h2t

h2t - HTTP Hardening Tool Description h2t is a simple tool to help sysadmins to hardening their websites. Until now h2t checks the website headers and recommends how to make it better. Dependences Python 3 colorama requests Install root@kitploit: $ git clone https://github.com/gildasio/h2t $ cd h...

h2t

h2t - HTTP 强化工具 描述 h2t 是一个简单的工具，用于帮助系统管理员强化其网站。 截至目前，h2t 可以检查网站头部，并推荐如何改进。 依赖项 Python 3 colorama requests 安装 root@kitploit: $ git clone https://github.com/gildasio/h2t $ cd h2t $ pip install -r requirements.txt $ ./h2t.py -h ……或者通过 Docker 方式： root@kitploit: $ git clone...

MS-MSDT-Office-RCE-Follina

MS-MSDT-Office-RCE-Follina CVE-2022-30190 | MS-MSDT Follina One Click 1. Create a Docx file. 2. In the Docx file, Insert Object Bitmap Image Ok 3. In the Paint application that launched, save the Paint file. 4. Save your Docx file. 5. Open your file as an archive With 7Zip; Right Click 7Zip Open...

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826 — Azure DevOps Information Disclosure PoC Overview Field| Value ---|--- CVE| CVE-2026-42826 CVSS| 10.0 Critical Microsoft / 7.5 High NVD CWE| CWE-200 Exposure of Sensitive Information to an Unauthorized Actor GHSA| GHSA-gmwx-3xm2-9fx8 Affected| Azure DevOps Services, Azure DevOps...

TWSL2011-007_iOS_code_workaround

= testcert Reference implementation for TWSL2011-007 vulnerability workaround aka CVE-2011-0228. Author: Eric Monti Date: July 28, 2011 = Compiling Compile with your Apple iOS SDK CFLAGS along with: gcc -o testcert testcert.m -framework Foundation -framework Security The compile arguments above...

Jetleak-Testing-Script

Script de prueba Jetleak Esta herramienta está pensada para ofrecer a las organizaciones una forma rápida y sencilla de comprobar si sus versiones del servidor web Jetty son vulnerables a JetLeak. Actualmente, este script no gestiona sitios con certificados SSL no válidos. Esto se corregirá en un...

can-i-take-over-xyz

免责声明 ⚠️ 本文档的作者对内容的正确性不承担任何责任。本项目仅用于帮助安全研究人员判断某资源是否存在漏洞，但不保证准确性。本项目严重依赖社区贡献；因此，证明某资源存在漏洞最终由安全研究人员和漏洞赏金计划自行决定。 此外，需要明确的是，本项目的目的并非识别或披露针对各种服务安全措施的绕过方法。相反，此类绕过方法应直接报告给受影响的服务，以便采取适当措施。 最后，值得注意的是，某些漏洞赏金计划可能直接接受悬空DNS记录报告，而不要求提供被利用的证据。 什么是子域名接管？ 子域名接管漏洞是指当某个子域名（subdomain.example.com）指向一个已被删除或移除的服务（例如...

CVE-2023-46478

CVE-2023-46478 Minical 1.0.0 is vulnerable to IDOR . Vendor: https://github.com/minical/minical Demo Application: https://demo.minical.io/ PoC Step 1: I have created two user accounts user A hacker then user B walker-448 Step 2: Go to the User B account then Navigate to the Accounting module and...

CVE-2026-75429_PowerJob_friend_process_RCE

PowerJob Server Remote Code Execution via Unauthenticated /friend/process Groovy Injection 1. Summary The PowerJob Server distributed job scheduling / computing framework exposes the /friend/process endpoint on its Worker↔Server transport-layer HTTP port 10010 with no authentication whatsoever...

CVE-2026-75430_PowerJob_worker_deployContainer_RCE

PowerJob Worker Unauthenticated Remote Code Execution via /worker/deployContainer Arbitrary JAR Loading 1. Summary The PowerJob Worker exposes the deployContainer handler on its HTTP transport port 27777 with no authentication whatsoever. An attacker submits an arbitrary URL; the Worker downloads...

PhishingKitHunter

PhishingKitHunter Find phishing kits which use your brand/organization's files and image. PhishingKitHunter or PKHunter is a tool made for identifying phishing kits URLs used in phishing campains targeting your customers and using some of your own website files as CSS, JS, .... This tool - write ...

hakuin

Hakuin 是一个使用 Python 3 编写的盲 SQL 注入 BSQLI 优化与自动化框架。它抽象化了数据提取逻辑，允许用户轻松高效地从易受攻击的 Web 应用程序中转储数据库。为了加速这一过程，Hakuin 使用了多种优化方法，包括预训练和自适应语言模型、机会性猜测、统计建模、并行化、三元查询等。 Hakuin 曾在以下知名学术与行业会议上进行展示： BSides，布拉迪斯拉发，2025 BlackHat MEA，利雅得，2023 Hack in the Box，普吉岛，2023 IEEE S&P 攻防技术研讨会 WOOT，2023 更多信息请参阅我们的论文和幻灯片。 安装 要安...

dark-fantasy-hack-tool

DARK FANTASY HACK TOOL Written by @ritvikb99 and @CodesWhite and @meuzgebre Requirements file idea given by @Swastik2561 For security purposes only ! Installation: root@kitploit: $ pipenv install or: root@kitploit: $ pip3 install -r requirements.txt Features: DOS Tool: To take down small websites...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

CVE-2023-49540

CVE-2023-49540 Book Store Management System v1.0 - Cross-site scripting XSS vulnerability in /index.php/history - vulnerable field: "Customer's Name". Description : Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. T...

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL

Red-Planet-Laundry-Management-System-1.0-is-vulnerable-to-SQL https://vulners.com/cve/CVE-2022-28452 https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-28452 https://laundry.redplanetcomputers.com/ 1-Description: Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection via...

CVE-2022-22954

CVE-2022-22954 Vulnerability Description Workspace ONE Access provides a unified application portal through which all enterprise applications can be accessed securely, and can be used for single sign-on. In CVE-2022-22954, an attacker can craft a malicious request to cause template injection,...

CVE-2001-0680

CVE-2001-0680 Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 Packetstorm publication at https://packetstormsecurity.com/files/24931/alt3kx-advisories-2001.txt.html Securiteam publication at http://www.securiteam.com/windowsntfocus/5IP0G2040Q.html Author Alex Hernand...

PHP_CVE-2012-1823

PHP-CGI Remote Code Execution Vulnerability CVE-2012-1823 Principle Reference article http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Affected versions: php...

CVE-2022-45047

CVE-2022-45047 POC,EXP,chatGPT for me code root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding":...