Lucene search
+L

21119 matches found

Kitploit
Kitploit
added 2026/09/11 2:37 a.m.8 views

rwsploit

Oracle Reports rwservlet Scanner ⚠️ For authorized use only. Only run this tool against systems you own or have explicit written permission to test. Unauthorized use is illegal. A focused exploitation scanner for Oracle Reports Server rwservlet targeting CVE-2012-3152 and CVE-2012-3153 — affecting...

9.1CVSS7.4AI score0.98793EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/11 2:35 a.m.5 views

imagemagick-lfi-poc

ImageMagick LFI PoC CVE-2022-44268 The researchers at MetabaseQ discovered CVE-2022-44268, i.e. ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image e.g., for resize, the resulting image could have embedded the content of an arbitrary remote file if the...

6.5CVSS5.8AI score0.89855EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/11 2:00 a.m.9 views

f5scan

f5scan F5 BIG IP Scanner for CVE-2020-5902 by bt0 More information about the Vulnerability: https://support.f5.com/csp/article/K52145254?sf235665517=1 Requirements: python3+ shodan colorama urlopen pyOpenSSL $ pip3 install -r requirements Options root@kitploit: -h, --help show this help message a...

10CVSS7.6AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/11 1:39 a.m.5 views

CVE-2019-5418

CVE-2019-5418: Ruby on Rails Path Traversal & Arbitrary File Read This project is an environment for practicing and reproducing the local file inclusion vulnerability CVE-2019-5418 in Ruby on Rails. This vulnerability allows reading arbitrary files on the server through path traversal via the...

7.5CVSS7AI score0.98507EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/11 1:29 a.m.6 views

Lfi-Space

🪐 LFI-SPACE TOOL 🪐 Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💫 How to use 💫 👇...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 1:18 a.m.7 views

CVE-2024-56331

CVE-2024-56331 Uptime-Kuma : Local File Inclusion LFI via Improper URL Handling in Real-Browser monitor Summary An Improper URL Handling Vulnerability allows an attacker to access sensitive local files on the server by exploiting the file:/// protocol. This vulnerability is triggered via the...

6.8CVSS5.8AI score0.01829EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 1:15 a.m.9 views

INPGer

INPGer | CVE-2022-4063 - InPost Gallery Automatic Mass Tool for checking vulnerability in CVE-2022-4063 - InPost Gallery install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh...

9.8CVSS8.1AI score0.09519EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 11:32 p.m.6 views

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 11:21 p.m.6 views

CVE-2025-11973

Trigger: Read /etc/passwd via file:// and exfiltrate to uploads root@kitploit: curl -sS -A "$UA" -X POST "$BASE/?kdsflag=post" \ --data-urlencode "kdspassword=$SECRET" \ --data-urlencode "posttitle=sub1-lfi" \ --data-urlencode "kdsfeatureurl=file:///etc/passwd" Retrieve the exfiltrated file Compu...

4.9CVSS5.9AI score0.0032EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 10:04 p.m.5 views

CVE-2020-5902-Scanner

CVE-2020-5902-Scanner Automated F5 Big IP Remote Code Execution CVE-2020-5902 Scanner Written In Python 3 Vulnerability Description F5 released a Critical Remote Code Execution vulnerability CVE-2020-5902 on 30th June 2020 that affects several versions of Big IP. Attacker can easily exploit RCE &...

10CVSS7.5AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/10 9:10 p.m.9 views

LFISuite

LFI Suite What is LFI Suite? LFI Suite is a totally automatic tool able to scan and exploit Local File Inclusion vulnerabilities using many different methods of attack, listed in the section Features. Features Works with Windows, Linux and OS X Automatic Configuration Automatic Update Provides 8...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 9:08 p.m.5 views

CVE-2022-47615

CVE-2022-47615 LearnPress Plugin 4.2.0 - Unauthenticated LFI Description Description The plugin does not validate various parameters in the lp/v1/courses/archive-course REST endpoints before using them in include statement, which could lead to LFI issues. How to use root@kitploit: $ python3...

9.8CVSS8.2AI score0.05063EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 8:10 p.m.297 views

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

6.5AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/10 7:43 p.m.5 views

LFiFreak

LFI Freak Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 What is this all about? A unique tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Dependencies BeautifulSoup Disclaimer...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 7:41 p.m.6 views

Elastix-2.2.0-CVE-2012-4869

Elastix 2.2.0 Local File Inclusion Exploit - CVE-2012-4869 Description This script exploits a Local File Inclusion LFI vulnerability in Elastix 2.2.0 , allowing remote code execution RCE by injecting commands via the callmepage.php endpoint. The exploit is based on CVE-2012-4869. Features Bypasse...

7.5CVSS6.3AI score0.70252EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/10 7:29 p.m.8 views

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability LFI in FHEM 6.0 allows an attacker to include a file, it can lead to sensitive information disclosure. CVE-2020-19360 https://vulners.com/cve/CVE-2020-19360 PoC To exploit vulnerability, someone could use...

7.5CVSS7.5AI score0.17278EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 6:57 p.m.9 views

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

10CVSS6AI score0.54677EPSS
SaveExploits49
Kitploit
Kitploit
added 2026/09/10 6:55 p.m.7 views

gitlab-12.9.0-file-read

The warn For demonstration purpose and ethical hacking only. The what A wanted to be better script than what can be found on exploit-db about the authenticated arbitrary read file on GitLab v12.9.0 CVE-2020-10977 The how 1. Meet the dependency you probably already have the rest pip3 install...

5.5CVSS6.1AI score0.42741EPSS
SaveExploits10References1
Kitploit
Kitploit
added 2026/09/10 6:39 p.m.6 views

LFI-FINDER

🍀 LFI FINDER TOOL 🍀 Written by TMRSWRR Version 1.0.0 Instagram: TMRSWRR 📹 How to use 📹 Click on the image... LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion LFI vulnerabilities. Local File Inclusion is a common security vulnerability that allow...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 5:50 p.m.9 views

LFI-to-RCE-SE-Suite-2.0

Remote Code Execution in SoftExpert Excellence Suite 2.0 - CVE-2023-30330 Authenticated Local File Inclusion to Remote Code Execution on SoftExpert Excellence Suite EQM. CVE-2023-30330 SE Suite 2.x versions before 2.1.3 Tested on versions: 2.0.15.31 and 2.0.15.115 LFI PoC...

9.8CVSS8.3AI score0.05877EPSS
SaveExploits5References1
Rows per page
Query Builder