odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT （Oracle Database Attacking Tool）は、Oracleデータベースのセキュリティをリモートからテストするオープンソースのペネトレーションテストツールです。 ODATの使用例: リモートでリスニングしているOracleデータベースがあり、有効なSIDと資格情報を見つけてデータベースに接続したい場合 データベース上に有効なOracleアカウントを持っており、DBAまたはSYSDBAになるために権限を昇格したい場合...

php-app-race-condition

存在漏洞的 PHP 应用（竞态条件） 环境搭建: root@kitploit: docker-compose up 环境验证: 连接测试: http://localhost/test.php 漏洞端点: http://localhost/poc.php 竞态条件利用: root@kitploit: echo http://localhost | nuclei -t race.yml 可以观察到，从余额中提取的金额少于 1280$（10$ 128 个请求），并伴有可变的净收益。...

CVE-2018-8172

CVE-2018-8172 Microsoft Visual Studio CVE-2018-8172 Remote Code Execution Vulnerability http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...

mubeng

An incredibly fast proxy checker & IP rotator with ease. Contributing • What's new • Documentation • Report Issues Features Why mubeng? Installation Binary Docker Source Usage Basic Options Notes Install SSL Certificate Examples Proxy checker Proxy IP rotator Burp Suite Upstream Proxy OWASP ZAP...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

CLEANSTART-2026-BA42566 In Eclipse Jetty, the HTTP/1

Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...

ibombshell

ibombshell - Dynamic Remote Shell root@kitploit: ,--.!, / -- / / / // / / / / ,d08b. '| / / / / / \ / / / / / 0088MM / / // / // / / / / / / // // / / / / / / / 9MMP' ///// // //./// ///// + Starting the console... Console ready! ibombshell is a tool written in Powershell that allows you to...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file Please do not use in military or secret service organizations, or for...

thc-hydra

H Y D R A root@kitploit: c 2001-2023 by van Hauser / THC https://github.com/vanhauser-thc/thc-hydra Many modules were written by David dot Maciejak @ gmail dot com BFG code by Jan Dlabal Licensed under AGPLv3 see LICENSE file 軍事機関や秘密情報機関、または違法な目的で使用しないでください。...

jugular

jugular Use jugs to look for CUPS: an ultrafast UDP sender, that tries to tickle listening cups-browsed processes to do a HTTP callback. This is a high performance scanner that writes UDP packets directly to the network. Install Ubuntu or similar root@kitploit: sudo apt install golang...

Moxy

Moxy Moxy Next-Gen Man in the middle proxy Open-source DAST tool for pentesting powered by agentic AI capabilities Supporting Ollama. Built on top of browser-use, Moxy streamlines dynamic application security testing. 🚀 INSANELY EASY TO USE And it's free, who doesn't like free stuff? Preview Aler...

CVE-2021-41773-Apache_2.4.49-Path-traversal-to-RCE

CVE-2021-41773 – Apache HTTP Server 2.4.49 远程代码执行 ⚠️ 免责声明 本仓库仅供教育和研究目的 。 这里提供的信息和代码只能在受控环境 （例如私人实验室机器）中使用。 未经授权将本代码用于您不拥有或未获得明确许可测试的系统是非法的且不道德的。 作者不对任何滥用或造成的损害负责 。 🔍 关于漏洞 CVE-2021-41773 影响 Apache HTTP Server 版本 2.4.49 。 由于路径规范化中的输入验证不当，攻击者可以利用编码字符（如 %2e）进行路径遍历 以访问任意文件。 如果启用了CGI...

interrogation-game

Interrogation A voice-based detective interrogation game. You're a detective. Mistral is a suspect who's lying. Your job is to catch the lie through questioning alone. Every case is procedurally generated — a unique white-collar crime, suspect, cover story, and one hidden lie. The suspect is play...

CVE-2025-47827

CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...

CVE-2018-8174-exp

CVE-2018-8174EXP usage: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT Exploit for CVE-2018-8174 optional arguments: -h, --help show this help message and exit -u URL, --url URL exp url -o OUTPUT, --output OUTPUT Output exploit rtf -i IP, --ip IP ip for netcat -p PORT, --port PORT port for...

Phisher-man

Phisher-Man2 Samples Phishing tools made for Linux it contains 30 different type of Phishing Pages Requirements made for Linux System if you are using Kali Linux root@kitploit: pip install Flask any other Linux distributions root@kitploit: pip install Flask apt update sudo apt install apache2 sud...

CVE-2017-11882-exp

CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ salute, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – Insecure Permissions following Remote Code Execution Authenticated Vendor Homepage: http://extplorer.net/ Software Link: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Version: 2.1.15 Installation root@kitploit: git clone...

RelayKing-Depth

RelayKing v1.10 Dominate the domain. Relay to royalty. RelayKing is a comprehensive relay detection and enumeration tool designed to identify relay attack opportunities in Active Directory environments. Actual reporting options. Comprehensive attack coverage. Find the hidden relay vectors and...