CVE-2023-49031

LFI Tikit eMarketing CVE-2023-49031 Discovery On November 2023, a novel local file inclusion vulnerability was identified in the “eMarketing” platform developed by Tikit now Advanced during a client engagement. This issue was resolved with Advanced on February 2024 Affected Versions This...

CVE-2022-38813

CVE-2022-38813 Veritical Privilege Escalation via user parameter in Blood Donor Management System Using Codeigniter v 1.0 Technical description: Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete t...

CVE-2025-30208

CVE-2025-30208 !IMPORTANT Disclaimer This exploit is for educational and ethical security testing purposes only. The use of this exploit against targets without prior mutual consent is illegal, and the developer disclaims any liability for misuse or damage caused by this exploit. Installation...

external_libexif_AOSP10_r33_CVE-2020-0181

libexif ------- DESCRIPTION libexif is a library for parsing, editing, and saving EXIF data. It is intended to replace lots of redundant implementations in command-line utilities and programs with GUIs. FEATURES libexif supports parsing, editing and saving of EXIF data. In addition, it has gettex...

CVE-2021-42013

CVE-2021-42013 — PoC: Path Traversal + RCE via modcgi patch bypass For use only in controlled and own environments. Do not use against systems without authorization. Description PoC developed to demonstrate CVE-2021-42013 , present in Apache HTTP Server 2.4.50. This CVE is the bypass of the patch...

Atlas

Atlas - Sugeridor rápido de tamper de SQLMap v1.0 Atlas es una herramienta de código abierto que puede sugerir tampers de sqlmap para evitar WAF/IDS/IPS, la herramienta se basa en el código de estado devuelto. Pantalla Instalación root@kitploit: $ git clone https://github.com/m4ll0k/Atlas.git atl...

PhantomEvasion

PHANTOM EVASION 3.0 Phantom-Evasion es una herramienta de evasión de antivirus escrita en Python compatible tanto con Python como con Python3 capaz de generar ejecutables casi totalmente indetectables incluso con los payloads más comunes de x86 msfvenom. Los siguientes SOs soportan oficialmente l...

cve-2020-0618

CVE-2020-0618 Honeypot Detects and logs attempts to exploit CVE-020-0618 SQL Reporting Services RCE Serves content and headers like SSRS would, in order to increase chance of indexing on search engines e.g. google, shodan etc. Based on the great work of MDSec and x1sec Installation Get the code...

firehol

FireHOL http://firehol.org/ root@kitploit: FireHOL，一个面向人类用户的 iptables 状态化数据包过滤防火墙！ FireQOS，一个基于 TC 的面向人类用户的带宽整形器！ Git 以下说明适用于使用 git 仓库进行开发的人员。 更通用的说明请从升级说明开始阅读。 克隆 Git 仓库 GitHub 上的 firehol 仓库页面 列出了可用于克隆该仓库的 URL。 克隆之后，你应该复制 git hooks（用于风格检查等）： root@kitploit: cp hooks/ .git/hooks 构建 Git 仓库 你需要安装 GN...

CVE-2003-0358

CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

bluewall

BLUEWALL Bluewall は、攻撃的および防御的なサイバー専門家向けに設計されたファイアウォールフレームワークです。 このフレームワークにより、サイバーセキュリティ専門家はスコープ内に留まりながら環境を迅速にセットアップできます。 クレジット Andrew Benson の hostfw iptable 生成スクリプト に触発されました。 機能 Bluewall root@kitploit: ファイアウォールの設定 ホスト名の設定 インターフェースの設定 サポート対象OS root@kitploit: Redhat/CentOS Windows...

CVE-2018-6376

CVE-2018-6376 Joomla!, Second Order SQL Injection Start Joomla! root@kitploit: $ docker-compose up -d Access localhost via browser http://localhost:10080...

GTScan

GTScan El escáner Nmap para Telco. Con el enfoque actual en la seguridad de las telecomunicaciones, las herramientas utilizadas en las pruebas de penetración del lado de TI diario deben extenderse también a las telecomunicaciones. De aquí surgió la motivación para un escáner similar a nmap pero...

CVE-2021-29447-Authenticated-XXE-WordPress-5.6-5.7

CVE-2021-29447 Exploit XXE autenticado para WordPress 🎯 Un PoC en Python para explotar la vulnerabilidad XXE autenticada CVE-2021-29447 en las versiones 5.6–5.7 de WordPress mediante metadatos WAV. Abusa del chunk iXML en archivos WAV para desencadenar una exfiltración fuera de banda OOB de datos...

Cloakify

CloakifyFactory CloakifyFactory & the Cloakify Toolset - Data Exfiltration & Infiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Defeat Data Whitelisting Controls; Evade AV Detection. Text-based steganography using lists. Convert any file type e.g. executables,...

Cloakify

CloakifyFactory CloakifyFactory & el Cloakify Toolset - Exfiltración e Infiltración de Datos a Plena Vista; Evasión de Dispositivos DLP/MLS; Ingeniería Social de Analistas; Derrotar Controles de Lista Blanca de Datos; Evasión de Detección de AV. Esteganografía basada en texto usando listas...

ESAPI__esapi-java-legacy_CVE-2022-24891_2-2-3-1

Enterprise Security API for Java Legacy OWASP® ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library that makes it easier for programmers to write lower-risk applications. The ESAPI for Java library is designed to make it easier for programmers t...

OffensiveVBA

OffensiveVBA In preparation for a VBS AV Evasion Stream/Video I was doing some research for Office Macro code execution methods and evasion techniques. The list got longer and longer and I found no central place for offensive VBA templates - so this repo can be used for such. It is very far away...

subscraper

SubScraper Resumen :smallbluediamond: Uso :smallbluediamond: Contribuir SubScraper es una herramienta de enumeración de subdominios que utiliza diversas técnicas para encontrar subdominios de un objetivo dado. La enumeración de subdominios es especialmente útil durante pruebas de penetración y ca...