2546 matches found
CVE-2025-34028-PoC-Commvault-RCE
CVE-2025-34028 - Commvault Command Center Remote Code Execution A Python exploit for CVE-2025-34028, a remote code execution vulnerability in Commvault Command Center. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability...
red-detector
Red-Detector Description Scan your EC2 instance to find its vulnerabilities using Vuls https://vuls.io/en/. Audit your EC2 instance to find security misconfigurations using Lynis https://cisofy.com/solutions/lynis. Scan your EC2 instance for signs of a rootkit using Chkrootkit...
aws-security-assessment-solution
Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...
chaosmonkey
Chaos Monkey randomly terminates virtual machine instances and containers that run inside of your production environment. Exposing engineers to failures more frequently incentivizes them to build resilient services. See the documentation for info on how to use Chaos Monkey. Chaos Monkey is an...
autovpn
!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...
multi-juicer
Running CTFs and Security Trainings with OWASP Juice Shop is usually quite tricky, Juice Shop just isn't intended to be used by multiple users at a time. Instructing everybody how to start Juice Shop on their own machine works ok, but takes away too much valuable time. MultiJuicer gives you the...
security-research
security-research Proof-of-concept code and technical write-ups for vulnerabilities I discovered and reported through coordinated disclosure. Every entry here is already public: the vendor advisory is published and a fixed release is available. Nothing under embargo or in draft is included. The...
CVE-2022-29221-PoC
CVE-2022-29221-PoC I do not host in Github anymore, but on my own Git hosting instance. Go here to see code: https://git.sbani.net/sbani/CVE-2022-29221-PoC...
CVE-2025-31161_exploit
CVE-2025-31161 / CVE-2025-2825 python exploit To process a single URL, use the command: python3 script.py -u http://example.com To process a file containing a list of URLs one per line, use the command: python3 script.py -l urls.txt To specify the number of threads, use the -t flag. The script...
CVE-2020-0609
CVE-2020-609-POC Running the PoC against a RDG server with UDP open on port 3391, will cause the RDG instance to crash. Thanks to @Ollypwn for sparring during development...
whonow
Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. root@kitploit: respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and...
CVE-2026-91006
A flaw was found in Apache Karaf. An attacker with access to instance-management commands or Java Management Extensions JMX interfaces can achieve arbitrary command execution on the underlying host system. This issue occurs because user-supplied Java options are spliced directly into child-instan...
CVE-2026-91006 Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)
Apache Karaf's instance-management service InstanceServiceImpl builds the command line used to launch a child Karaf JVM by string concatenation, then executes it through /bin/sh Unix or cscript Windows. The caller-supplied javaOpts value is spliced into that string unquoted. A javaOpts value...
dockerized-android
Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...
CVE-2023-22515
1vere$k CVE-2023-22515 iveresk-CVE-2023-22515 On October 4, 2023, Atlassian released an advisory for CVE-2023-22515, a critical vulnerability affecting on-premises instances of Confluence Server and Confluence Data Center. Atlassian initially described this vulnerability as a Privilege Escalation...
AWS-Loot
AWSLoot Searches an AWS environment looking for secrets, by enumerating environment variables and source code. This tool allows quick enumeration over large sets of AWS instances and services. Install root@kitploit: pip install -r requirements.txt An AWS credential file .aws/credentials is requir...
phishlulz
PhishLulz PhishLulz es un conjunto de herramientas Ruby dirigido a automatizar actividades de phishing. Cuando inicias una campaña de phishing, se crea una instancia dedicada de Amazon EC2 Debian 7. La VM viene con varias herramientas de código abierto que se han integrado. Los dos componentes...
CVE-2023-26258-ArcServe
The TL; DR; If you are in the network you can scan for instances configured by default using ArcServeRadar.py. I tried to port it to C but couldn't, feel free to do it if you know how : root@kitploit: c:\Users\vagrant\Desktoppython ArcServeRadar.py "Ethernet 2" 6969 192.168.56.20 -= ArcServe Find...
CVE-2024-24142
CVE-2024-24142: School-Task-Manager-System-SQL-Injection-2 Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/School-Task-Manager-System/CVE-2024-24142.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24142/blob/main/CVE-2024-24142.md...