CrossLinked

CrossLinked CrossLinked is a LinkedIn enumeration tool that uses search engine scraping to collect valid employee names from an organization. This technique provides accurate results without the use of API keys, credentials, or accessing LinkedIn directly! Table of Contents Install Prerequisites...

CVE-2025-3102

CVE-2025-3102 🛠️ Script de Explotación de SureTriggers Este script se utiliza para identificar y explotar una vulnerabilidad de seguridad en el plugin SureTriggers en sitios WordPress que utilizan una versión vulnerable ≤ v1.0.78. Si tiene éxito, el script crea automáticamente una cuenta de...

CVE-2024-23692

Rejetto HFS HTTP File Server CVE-2024-23692 Vulnerability Overview Rejetto HFS HTTP File Server is a simple web file server that facilitates file sharing over a network or the internet. Despite its ease of use and simplicity, a critical vulnerability CVE-2024-23692 has been discovered, making the...

log4j-docker

Log4j Vulnerability - Proof-of-concept This repo has the docker and k8s YAMLs that are needed to recreate the log4j vulnerability seel below. Follow this blog to understand how all of this is tied together. Build Docker Images In case you need to customize the docker images root@kitploit: cd...

iTop-CVEs-exploit

iTop-CVEs-exploit This repository contains exploits for iTOP CVE-2024-52002, 52000, 31998, 31448 that involve CSRF+XSS chaining to get admin privileges on the software. Set up 1. Download the vulnerable iTOP version from docker root@kitploit: sudo docker run -d -p 8090:80 --name=my-itop2...

Arjun

Arjun Suite de Descubrimiento de Parámetros HTTP ¿Qué es Arjun? Arjun puede encontrar parámetros de consulta para endpoints URL. Si no entiendes lo que eso significa, está bien, sigue leyendo. Las aplicaciones web utilizan parámetros o consultas para aceptar entrada del usuario, toma el siguiente...

webstor

WebStor Identificación rápida de tecnologías web vulnerables en su organización WebStor es una herramienta implementada en Python bajo la licencia MIT para enumerar rápidamente todos los sitios web en todas las redes de su organización, almacenar sus respuestas y consultar tecnologías web y...

CVE-2021-27905

CVE-2021-27905 Apache Solr ReplicationHandler 服务器端请求伪造（SSRF） 访问计数器 Apache Solr（全称 Searching On Lucene with Replication）是一个基于 Apache Lucene 库的免费开源搜索引擎，使用 Java 编写。Apache Solr 提供 RESTful XML/HTTP 和 JSON API，并支持多种编程语言的客户端库，例如 Java、Python、Ruby、C、PHP 等，广泛用于构建基于搜索和大数据分析的应用程序，涵盖网站、数据库、文件等场景。 Apache Solr...

CVE-2024-2876

CVE-2024-2876 Description Of Vulnerability: The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘run’ function of the ‘IGESSubscribersQuery’ class in all versions up to, and...

CVE-2025-54914-PoC

CVE-2025-54914 Azure Route Exploit Overview This is an improved implementation of the CVE-2025-54914 Azure Networking Route exploit. This version maintains the core CVE functionality while adding more features including persistence, evasion, multi-target scanning, and error handling. Features Cor...

CVE-2026-45829

🚨 CVE-2026-45829 - ChromaDB Pre-Auth RCE Critical Remote Code Execution in ChromaDB Vector Database 📌 Overview CVE-2026-45829 is a critical pre-authentication Remote Code Execution vulnerability in ChromaDB , a popular open-source AI Vector Database. An unauthenticated attacker can exploit the wa...

CVE-2026-91859

Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception. Because CakeErrorController extends AppController, exception rendering runs the application startup path a second time. As a result, accessMonitor calls AccessLog::logRequest twice for one...

CVE-2026-59341

A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitting a modified payload containing custom Go template logic in spec.template.data, an attacker with internal network access can abuse the handler as a decryption oracle to recover the full...

creepy

creepy NOTA Este proyecto actualmente no se mantiene. No he trabajado en él desde 2016 y, con el estado actual del acceso a las API de Instagram y Twitter, y la configuración predeterminada de sus funciones de geolocalización, cree.py no sería de mucha utilidad. Dejaré el repositorio y el sitio w...

Honeyd

Honeyd 1.6d Copyright c 2002 - 2007 Niels Provos [email protected] About Honeyd: Honeyd is a small daemon that creates virtual hosts on a network. The hosts can be configured to run arbitrary services, and their TCP personality can be adapted so that they appear to be running certain version...

CVE-2024-27348

CVE-2024-27348 仅供道德使用，不允许任何有害或恶意行为。并且由您自行承担责任 您可以在此处阅读漏洞分析：https://blog.securelayer7.net/remote-code-execution-in-apache-hugegraph/ Apache HugeGraph 服务器 RCE 扫描器 CVE-2024-27348，扫描器将在目标上运行 4 条命令（host、ping、curl、wget），以防找不到某个工具。 来自目标的 Ping 日志 来自目标的 DNS 查询、Web 请求 用法 root@kitploit: usage: -h --file FIL...

emploleaks

EmploLeaks EmploLeaks is an OSINT Open Source Intelligence tool with a CLI interface, designed to discover and correlate information about employees of a target company. It allows collecting LinkedIn profiles, generating potential corporate emails, searching for leaked credentials in leak databas...

CVE-2025-29927-POC

CVE-2025-29927-POC Introduction This repository contains a Proof of Concept PoC for CVE-2025-29927, a hypothetical vulnerability demonstrating a flaw in middleware handling within a web application. The PoC illustrates how a specially crafted HTTP request can bypass redirection logic to access...

CVE-2021-31166-exploit

CVE-2021-31166 HTTP Protocol Stack Remote Code Execution Vulnerability Attacked version： Microsoft:Windows 10: version 2004 for 32-bit Systems version 2004 for x64-based Systems version 2004 for ARM64-based Systems version 20H2 for 32-bit Systems version 20H2 for x64-based Systems version 20H2 fo...

CVE-2023-6063

CVE-2023-6063 PoC 参考 WP Fastest Cache 1.2.2 中已修复的未认证 SQL 注入漏洞 | WPScan 插件设置 启用 "WP Fastest Cache"。 PoC "wordpressloggedin" Cookie 参数存在漏洞。 root@kitploit: $ python sqlmap.py --dbms=mysql -u "http://127.0.0.1/wp-login.php" --cookie='wordpressloggedin=' --level=2 --schema...