42 matches found
JQShell
JQShell Una versione armata di CVE-2018-9206. Dichiarazione di non responsabilità Usare questo tool contro server che non controlli è illegale nella maggior parte dei paesi. L'autore declina ogni responsabilità per le azioni di chi utilizza questo software per scopi illegali. Questo software è...
CVE-2025-5349-Scanner
CVE-2025-5349 Schwachstellen-Scanner Verwendung root@kitploit: python3 scanner.py 10.0.0.5 10.0.0.6 -p 80 python3 scanner.py netscaler.local --https -p 443...
CVE-2005-1794Scanner
CVE-2005-1794Scanner Kann verwendet werden, um mehrere Ziele zu scannen, die anfällig für CVE-2005-1794 sind. Dank an @daveysec und sein ursprüngliches Skript, verfügbar unter https://github.com/RhinoSecurityLabs/Security-Research/blob/master/tools/python/CVE-2005-1794-check.py Haftungsausschluss...
log4j-fuzzer
log4j-fuzzer Per Singolo Target root@kitploit: chmod +x log4j Dopo Quel Comando Inserisci Semplicemente Il Tuo Target root@kitploit: ./log4j YOURTARGETURL YOURREMOTESERVER Per Target Multipli Raccogli Tutti i Domini, Sottodomini, Directory in una lista Dopo Di Che Esegui Semplicemente Questo...
cve2025-20265
cve2025-20265 Script Python sicuro per rilevare istanze Cisco FMC potenzialmente vulnerabili a CVE-2025-20265. Utilizza l'API ufficiale FMC per verificare la versione, supporta scansioni singole/multi-target e include un marcatore PoC locale innocuo. Checker di vulnerabilità Cisco FMC...
CVE-2022-29464
CVE-2022-29464 WSO2 RCE CVE-2022-29464 Utilizzo • Questo exploit può essere eseguito solo per target multipli python3 exploit.py --file urls.txt Riferimenti https://github.com/hakivvi/CVE-2022-29464...
CVE-2023-4596-OpenSSH-Multi-Checker
CVE-2024-6387-OpenSSH-Multi-Checker Das CVE-2024-6387-checker.sh Skript ist ein Werkzeug, das entwickelt wurde, um mehrere Ziele IPs oder Hostnamen gleichzeitig auf die Schwachstelle CVE-2024-6387 zu überprüfen. Dieses Skript führt eine lokale OpenSSH-Versionsprüfung durch, scannt entfernte Serve...
AutoDirbuster
root@kitploit: / | / / / / / / / / /| |/ / / / / / / / / / / / / / / / / / / / / // / // // / // / / / / // / // // / / // |,////// /./,///// Esegui e salva automaticamente scansioni ffuf per più IP Contenuti Esecuzione Rapida FAQ Perché? Qual è l'uso consigliato? Di quali dati ha...
mzap
mzap mzap मल्टी-टारगेट ZAP स्कैनिंग के लिए एक Crystal CLI है। यह एक या अधिक ZAP API होस्ट पर लक्ष्यों को वितरित करता है, वैकल्पिक प्रतीक्षा मोड का समर्थन करता है, और रिपोर्ट निर्यात कर सकता है। विशेषताएँ स्कैन कमांड: spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan API परिभाषा आयात:...
pocsuite3
pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...
CVE-2026-74889
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
CVE-2026-74889 openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
opensslencrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predictable key derivation with identical inputs to weaken cryptographic security against multi-target attacks...
CVE-2026-74889
The openssl_encrypt library (PHP package) before version 1.4.0 uses HKDF with no salt and a static info parameter in its key normalization functions, producing deterministic, low-entropy derived keys. Attackers with identical inputs can predict derived keys, weakening cryptographic security again...
Exploit for CVE-2026-64638
🔍 @Mr-LeonardoGomes 💀 XSS2Shell-CVE-2026-64638...
Exploit for CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...
📄 HTTP/2 Multi-Server HPACK Exhaustion
This code implements a multi-target HTTP/2 resource exhaustion framework designed to stress or overwhelm server implementations through protocol-level amplification techniques. It includes server-specific payload generation for multiple platforms, automated connection orchestration, stream scalin...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 — WHM/cPanel Kimlik Doğrulama Atlama Araştırma...
Malicious code in mbt (npm)
Supply chain compromise of legitimate SAP packages published by threat actor "[email protected]" impersonating SAP toolchain maintainers. All four compromised packages share the same fingerprint: setup.mjs 4.4 KB and execution.js 11.1 MB bundled in the tarball, with a preinstall hook of "node...