Lucene search
+L

62213 matches found

Kitploit
Kitploit
added 2026/09/02 9:31 a.m.5 views

CVE-2013-4710-WebView-RCE-Vulnerability

CVE-2013-4710-WebView-RCE-Vulnerability Vulnerability Description A lot of the time we use WebView to display a Webpage,for example many applications in order to achieve the server control, many results page is Webpage, rather than the local implementation, which has many advantages, such as...

9.3CVSS6.1AI score0.42623EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/02 9:25 a.m.3 views

Pinkerton

🕵️ Pinkerton Investigating JavaScript files since 1850 Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded passwords, or related data. ⚡ Getting started A quick guide on how to install and use Pinkerton. 1. Clone the repository with:...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 9:03 a.m.4 views

pphack

pphack Advanced Client-Side Prototype Pollution Scanner Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Install 📡 Using Go root@kitploit:...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 8:48 a.m.5 views

mantra

「🔑」 About Mantra The tool in question was created in Go and its main objective is to search for API keys in JavaScript files and HTML pages. It works by checking the source code of web pages and script files for strings that are identical or similar to API keys. These keys are often used for...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 7:36 a.m.88 views

r2frida

r2frida Radare2 and Frida better together Description Self-contained plugin for radare2 that ships frida and allows to instrument local or remote processes using r2 commands instead but not limited to Frida scripts. The radare project provides a complete toolchain for reverse engineering, it's...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 7:36 a.m.553 views

fuzzilli

Fuzzilli A coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language "FuzzIL" which can be mutated and translated to JavaScript. Usage The basic steps to use this fuzzer are: 1. Download the source code for one of the supported JavaScript engines. See the...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/02 7:23 a.m.31 views

cumulus

Application Weakness Monitoring Software What's Cumulus Cumulus is a service that helps you monitor and fix security weakness in realtime. The issues will be reported on web dashboard. It's very simple and powerful...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 7:16 a.m.5 views

CVE-2023-29489

CVE-2023-29489 The security vulnerability is recorded in the Common Vulnerabilities and Exposures CVE system. Specifically, this vulnerability is related to cPanel, a popular hosting management software. This flaw allows for cross-site scripting XSS attacks through specially crafted requests."...

6.1CVSS6.6AI score0.65533EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/02 7:07 a.m.70 views

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

6.5AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/02 7:01 a.m.6 views

jsleak

Description I was developing jsleak during most of my free time for my own need.It is easy-to-use command-line tool designed to uncover secrets and links in JavaScript files or source code. The jsleak was inspired by Linkfinder and regexes are collected from multiple sources. Features: Discover...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/02 6:43 a.m.5 views

JShell

JShell JShell - Get a JavaScript shell with XSS. Usages Run shell.py and JShell will automatically try to detect your IP address, default LPORT is 33. As you can see the payload has been generated and now all you have to do is to deliver this payload to the victim. As soon as you do that, you wil...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 6:42 a.m.5 views

JS-Tap

JS-Tap v3.0.4 This tool is intended to be used on systems you are authorized to attack and for legal and educational purposes. Do not use this tool for illegal purposes, or I will be very angry in your general direction. Changelogs Major changes are documented in the project Announcements:...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 6:38 a.m.2 views

retire.js

Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...

5.9AI score
SaveExploits0References6
CVE
CVE
added 2026/09/02 6:37 a.m.10 views

CVE-2026-3850

The Divi theme for WordPress (versions up to and including 4.27.6 ) is vulnerable to a Stored Cross-Site Scripting (XSS) via the redirect_url parameter of the et_pb_contact_form shortcode. The root cause is twofold: the redirect_url attribute is sanitized with esc_attr() instead of esc_url() befo...

6.4CVSS6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/02 6:35 a.m.3 views

dns-rebind-toolkit

DNS Rebind Toolkit Demo | Security Advisory | Included Payloads | FAQ DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick. DNS Rebind Toolkit is a frontend JavaScript framewor...

5.9AI score
SaveExploits0References9
CVE
CVE
added 2026/09/02 6:00 a.m.4 views

CVE-2026-19719

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 contains a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is a failure to escape the post title before outputting it in an inline JavaScript event handler , enabling users with the Contributor rol...

5.8AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 6:00 a.m.3 views

EUVD-2026-69834

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with...

5.8AI score
SaveExploits0References1
CVE
CVE
added 2026/09/02 6:00 a.m.5 views

CVE-2026-19723

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is improper escaping of a value taken from an incoming request before it is output in an inline JavaScript event handler. Per the CVELIST reco...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 5:14 a.m.6 views

box-js

box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: root@kitploit: npm install box-js --global box-js is also available: as a Cuckoo module see the integrations directory and Nwinternights/CuckooBoxjs; as a Dockerfile see integrations/README.md; as a...

5.8AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/02 4:59 a.m.72 views

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

5.6AI score
SaveExploits0References1
Rows per page
Query Builder