-go

CVE-2025-55182 — React Server Components RCE Exploit for RCE in React Server Components via prototype pollution. Usage root@kitploit: go run main.go -t -c Examples root@kitploit: go run main.go -t http://127.0.0.1 -c "id" go run main.go -t http://127.0.0.1 -c "ls -la" go run main.go -t...

PutScanner

🔍 PUT Directory Scanner A penetration testing tool that identifies writable web directories via HTTP PUT method, specifically designed to detect CVE-2025-24813 Arbitrary File Upload in Apache Tomcat. 📌 Features Smart Protocol Handling : Auto-detects HTTPS/HTTP with fallback Comprehensive Checks :...

Taken

Taken Toma de subdominios usando IPs elásticas colgantes de AWS y ten un POC funcional para la Toma de Subdominios. Todo lo que puedes hacer con la Toma de Subdominios - Robo de cookies, si las cookies están configuradas con el atributo de dominio establecido en el subdominio secuestrado. Solicit...

cve-2021-38314

cve-2021-38314 - Unauthenticated Sensitive Information Disclosure The Gutenberg Template Library & Redux Framework plugin = 4.2.11 for WordPress registered several AJAX actions available to unauthenticated users in the includes function in redux-core/class-redux-core.php that were unique to a giv...

JoomlaScan

Joomla Scan Un software libre y de código abierto para encontrar los componentes instalados en Joomla CMS, construido a partir de las cenizas de Joomscan. Características Escanea sitios Joomla CMS en busca de componentes/extensiones base de datos de más de 600 componentes; Localiza las carpetas...

log4shell-tools

log4shell.tools log4shell.tools is a tool that allows you to run a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046. This is the code that runs https://log4shell.alexbakker.me. If you'd like to inspect the code or...

CVE-2022-0739

CVE-2022-0739 Proof-of-Concept exploit SQLI BookingPress before 1.0.11 Usage Supply the URL to where the Booking Press plugin is in use on the application. bash exploit.sh '' e.g. Hashes are redacted in this demo root@kitploit: ┌──user@user-/ └─$ bash sqliexploit.sh 'http://localhost/calendar/' /...

faraday_addon

About Faraday Addon is a simple addon for automate reporting vulnerabilities through the browsed to your own Faraday instance. Faraday Addon intercepts every single request from the browser, adding a functionality for accessing each one of them treating them as a vulnerability. In this way, a...

VulnLab

VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...

n00bRAT

n00bRAT v0.7 It's a tiny C program which emulates a bare minimum HTTP server for fingerprinting security scanners. It let's one control the machine over this faked HTTPv0.1 protocol. This n00b server was created as RAT during college for Ethical Hacking course. What is it / Why it is / etc. Read...

CVE-2018-10933_Scanner

CVE-2018-10933Scanner is a tool to detect libssh versions vulnerable to CVE-2018-10933. It allows scanning from a single target to a full list of IP addresses, and also shows the location of the vulnerable server. + Contact: root@kitploit: x Facebook: http://fb.me/IDX4CKS x Twitter: @IDX4CKS x...

exploit-CVE-2014-6271

Shellshock exploit + vulnerable environment Shellshock, also known as Bashdoor, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014. Many Internet-facing services, such as some web server deployments, use Bash to process certain...