CVE-2023-44487

Please note that the above code uses the libcurl library for making HTTP requests. You need to install libcurl and link against it when compiling the code. The code is a simplified version, and you may need to adjust it based on your exact requirements and the specific behavior of the HTTP/2 atta...

CVE-2025-0108

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Python vulnerability scanner designed to...

CVE-2024-7954POC

CVE-2024-7954POC The porteplume plugin used in SPIP versions before 4.30-alpha2, 4.2.13, and 4.1.16 has an arbitrary code execution vulnerability. Remote unauthenticated attackers can execute arbitrary PHP code as SPIP users by sending specially crafted HTTP requests...

cve2018-13379-nmap-script

cve2018-13379-nmap-script CVE-2018-13379 Script for Nmap NSE An Improper Limitation of a Pathname to a Restricted Directory "Path Traversal" in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Proof-Of-Concept A flaw was found in pki-core. Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests...

http_bridge

Http Bridge Motivation I've wrote this program as a proof of concept to test the idea of be able to send tcp stream packets over simple http request like PUT, PATCH, POST, GET, without use a proxy way like CONNECT method. Also as a practice exercise to train my novice skill on rust language...

phpstress

phpstress Night Lion Security proof of concept denial of service / stress tester for PHP websites running with Apache and NGINX systems PHP-FPM and PHP-CGI Using a standard cable/DSL connection, this attack can flood a Linux web server’s CPU and RAM using standard HTTP requests. This attack effec...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...

cloud_enum

cloudenum Future of cloudenum I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool...

w3af

w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...

Bulk_403_Bypass

Bulk 403 Bypass This is a Bash script that performs bulk 403 bypass by adding a custom header to HTTP requests. It can be useful for testing whether a website is vulnerable to 403 bypass techniques. Usage To use the script, pass in a list of URLs as a command line argument: root@kitploit:...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

CVE-2020-3452

CVE-2020-3452 Little, stupid python validator? for CVE-2020-3452 on CISCO devices. Python first timer, pls do not kill me. ;- USAGE root@kitploit: python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DISCLAIMER: Please use this script only on subjects you own or you have the...

turbo-intruder

Turbo Intruder Turbo Intruder 是一个 Burp Suite 扩展，用于发送大量 HTTP 请求并分析结果。它旨在通过处理需要异常速度、持续时间或复杂性的攻击来补充 Burp Intruder。以下特点使其脱颖而出： 快速 - Turbo Intruder 使用从头开始手写的 HTTP 栈，注重速度。因此，在许多目标上，它可以严重超越甚至时尚的异步 Go 脚本。 可扩展 - Turbo Intruder 可以实现平坦的内存使用，从而实现可靠的多天攻击。它还可以通过命令行在无头环境中运行。 灵活 - 使用 Python...

CVE-2018-6389

doser.py DoS tool for HTTP requests inspired by hulk but has more functionalities written in Python: Examples 999 threads sends GET requests: root@kitploit: python doser.py -t 999 -g 'https://targeted.site.com' 999 threads sends POST requests with json data: root@kitploit: python doser.py -t 999 ...

wfuzz

Wfuzz - 网络模糊测试工具 Wfuzz 旨在简化 Web 应用程序评估中的任务，其基于一个简单的概念：它将 FUZZ 关键字的所有引用替换为给定载荷的值。 Wfuzz 中的载荷是一个数据源。 这个简单的概念允许任何输入注入到 HTTP 请求的任何字段中，从而能够在不同的 Web 应用程序组件（如参数、认证、表单、目录/文件、HTTP 头等）中执行复杂的 Web 安全攻击。 Wfuzz 不仅仅是一个 Web 内容扫描器： Wfuzz 可以通过发现和利用 Web 应用程序漏洞来帮助您保护 Web 应用程序。Wfuzz 的 Web 应用程序漏洞扫描器由插件支持。 Wfuzz...

burpflow

BurpFlow BurpFlow is a lightweight Node.js CLI tool that routes HTTP requests through a Burp Suite proxy, enabling security testers to quickly load and analyze reconnaissance URLs inside Burp. 🎯 What is BurpFlow? BurpFlow is a fast, efficient, and minimal recon automation CLI tool designed for...

LoLLMS WebUI - Subfolder Prediction via Path Traversal

A Path Traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'addreferencetolocalmode' function due to the lack of input sanitization. This vulnerability affects versions v9.6 to the latest. id: CVE-2024-4841 info: name: LoLLMS WebUI - Subfolder Prediction via Path...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

Re2Pcap

Re2Pcap: Create PCAP file from raw HTTP request or response in seconds Re2Pcap is abbreviation for Request2Pcap and Response2Pcap. Community users can quickly create PCAP file using Re2Pcap and test them against Snort rules. Re2Pcap allow you to quickly create PCAP file for raw HTTP request shown...