Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web...

CVE-2023-36643

== 受影响软件 %hardbreaks 供应商： ITB-GmbH 受影响产品： TradePro v9.5 组件： 函数 Customer；操作 oordershow 已确认： 是 == 攻击向量 %hardbreaks 类型： 不正确的访问控制 访问方式： 远程 影响： 信息泄露 ITB-GmbH TradePro v9.5 中函数 customer、操作 oordershow 存在不正确的访问控制，通过向一个 https 端点传递任意订单号，远程攻击者可获取在线商店的所有订单。 == 描述 bestellid 应事先已知，但可轻易枚举或利用...

CVE-2022-24112

Apache APISIX 2.12.x Remote Code Execution RCE Exploit This Python script is a Proof-of-Concept PoC for a remote code execution RCE vulnerability in Apache APISIX versions 2.12.0 and 2.12.1. The vulnerability lies in the misuse of the filterfunc Lua field within the admin API, allowing an attacke...

CVE-2025-55183-poc

CVE-2025-55183-poc – Next.js React Server Components サーバー関数ソースコード開示 このリポジトリには、Next.js React Server Components RSC / Server Actions におけるソースコード開示の脆弱性を検出するツールが含まれています。この脆弱性は CVE-2025-55183 として追跡されています。 脆弱なアプリケーションでは、Server Function に対する巧妙に細工された HTTP...

CVE-2023-1454

CVE-2023-1454 jmreport/qurestSql Unauthorized SQL Injection Batch Scan POC Jeecg-Boot is a rapid development platform based on Spring Boot and Jeecg-Boot-Plus. The latest jeecg-boot 3.5.0 has been exposed to multiple SQL injection vulnerabilities. Description Original tool URL The original tool h...

haptyc

Haptyc Marco de Generación de Pruebas ¿Qué es Haptyc? Haptyc es una librería de Python construida para agregar soporte de posiciones de carga útil y tipos de ataque Sniper/Clusterbomb/Batteringram/Pitchfork en Turbo Intruder. Si bien Haptyc logra estos objetivos bastante bien, también introduce u...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

CVE-2024-57429

CVE-2024-57429 A cross-site request forgery CSRF vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request. Impact: Exploitation of this CSRF...

CVE-2022-45047

CVE-2022-45047 POC,EXP,chatGPT for me code root@kitploit: import requests targeturl = "http://127.0.0.1:7001" CVE-2022-45047 def exploitweblogic: headers = "Content-Type": "text/xml", "User-Agent": "Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:93.0 Gecko/20100101 Firefox/93.0", "Accept-Encoding":...

Slackor

Slackor Mantenido en https://github.com/n00py/Slackor Un implante en Golang que usa Slack como canal de comando y control. Este proyecto fue inspirado por Gcat y Twittor. Esta herramienta se publica como prueba de concepto. Asegúrese de leer y comprender la Política de Desarrollador de Aplicacion...

Spring4Shell-CVE-2022-22965-POC

Spring4Shell-CVE-2022-22965-POC root@kitploit: ghost㉿uchiha:$ ./exploit.py --help usage: exploit.py -h -f FILENAME -p PASSWORD -d DIRECTORY url Spring4Shell RCE Proof of Concept positional arguments: url Target URL options: -h, --help show this help message and exit -f FILENAME, --filename FILENA...

thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

thief_raccoon

Thief Raccoon - Herramienta de Phishing para Inicio de Sesión Thief Raccoon es una herramienta diseñada con fines educativos para demostrar cómo se pueden realizar ataques de phishing en varios sistemas operativos. Esta herramienta tiene como objetivo crear conciencia sobre las amenazas de...

RedHunt-OS

RedHunt Linux Distribution VM v2 Virtual Machine for Adversary Emulation and Threat Hunting by RedHunt Labs RedHunt OS aims to be a one stop shop for all your threat emulation and threat hunting needs by integrating attacker's arsenal as well as defender's toolkit to actively identify the threats...

CVE-2024-43425-Poc

CVE-2024-43425-Poc CVE Overview CVE ID: CVE-2024-43425 Description: Moodle allows an authenticated teacher-level user to upload a malicious calculated question via the quiz editor interface. Impact: Remote Code Execution RCE Cause: Improper sanitization of mathematical payloads inside calculated...

rwsploit

Oracle Reports rwservlet スキャナー ⚠️ 許可された用途のみ。所有しているシステム、または明示的な書面によるテスト許可を得ているシステムに対してのみこのツールを実行してください。不正使用は違法です。 Oracle Reports Server（rwservlet）に焦点を当てたエクスプロイトスキャナーで、CVE-2012-3152 および CVE-2012-3153 を狙います。影響を受けるのは 11g 未満のバージョンです。単一 IP、CIDR 範囲、またはターゲットリストに対して、検出、LFI ファイル読み取り、SSRF テスト、JSP...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 Extractor de Datos Compilación root@kitploit: git clone https://github.com/JohnDoeAnonITA/CVE-2023-23752 cd CVE-2023-23752 go build . Uso root@kitploit: CVE-2023-23752.exe -h|--help -u|--url "" -t|--type 1|2 Ayuda root@kitploit: / / / | // //// // //.'///'/ // //// /...

Predator

Predator Anti-Automation System Introduction Predator is a prototype web application designed to demonstrate anti-crawling, anti-automation & bot detection techniques. It can be used a honeypot, anti-crawling system or a false positive test bed for vulnerability scanners. Warning: I strongly...

urlfinder

URLFinder Una herramienta de alta velocidad para recopilar URLs de forma pasiva, optimizada para el descubrimiento eficiente de activos web sin escaneo activo. Características • Instalación • Uso • Ejemplos • Únete a Discord Resumen URLFinder es una herramienta de descubrimiento de URLs pasiva y ...

nexfil

NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives. Available In Featured The Privacy, Securit...