knockbleed

knockbleed Test di massa di CVE-2014-0160 contro i sottodomini Requisiti: Knock Subdomain Scan di Gianni 'guelfoweb' Amato - https://github.com/guelfoweb/knock check-ssl-heartbleed di Steffen Ullrich - https://github.com/noxxi/p5-scripts perl python Uso: root@kitploit: sid@sweethome:$...

Drupalgeddon-Mass-Exploiter

Drupalgeddon-Mass-Exploiter Massen-Exploiter für CVE-2018-7600 und CVE-2018-7602 Verwendung: python3 mass.py list output workers proxydefault:none exploitnumber exploitnumber: 7=CVE-2018-7600 8=CVE-2018-7602...

Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner

Apache-Struts-CVE-2017-5638-RCE-Mass-Scanner...

Scan_CVE-2025-55182

CVE-2025-55182 Attacco Payload di Massa React2Shell Uno script exploit RCE di massa modificato per CVE-2025-55182 React2Shell che prende di mira applicazioni Next.js. Questo strumento è una modifica dello script PoC originale di pax-k. Mentre lo script originale colpisce un singolo host, questa...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspiriert von https://github.com/dreadlocked/Drupalgeddon2 Unterstützt: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, Angriff auf account/mail & postrender Parameter, unter Verwendung der PHP-Funktion...

Mass-CVE-2023-28121-kdoec

CVE-2023-28121 WooCommerce Payments 5.6.2 - Escalation dei privilegi non autenticata Aggiunta in massa utenti amministratori Come usare Questo script usa Python3. Installa i requisiti pip install -r requirements.txt Riferimenti https://wpscan.com/vulnerability/0f78a245-866c-462e-bd23-43dfadb57072...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack Questi sono solo alcuni script che puoi usare per rilevare e sfruttare la vulnerabilità Apache Struts CVE-2017-5638 C'è un MassScanner e un Exploiter. Puoi usare lo scanner per eseguire una scansione di massa di un elenco di URL e poi sfruttarli con l'Exploiter...

Kcfinder-Mass-Scanner

Kcfinder-Mass-Scanner Python 2.7 Come si usa? Installa Python 2.7 Scarica qui python file.py...

vbull

vBulletin Mass Exploit CVE-2019-16759 Alerta! Esta ferramenta foi feita para testes de penetração na CVE-2019-16759. Não nos responsabilizamos por erros cometidos pelos usuários desta ferramenta. Instalação e uso: $ pkg install git python2 $ pip2 install requests $ git clone...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

CVE-2020-7961-Mass

CVE-2020-7961-Mass Compra Password 10$ Email A [email protected]...

WordPressMassExploiter

WordPressMassExploiter WordPress CMS के लिए CVE-2015-1579 का मास एक्सप्लॉइटर यह मास एक्सप्लॉइटर CVE-2015-1579 पर आधारित है, जिसे CLAUDIO VIVIANI द्वारा खोजा गया है https://www.exploit-db.com/exploits/36554/ यह कैसे काम करता है: 1 - मैं Google पर खोज करने के लिए Selenium Framework का उपयोग करता हू...

CVE-2026-55040-Mass-Exploit

Exploit di Bypass del Token JWT per Microsoft SharePoint CVE-2026-55040, CVSS 9.1 Forgia token di autenticazione utilizzando tre vettori di attacco: Algoritmo "none" salta la verifica della firma Segreti HS256 deboli con supporto per attacco a forza bruta tramite dizionario Sostituzione della...

cve-2025-22294

CVE-2025-2294 – Local File Inclusion LFI nel plugin WordPress Kubio AI Page Builder Link al write-up dettagliato Link al deploy Link all'exploit Link ai file per la verifica di massa: Modello per la verifica attiva Modello per la verifica passiva...

CVE-2022-45265

CVE-2022-45265 Nel Sanitization Management System 1.0 distribuito da sourcecodester.com root@kitploit: curl --location --request POST 'http://localhost/php-sms/classes/Users.php?f=save' \ --form 'id="1"' \ --form 'firstname="HACKED"' \ --form 'lastname="Administrator"' \ --form 'username="admin"'...

yLog4j

yLog4j Dies ist das @PortSwigger Burp-Plugin von Y-Sec für die Log4j CVE-2021-44228 Schwachstelle. Der Fokus von yLog4j liegt auf der Unterstützung von Massen-Scans der Log4j-Schwachstelle CVE-2021-44228. Details und Hintergründe finden Sie in unserem Blog-Beitrag. Anforderungen PortSwigger Burp...

CVE-2021-43798-mass_scanner

Grafana CVE 2021-43798 Vulnerabilità di lettura arbitraria dei file non autorizzata in Grafana CVE-2021-43798 dipendenze root@kitploit: python3 -m pip install -r requirements.txt oppure pipenv install -r requirements.txt Dorks Dorks Shodan | Google Google Dorks Shodan Dorks Utilizzo Target senza ...

CVE-2023-7028

GitLab CVE-2023-7028 POC root@kitploit: [email protected]&[email protected] Forschungsinstitut mit Sitz in Chengdu – Einstellung von Cybersicherheitsforschern privat...

CVE-2026-77017 Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment

The Workeera WordPress plugin before 1.0.6 does not restrict which profile values a candidate may submit, nor confine the stored file location to an allowed directory before serving it, allowing users with a role as low as subscriber to read arbitrary files on the server, including its...

CVE-2026-77018

The Workeera WordPress plugin (Remote Tech Job Board) before 1.0.6 allows users with a subscriber role to submit unrestricted profile values, which the plugin writes as an unvalidated file into a publicly reachable directory. This mass-assignment flaw enables arbitrary file upload and, consequent...