Lucene search
+L

2436704 matches found

Kitploit
Kitploit
added 2026/09/16 6:21 a.m.7 views

CVE-2019-0604

1. Analysis of k8gege's cve-2019-0604-exp.py k8gege's script https://github.com/k8gege/CVE-2019-0604 Honestly, k8gege's Python script is a bit fancy, with a large number of hexadecimal strings split into payload1, 2, 3. Devious. The Python script sends a remote POST payload, which after...

9.8CVSS7.9AI score0.99913EPSS
SaveExploits30References1
Kitploit
Kitploit
added 2026/09/16 6:21 a.m.88 views

r4ven

If you find this GitHub repo useful, please consider giving it a star! ⭐️ ▶️ Watch Video - How To Use! This project is a security research and awareness tool designed to demonstrate how modern web browsers may expose location data, camera access, IP address, and device information when users...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 6:21 a.m.10 views

CVE-2022-29464

WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is a serious flaw in WSO2. The flaw is an unauthorised, unconstrained arbitrary file upload that enables unauthorised users to upload malicious JSP files to WSO2 servers and get Remote Code Execution RCE. the vulerable upload rou...

10CVSS8.5AI score0.99999EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/16 6:21 a.m.6 views

Azure-APIM-Cross-Tenant-Signup-Bypass

Azure APIM Cross-Tenant Signup Bypass Status 01.12.2025: This vulnerability is still live and exploitable. Microsoft has not patched this issue and considers it "by design." Security Advisory GHSA-vcwf-73jp-r7mv CVE-2025-66390 Summary A security vulnerability in Azure API Management APIM Develope...

9.8CVSS6AI score0.00642EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/16 6:21 a.m.7 views

CVE-2021-26855-SSRF

CVE-2021-26855-SSRF-Poc This script helps to identify CVE-2021-26855 ssrf Poc Reference: https://proxylogon.com/ Script usage python CVE-2021-26855.py -H target.com -B xxxxxxxxxxxxxxxxxx.burpcollaborator.net If you are able to retrieve tokens through HTTPS request. then the target is vulnerable...

9.8CVSS8.2AI score0.99996EPSS
SaveExploits65
Kitploit
Kitploit
added 2026/09/16 6:20 a.m.10 views

crlfmap

CRLFMap CRLFMap is a tool to find HTTP Splitting vulnerabilities Why? I wanted to write a tool in Golang for concurrency I wanted to be able to fuzz both parameters and paths Installation root@kitploit: go get github.com/ryandamour/crlfmap Help root@kitploit: Available Commands: help Help about a...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 6:20 a.m.9 views

CVE-2021-21985_PoC

CVE-2021-21985 Vulnerable Code CLASS/METHODs available, a little sample for PoC purposes: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

10CVSS9AI score0.99999EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/16 6:20 a.m.7 views

about-hmac

About HMAC An Example Implementation of Basic HMAC Hash-based Message Authentication Code Using Flask in Python. What is HMAC?! Hash-based message authentication code HMAC provides the server and the client each with a private key that is known only to that specific server and that specific clien...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 6:19 a.m.72 views

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 6:19 a.m.192 views

squarephish

SquarePhish SquarePhish is an advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes. See PhishInSuits for more details on using OAuth Device Code flow for phishing attacks. root@kitploit: / | | | | | | | | | | | | | \ \ / | | | |/ | '/ \ /| ...

6.3AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/16 6:19 a.m.16 views

mobileAudit

Mobile Audit MobileAudit - SAST and Malware Analysis for Android Mobile APKs A Django web application to perform static analysis and detect malicious content inside Android APKs. The project extracts app metadata, scans source code for weaknesses, and aggregates results SAST findings, best...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/16 6:19 a.m.5 views

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset Auth Bypass and RCE Apache Superset, a widely used open-source tool for data visualization and exploration, has been identified as having potential security weaknesses that could lead to authentication bypass and remote code execution RCE. These vulnerabilities cou...

9.8CVSS8.4AI score0.97405EPSS
SaveExploits19References1
Kitploit
Kitploit
added 2026/09/16 6:18 a.m.9 views

CVE-2018-12613

CVE-2018-12613 Modified standalone exploit ported to Python 3. Tested on Python 3.7.3, phpMyAdmin 4.8.1 running on Ubuntu 16.04 Works on Linux only. Original exploit by SSD. All credits to them. Changes made 1. Added function to exit if provided phpMyAdmin username/password is correct 2. Added...

8.8CVSS7.5AI score0.9835EPSS
SaveExploits22References1
Kitploit
Kitploit
added 2026/09/16 6:18 a.m.8 views

es_inject

CVE-2014-3120 Elastic Search Remote Code Execution This project demonstrates the CVE-2014-3120 vulnerability/misconfiguration. It allows you to read from and append to files on the system hosting ES, provided the user running ES has access to them. Notes This does not require a web server. Save i...

8.1CVSS7.4AI score0.88559EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/09/16 6:17 a.m.10 views

numasec

numasec The open source AI security agent. Give your terminal a security brain. Run security workflows with your local tools, agents, runbooks, findings, evidence, replay and reports. npm install -g numasec Demo | Why | What it feels like | Try it | What it does | Commands | Architecture | Roadma...

6.1AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/16 6:17 a.m.7 views

OpenEMR_Vulnerabilities

OpenEMR Remote Code Execution Vulnerability OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes. PoC root@kitploit: git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t http://127.0.0.1/openemr...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 6:16 a.m.7 views

CVE-2018-11776

CVE-2018-11776 On August 23, 2018, Apache Struts 2 released its latest security advisory, revealing a high-risk remote code execution vulnerability. Reported by a security researcher from the Semmle Security Research team, this vulnerability is tracked as CVE-2018-11776 S2-057. If the namespace...

9.3CVSS8.5AI score0.99991EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/16 6:15 a.m.14 views

dllspy

DllSpy Scans compiled .NET assemblies to discover input surfaces HTTP endpoints, SignalR hubs, WCF services, gRPC services, Razor Pages, Blazor components, Azure Functions, OData endpoints, check authorization configuration, and flag security issues — all without running the application. Availabl...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 6:15 a.m.8 views

CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Unauthenticated Remote Code Execution https://vulners.com/cve/CVE-2022-24637 Example root@kitploit: python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...

9.8CVSS8.5AI score0.99055EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/16 6:14 a.m.42 views

git-dumper

git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: root@kitploit: pip install git-dumper Usage root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional...

6.6AI score
SaveExploits0
Rows per page
Query Builder