Iot_Hacking_Camera_0day

IotHackingCamera0day Iot Camera 0day AHD DVR ADN-448 is prone to unauth buffer overflow over the http interface. Simple browse to web server inferface and enter a stupid ammount of data to username and password , and see how the camera reboots. Please see the video for confirmation : Happy IoT-...

darkdump

darkdump Acerca de Darkdump es una herramienta OSINT de código abierto para la investigación en la web profunda. Dada una consulta de búsqueda, obtiene resultados de múltiples motores de búsqueda de la dark web, opcionalmente extrae de cada sitio de resultados correos electrónicos, metadatos,...

CVE-2025-3248-POC

CVE-2025-3248-POC POC of CVE-2025-3248 execute any command on target machine usage: python poc.py 'http://xxx.com' 'ls /' leave some love on victims' computers poc.py...

promptmap

root@kitploit: O O o.-. Humans, Do Not Resist! |/ ,-'-. / /, / /|.-.| / --O-- .--""" /\ /\ | o.o / Utku Sen's /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /||| ./|||,| .// / / |-----| || || || || promptmap2 is a an automated prompt injection scanner for...

promptmap

O O o.-. ¡Humanos, no os resistáis! |/ ,-'-. / /, / /|.-.| / --O-- .--"""/\ /\ | o.o / De Utku Sen /|\ -'--' / /| | - | / | | | \ /| | | ' \ '/ \ ' | ' \ | ' / | ' \ | / | | | ./| /|| | ./| || , | .// / / |-----| || | | || || root@kitploit: promptmap2 es un escáner automatizado de inyección de...

CVE-2026-45332-PoC

CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...

flask-saml2

flask-saml2 .. note:: Looking for maintainers. This project is unmaintained. The library works, or did when I last used it, but I no longer work on the project this was built for. If you are interested in taking over leadership and maintenance of this project, please get in touch. .. image::...

GWTMap

Description GWTMap is a tool to help map the attack surface of Google Web Toolkit GWT based applications. The purpose of this tool is to facilitate the extraction of any service method endpoints buried within a modern GWT application's obfuscated client-side code, and attempt to generate example...

sjet

sJET de siberas siberas JMX Exploitation Toolkit sJET permite una explotación fácil de servicios JMX configurados de forma insegura. Información adicional de antecedentes se puede encontrar aquí y aquí. Requisitos previos Jython 2.7 Uso SJET implementa una interfaz CLI usando argparse:...

SqliSniper

Características • Instalación • Uso • Ejecutar SqliSniper • Contribuir • SqliSniper es una herramienta robusta en Python diseñada para detectar inyecciones SQL ciegas basadas en tiempo en cabeceras de solicitudes HTTP. Mejora el proceso de evaluación de seguridad al escanear rápidamente e...

CVE-2022-36532

Proof of Concept for CVE-2022-36532 A vulnerability in Bolt CMS version 5.1.12 and below allows an authenticated user with the EDITORROLE to achieve remote code execution. This vulnerability can be detected using this script, for details on the vulnerability see...

CVE-2022-1388-RCE-checker-and-POC-Exploit

CVE-2022-1388 RCE जाँचकर्ता CVE-2022-1388 RCE F5 BIG-IP की जाँच करने के लिए सरल bash स्क्रिप्ट। + उपयोग: ./CVE-2022-1388.sh hosts.txt CVE-2022-1388 RCE POC Exploit IP पता बदलना न भूलें root@kitploit: curl -X POST http://10.0.0.1/mgmt/tm/util/bash -d "'command':'run','utilCmdArgs':-e 'cat...

PRISM-AP

PRISM-AP ABOUT: PRISM-AP is an automated Wireless RogueAP MITM attack framework. FEATURES: Easy to setup and use and full automated Leverages MANA wifi attack to lure client connections Partial HSTS bypass via bettercap Intercept and view all HTTP headers, cookies and URL's View all DNS requests...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project Using with hook frameworks Pre-commit Husky Directly invoking talisman Upgradi...

CVE-2026-37066

CVE-2026-37066 Path traversal que conduce a lectura arbitraria de archivos en /vfm-admin/index.php y /vfm-admin/ajax/streamvid.php en Veno File Manager Project 4.4.9 permite a un atacante autenticado con rol de superadministrador divulgar información sensible mediante dos solicitudes http...

PartyLoud

Partyloud Recupera tu privacidad Genera navegación web falsa y mitiga el rastreo CodeFactor PartyLoud es una herramienta gratuita altamente configurable y sencilla que te ayuda a prevenir el rastreo directamente desde tu terminal Linux, sin necesidad de habilidades especiales. Una vez iniciada,...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

dcrawl

dcrawl dcrawl es un rastreador web simple, pero inteligente, de múltiples hilos para recolectar aleatoriamente enormes listas de nombres de dominio únicos. ¿Cómo funciona? dcrawl toma una URL de sitio como entrada y detecta todos los enlaces en el cuerpo del sitio. Cada enlace encontrado se coloc...

CVE-2025-6254

CVE-2025-6254 — Doctreat Core = 1.6.8 — Unauthenticated Privilege Escalation via Role Injection 🔥 Vulnerability Summary The WordPress plugin Doctreat Core versions = 1.6.8 is vulnerable to an unauthenticated privilege escalation vulnerability. This critical flaw allows unauthenticated attackers t...

onioff

root@kitploit: ██████╗ ███╗ ██╗██╗ ██████╗ ███████╗███████╗ ██╔═══██╗████╗ ██║██║██╔═══██╗██╔════╝██╔════╝ ██║ ██║██╔██╗ ██║██║██║ ██║█████╗ █████╗ ██║ ██║██║╚██╗██║██║██║ ██║██╔══╝ ██╔══╝ ╚██████╔╝██║ ╚████║██║╚██████╔╝██║ ██║ ╚═════╝ ╚═╝ ╚═══╝╚═╝ ╚═════╝ ╚═╝ ╚═╝ v2.0 A simple tool - written in...