CVE-2026-56592

HCL BigFix Service Management is affected by an Improper Authentication vulnerability caused by inadequate account lockout mechanisms. An unauthenticated attacker can execute sustained brute-force attacks against the login interface, potentially achieving unauthorized system access . The CVSS v3....

CVE-2026-56592 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access...

DCOMUploadExec

DCOM Upload & Execute POC de movimiento lateral DCOM que abusa de la interfaz IMsiServer https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor La solución contiene 2 proyectos DCOMUploadExec - Un proyecto de C++ que aloja el código de ataque de movimiento lateral...

magnolia-rce

Título del exploit: Magnolia DX Core 6.3.8 - Inyección de comandos Fecha: 05/16/2025 Autor del exploit: tmrswrr Versión: 6.3.8 Página principal del proveedor: https://docs.magnolia-cms.com/home/ Producto: https://docs.magnolia-cms.com/product-docs/6.3/releases/release-notes-for-magnolia-cms-6.3.8...

CVE-2026-83548-checker

SonicWall SMA 1000 — Detector de exposición CVE-2026-83548 / CVE-2026-83549 Un script de detección no intrusivo para los dispositivos de la serie SonicWall Secure Mobile Access SMA 1000 afectados por CVE-2026-83548 SSRF previo a la autenticación en la interfaz Work Place, CVSS 10.0 y CVE-2026-835...

cve-2024-0012-poc

cve-2024-0012-poc CVE-2024-0012 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS software. This vulnerability allows an unauthenticated attacker to access the management web interface over the network, obtain PAN-OS administrator privileges, and thereby perform administrativ...

gitrob

Gitrob：将开源融入OSINT Gitrob是一款帮助发现推送到GitHub公开仓库中潜在敏感文件的工具。Gitrob会以可配置的深度克隆属于某个用户或组织的仓库，遍历提交历史，并标记与潜在敏感文件签名匹配的文件。发现结果将通过Web界面呈现，方便浏览和分析。 使用方法 root@kitploit: gitrob 选项 目标 目标2 ... 目标N 选项 root@kitploit: -bind-address string Web服务器绑定地址（默认 "127.0.0.1"） -commit-depth int 处理的仓库提交数量（默认 500） -debug 输出调试信息...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

btlejuice

BtleJuice Framework 介绍 BtleJuice 是一个完整的框架，用于对蓝牙智能设备（也称为低功耗蓝牙）执行中间人攻击。它由以下部分组成： 一个拦截核心 一个拦截代理 一个专用 Web 界面 Python 和 Node.js 绑定 如何安装 BtleJuice？ 安装 BtleJuice 非常简单。首先，确保你的系统使用的是较新版本的 Node.js =4.3.2 和 npm 。然后，确保安装所有必需的依赖项： Ubuntu/Debian/Raspbian root@kitploit: sudo apt-get install bluetooth bluez...

malice

malice Malice's mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

Masterchef

Masterchef Framework 👨‍🍳 最美味的渗透测试工具 👩‍🍳 开发中... Masterchef 是一款图形化漏洞利用与验证工具，通过创建美味的配方，帮助你分解渗透测试工作流程。 对于想要入门进攻性网络安全领域的人来说，这是一款理想的工具。可视化、直观、可定制，并且包含大量美味配方！ 太美味了！ 🍱 目录 🥇 特别鸣谢 🍅 免责声明 🥤 下载与安装 🥡 编译版本 🥣 Go 🐟 Docker 🍲 源码 🍴 快速开始 📚 示例 🥇 特别鸣谢 MisterChef 由作者创作，并以最终学位项目的形式，在 维戈大学 （University of Vigo）的学术验证下完成。 🍅...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

adbsploit

ADBSploit Una herramienta basada en Python para explotar y gestionar dispositivos Android a través de ADB Actualmente en desarrollo Screenrecord Stream Screenrecord Extraer Contactos Extraer SMS Extraer chats de aplicaciones de mensajería WhatsApp/Telegram/Line Instalar Backdoor Y más...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

CVE-2024-38063-Exploit-Refactoring

CVE-2024-38063 Exploit Advanced exploitation tool with precision error handling and DO-176C compliant execution. Overview This is a specialized security assessment tool for testing Windows IPv6 vulnerability mitigation on target systems. Includes automated network interface detection, packet...

PhoenixC2

PhoenixC2 一个用纯 Python3 编写的开源 C2 框架。 免责声明 本项目仍处于开发 阶段，尚未 准备好用于专业用途。 作者及其关联方不认可或纵容任何使用本框架进行的非法或恶意行为。本框架的使用者全权负责确保其使用符合所有适用法律法规。 功能 现代 Web 界面 专为团队和组织设计（多用户） 可定制（插件、模块、工具包） 易于使用 易于扩展...

gdbfuzz

GDBFuzz：调试器驱动的模糊测试 本文是论文《使用调试器接口模糊测试嵌入式系统》的配套代码。 论文预印本可在此处获取：https://publications.cispa.saarland/3950/。代码允许用户 复现并扩展论文中报告的结果。在报告、复现或扩展结果时，请引用上述论文。 文件夹结构 root@kitploit: . ├── benchmark 用于构建 Google 模糊测试套件并运行实验的脚本 ├── dependencies 包含安装 GDBFuzz 依赖项的 Makefile ├── evaluation 论文中呈现的原始实验数据 ├──...

SECMON

SECMON - 信息安全监控工具 -red 描述 SECMON 是一个基于 Web 的工具 ，用于自动化信息安全监控 和漏洞管理 ，并配有 Web 界面。 演示版请点击此处查看。Discord 频道请点击此处加入。 功能 当新 CVE 发布 且涉及您的产品列表时，发送邮件告警 当“网络安全”新闻发布 时发送邮件告警 ：新威胁、近期攻击、事件等 可视化您 IT 基础设施中存在的高安全风险产品 按日期范围下载 CVE Excel 报告 显示热门网络安全主题 （轻量级网络态势 ） 日志易于集成到 SIEM 中 （已在 Splunk 和 Graylog 上验证） 查看最新 CVE...

The vulnerability of the REST API web interface component based on artificial intelligence allows a perpetrator to trigger a service failure.

The vulnerability of the REST API web interface based on artificial intelligence involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...