Lucene search
+L

3514 matches found

Kitploit
Kitploit
added 2026/09/09 1:20 p.m.7 views

CVE-2019-1619

CVE-2019-1619 Powershell Script to build the token needed for Authentication Bypass. I was in a pentest and found a server vulnerable to CVE-2019-1619. I couldn't leverage the metasploit module due to restricted access so I exploited it manually. I created this script to automate the building of...

9.8CVSS8.2AI score0.82815EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/09 1:09 p.m.8 views

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Metasploit Module This module sends a specially crafted packet to Port 50000/UDP could cause a denial of service of the...

7.8CVSS7.5AI score0.74497EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/09 7:37 a.m.6 views

patch-manual-CVE-2025-26465-e-CVE-2025-26466

🛡️ Mitigación Manual - OpenSSH CVE-2025-26465 & CVE-2025-26466 🔍 Sobre el Script Este script aplica mitigaciones manuales para los problemas de seguridad en OpenSSH , sin la necesidad de actualización inmediata. 🚨 CVE-2025-26465 Elimina VerifyHostKeyDNS para evitar la interceptación de conexiones...

6.8CVSS7.3AI score0.39845EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/09 3:02 a.m.5 views

debian11-dirty_pipe-patcher

debian11-dirtypipe-patcher This Project is still under development Since the Debian 11 still comes with the kernel version 5.10, which is vulnerable to the Dirty Pipe Vulnerability, this scirpt is made for manually compile and install the kernel version 5.18 which is not vulnerable. Usage 1. Clon...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 7:41 p.m.4 views

thinkphp5.0.1-automatic-getshell

thinkphp5.0.1-automatic-getshell thinkphp5.0.1 automatic getshell script Solves some minor issues encountered with thinkphp5.0.1, saving you the hassle of manual reproduction by building a dedicated script from scratch...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 3:42 p.m.4 views

CVE-2026-40369

Note NTOKernelBase in exp.cpp needs to be set manually...

7.8CVSS7.2AI score0.04725EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 5:53 a.m.4 views

ManualRsrcDataFetching

ManualRsrcDataFetching: one function to replace FindResource & LoadResource & LockResource & SizeofResource windows apis. Note: Payload.ico is a x64 calc shellcode...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 2:49 p.m.12 views

wappalyzergo

Wappalyzergo Wappalyzer 技术检测库的高性能 Go 移植版本。受 Webanalyze 启发。 数据来源于: https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer 功能特性 使用非常简单方便,代码库干净整洁。 标准化正则表达式 + 自动更新的 wappalyzer 指纹数据库。 针对性能进行优化:手动解析 HTML 以获得最佳速度。 使用 go install 安装 root@kitploit: go install -v...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/06 3:22 p.m.5 views

cq

cq Code Query, una herramienta universal de escaneo de seguridad de código. CQ escanea código en busca de vulnerabilidades de seguridad y otros elementos de interés para revisores de código centrados en seguridad. Genera archivos de texto que contienen referencias a los problemas encontrados, en ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 9:55 p.m.5 views

BypassAV

BypassAV This map lists the essential techniques to bypass anti-virus and EDR as a reminder: it is highly recommended to read the articles related to manual techniques rather than using open source tools which are more likely to be suspected by the anti-virus because of IOSs Preview Edit the...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/04 6:55 a.m.4 views

DInvoke_rs

DInvokers Rust port of Dinvoke. DInvokers may be used for many purposes such as PE parsing, dynamic exported functions resolution, dynamically loading PE plugins at runtime, API hooks evasion and more. Features: Dynamically resolve and invoke undocumented Windows APIs from Rust. Primitives allowi...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/04 6:42 a.m.7 views

AtlasLdr

Atlas is a reflective x64 loader that has the following features: Features Retrieve of DLL and PE from a remote server Manual Mapping on a remote process Erase of the DOS Header and NTHeader Magic bytes Position independent code Use of indirect Syscalls ZwOpenProcess ZwAllocateVirtualMemory...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 3:34 a.m.108 views

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/04 2:58 a.m.67 views

domain-protect

OWASP Domain Protect - moved OWASP Domain Protect has moved to terraform-aws-domain-protect OWASP Domain Protect is now available as a Terraform Module See OWASP Domain Protect documentation including options for migration...

5.5AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 11:58 p.m.5 views

heartthreader

Heartthreader Because manual vulnerability testing is tiresome. Just add some magic multithreading sauce!...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 9:11 p.m.5 views

mongobleedburp

MongoBleed Burp Extension Burp Suite extension to detect CVE-2025-14847 MongoBleed via manual leak tests from a dedicated UI tab. Repository: https://github.com/j0lt-github/mongobleedburp Current version: 1.1.0 Features Manual test UI tab with host/port and min/max offsets Temporary-file leak...

8.7CVSS7.7AI score0.83218EPSS
SaveExploits39References1
Kitploit
Kitploit
added 2026/09/03 9:09 p.m.8 views

cq

cq Code Query, a universal code security scanning tool. CQ scans code for security vulnerabilities and other items of interest to security-focussed code reviewers. It outputs text files containing references to issues found, into an output directory. These output files can then be reviewed,...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2026/09/01 7:46 p.m.13 views

EUVD-2026-69437

Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to make limited unauthorized modifications to the underlying operating system and disrupt the...

8.2CVSS5.9AI score0.00272EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.12 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: For clk: imx: clk-imx8mp, the error handling in imx8mpclocksprobe has been improved. ofiomap and kzalloc have been replaced with devmofiomap and devmkzalloc. This allows for automatic release of the associated memory when the...

5.5AI score0.00205EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net: dsa: lantiqgswip: Do not use devres for mdiobus As explained in the commits: 74b6d7d13307 “net: dsa: realtek: Register the MDIO bus using devres” 5135e96a3dd2 “net: dsa: Do not allocate the slavemiibus using devres” The...

5.5CVSS5.3AI score0.00271EPSS
SaveExploits0References2
Rows per page
Query Builder