CVE-2023-22527

CVE-2023-22527 - Vulnerabilidad RCE Ejecución Remota de Código en Confluence Data Center y Confluence Server PoC Detección nuclei -v -t /path/to/template.yam; -u http://ip:port/ Explotación python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port...

GhidraMCP

ghidraMCP ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients. https://github.com/user-attachments/assets/36080514-f227-44bd-af84-78e29ee1d7f9 Features MCP Server +...

the-bastion

🔒 The Bastion 概述 Bastion 是一个由多台机器组成的集群，作为运维团队（如系统管理员、开发人员、数据库管理员等）连接设备（服务器、虚拟机、云实例、网络设备等）的唯一入口点，通常使用 ssh。 Bastion 为您的整个基础设施提供认证、授权、可追溯性和可审计性机制。 Bastion 部署在用户与基础设施之间，增加了一层抽象，使得您的基础设施无需单独了解运维团队的每个成员。 每位团队成员在 Bastion 上拥有一个独立账户，可以属于一个或多个 Bastion 组，这些组可能赋予他们访问一个或多个基础设施的权限。基础设施设备只需知道并信任它们所属的 Bastion 组。...

CVE-2023-23752_Joomla

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure A proof-of-concept for CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure. For versions 4.0.0 4.2.8 it means from 4.0.0 up to 4.2.7. Getting Started Executing program With python3 root@kitploit: python3...

threatspec

threatspec - modelado de amenazas continuo, a través del código Threatspec es un proyecto de código abierto que tiene como objetivo cerrar la brecha entre el desarrollo y la seguridad al incorporar el proceso de modelado de amenazas más profundamente en el proceso de desarrollo. Esto se logra...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

CVE-2022-3602

Detection for CVE-2022-3602 - OpenSSL RCE/DOC v3.0.0 - v3.0.6 Detects when the HTTP Server header indicates that the version of OpenSSL is vulnerable to CVE-2022-3602 ie. v3.0.0 to v3.0.6 inclusive. Detects exploitation attempts in TLS v1.2. References:...

pyshark

pyshark Python 对 tshark 的封装，允许使用 wireshark 解析器进行 Python 数据包解析。 扩展文档：http://kiminewt.github.io/pyshark 寻找贡献者 - 由于各种原因，我目前很难有时间维护和增强该包。任何拉取请求都会被审查，如果有人感兴趣并且合适，我很乐意让他们加入项目。请随时通过 dorgreen1 at gmail 给我发邮件。 有不少 Python 数据包解析模块，但本模块的不同之处在于它实际上并不解析任何数据包，它仅仅是利用 tshark（wireshark 命令行工具）导出 XML 的能力来使用其解析功能。...

CVE-2021-21809

CVE-2021-21809 POC CVE details: A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can lead to command execution. An attacker must have administrator privileges to exploit this vulnerabilities. In the belo...

cve-2022-31813

CVE-2022-31813 Vulnerability Checker Author : Derek Odiorne GitHub : @dodiorne Version : 1.2 Last Updated : May 21, 2025 MITRE ATT &CK Technique: T1190 – Exploit Public-Facing Application 🧠 Description This tool is a black-box vulnerability scanner for detecting CVE-2022-31813 , a path traversal...

CVE-2021-40373

CVE-playsms There is a vulnerability in playsms 1.4.3 that allows potential attackers to execute remote code execution. how to reproduce RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms login using admin:admin...

AVideo3xploit

AVideo3xploit.go RCE exploit for AVideo root@kitploit: root@kali: go get github.com/fatih/color root@kali: git clone https://github.com/ahussam/AVideo3xploit.git root@kali: cd AVideo3xploit root@kali:/AVideo3xploit go run AVideo3xploit.go http://target/avideo/ username password You should get a...

CVE-2023-38545

CVE-2023-38545: Curl Vulnerability Proof of Concept This repository contains a Proof of Concept PoC designed to test systems for the CVE-2023-38545 vulnerability. The vulnerability affects the curl utility, specifically versions between 7.69.0 and 8.3.1, and is related to the handling of HTTP...

emploleaks

EmploLeaks EmploLeaks 是一款 OSINT（开源情报）工具，配备 CLI 界面，旨在发现并关联目标企业员工的相关信息。它能够收集 LinkedIn 个人资料、生成潜在的企业电子邮件、在泄露数据库中（内部基于 ClickHouse）搜索已泄露的凭证、通过 HaveIBeenPwned 验证已知漏洞、发现企业基础设施并在社交媒体中描绘员工画像。所有信息均本地存储在 SQLite 中，以供后续分析。 特性 从 LinkedIn 搜索和枚举员工（使用会话 Cookie 进行爬取） 自动生成潜在的企业电子邮件，支持自定义格式 在自有 ClickHouse 数据库中搜索已泄露的凭...

airecon

Agente autónomo de pruebas de penetración impulsado por IA -orange.svg AIRecon es un agente autónomo de pruebas de penetración que combina un LLM de Ollama autoalojado con un sandbox Docker de Kali Linux , integración nativa con el proxy Caido , un pipeline estructurado RECON → ANALYSIS → EXPLOIT...

EvtMute

EvtMute This is a tool that allows you to offensively use YARA to apply a filter to the events being reported by windows event logging. Usage Grap the latest verison from here. EvtMuteHook.dll contains the core functionality, once it is injected it will apply a temporary filter which will allow a...

React2Shell

@React2Hell — CVE-2025-55182 Exploit 🔥 Next.js / React Server Remote Code Execution RCE Exploit root@kitploit: █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ▄▄▄▄▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██▄▄ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ▄▄▄███ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ MAGENTA...

HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 通过CVE-2017-7921漏洞检查或测试目标IP地址上的 /onvif-http/snapshot?auth=YWRtaW46MTEK URI，使用多线程方法快速识别潜在漏洞。 Requirements root@kitploit: python3 Python Pacakges = requests, Fakeuseragent, colorama Installation 你可以直接使用 pip 安装依赖：pip install -r requirements.txt 如果你更喜欢手动安装所需的包，可以使用 pip install...

CVE-2026-34197

CVE-2026-34197 CVE-2026-34197 activemq PoC PoC para ActiveMQ según la publicación de Horizon3 https://horizon3.ai/attack-research/disclosures/cve-2026-34197-activemq-rce-jolokia/ root@kitploit: krasn@icestorm cve-2026-34197-activemq % docker compose up -d krasn@icestorm cve-2026-34197-activemq %...

checker-CVE-2020-5902

Checker CVE-2020-5902 Checker CVE-2020-5902: BIG-IP versions 15.0.0 through 15.1.0.3, 14.1.0 through 14.1.2.5, 13.1.0 through 13.1.3.3, 12.1.0 through 12.1.5.1, and 11.6.1 through 11.6.5.1 suffer from Traffic Management User Interface TMUI arbitrary file read and command execution vulnerabilities...