WIn-CVE-2021-31166

WIn-CVE-2021-31166 This Repo is inspired on 0vercl0k for a proof of concept for CVE-2021-31166 "HTTP Protocol Stack Remote Code Execution Vulnerability", a use-after-free dereference in http.sys patched by Microsoft in May 2021. Build Infraestructure root@kitploit: git clone...

intercept

Support the developer of this open-source project Signal Intelligence Platform A web-based interface for software-defined radio tools. Features Pager Decoding - POCSAG/FLEX via rtlfm + multimon-ng 433MHz Sensors - Weather stations, TPMS, IoT devices via rtl433 Sub-GHz Analyzer - RF capture and...

ironcurtain

IronCurtain स्वायत्त AI एजेंटों के लिए एक सुरक्षित रनटाइम, जहाँ सुरक्षा नीति एक मानव-पठनीय संविधान से व्युत्पन्न होती है। जब कोई "secure" लिखता है, तो आपको तुरंत संदेह होना चाहिए।हमारा secure से क्या अभिप्राय है? !WARNING शोध प्रोटोटाइप। IronCurtain एक प्रारंभिक चरण की शोध परियोजना है जो यह पता...

AzureHound

AzureHound The BloodHound data collector for Microsoft Azure Get AzureHound Release Binaries Download the appropriate binary for your platform from one of our Releases. Rolling Release The rolling release contains pre-built binaries that are automatically kept up-to-date with the main branch and...

whosthere

Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...

exploit-react-CVE-2025-55182

FOX-RSC TOOL CVE-2025-55182 & CVE-2025-66478 LEGAL DISCLAIMER EN: This tool is a Proof of Concept PoC intended for security research and educational purposes only. Using this tool on systems without explicit permission is illegal and punishable by law. The author Tiger-Foxx assumes no...

mass_cve-2021-41773

masscve-2021-41773 MASS CVE-2021-41773 स्क्रीनशॉट उपयोग ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool नोट ! परिणाम स्वचालित रूप से vuln.txt में सहेजे जाएंगे आप...

laravel-crypto-killer

Laravel crypto killer Un outil conçu pour exploiter les mauvaises implémentations des mécanismes de déchiffrement dans les applications Laravel. Cet outil a été conçu à l'origine pour fabriquer des payloads ciblant la fonction decrypt de Laravel, issue du paquet Illuminate\Encryption. Il peut...

log4j2_CVE-2021-44228

log4j2 Environment Test Usage, Assume Personal Responsibility for Issues My test environment is Java 17. If needed, you can modify and re-import the project yourself. After starting the environment, the address is: http://127.0.0.1:8006/test...

auth

مصادقة PlaceOS متغيرات البيئة root@kitploit: If a sentry Data Source Name is configured SENTRYDSN=https://@.ingest.sentry.io/ A shared secret for encrypting cookies SECRETKEYBASE=84b04ea4259542f365 JWT Private key JWTSECRET=Base64 Encoded RSA PRIVATE KEY Database name and host...

CVE-2018-12533

RF-14310 / CVE-2018-12533 payload generator Based on Lucifaer research All credit goes to https://github.com/Lucifaer References https://access.redhat.com/security/cve/cve-2018-12533 richfaces-jboss-poc Easy to deploy proof of concept to practice Richfaces 3.3.4 deserialization + EL injection...

XPL-SEARCH

XPL SEARCH root@kitploit: Search exploits/vulnerabilities in multiple databases online! XPL SEARCH is a multiplatform toolWindows and Linux, which was developed in PHP with the aim of helping the hacker community to find exploits or 'vulnerabilities', using online databases, below is the list of...

VulnLab

VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...

strelka

रिलीज़ | दस्तावेज़ीकरण | पुल अनुरोध | मुद्दे !Pull...

strelka

Releases | Documentation | Pull Requests | Issues !Pull...

RMS-Runtime-Mobile-Security

Runtime Mobile Security RMS 📱🔥 by @mobilesecurity Runtime Mobile Security RMS , powered by FRIDA, is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime. With RMS you can easily dump all loaded classes and relative methods, hook everything on the fly, trace metho...

CVE-2003-0358

CVE-2003-0358 ऐतिहासिक कारणों से पोस्ट किया जा रहा है। snowcrash [email protected] https://github.com/snowcra5h/ विवरण बफर ओवरफ्लो 1 nethack 3.4.0 और पुराने संस्करणों में, और 2 falconseye 1.9.3 और पुराने संस्करणों में, जो nethack पर आधारित है, स्थानीय उपयोगकर्ताओं को एक लंबे -s कमांड लाइन...

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability fofa: product="Joomla" Usage root@kitploit: usage: CVE-2023-23752.py -h -u URL -f FILE -t THREAD -T TIMEOUT -o OUTPUT optional arguments: -h, --help show this help message and exit -u URL, --url URL Target urle.g. url.txt -f FILE, --file FIL...

EUVD-2026-70672

UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. Attackers with minimal admin privileges can create OAuth API integrations, mint client credentials, and escalate permissions by exploiting...

CVE-2026-85395 UnoPim before 2.1.3 Missing Authorization on Integration Management Routes

UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. Attackers with minimal admin privileges can create OAuth API integrations, mint client credentials, and escalate permissions by exploiting...