CVE-2017-12149

CVE-2017-12149 Coded by 1337g Usage: CVE-2017-12149.py http://targetip:port/ JBOSS RCE I have no idea why it doesnot work with https...

QVD-2024-26473

QVD-2024-26473 QVD-2024-26473 && CVE-2021-29442 FOFA Search: https://fofa.info/result?qbase64=YXBwPSJOYWNvcyI%3D ZoomEye Search: https://www.zoomeye.org/searchResult?q=app%3A%22Alibaba%20Nacos%22...

Admidio-3.2.8-CSRF-POC-by-Provensec-llc

Admidio-3.2.8-CSRF-POC-by-Provensec-llc Admidio 3.2.8 Cross-Site Request Forgery Assigned CVE Number: CVE-2017-8382 https://www.exploit-db.com/exploits/42005/ http://en.0day.today/exploit/27771...

CVE-2025-30208-Series

CVE-2025-30208 & CVE-2025-31125 & CVE-2025-31486 1. Resumen de vulnerabilidades CVE-2025-30208, CVE-2025-31125 y CVE-2025-31486 son vulnerabilidades de lectura arbitraria de archivos en el servidor de desarrollo de Vite. Estas vulnerabilidades permiten a un atacante eludir los controles de acceso...

CVE-2024-52317

🚨🚨CVE-2024-52317🚨🚨 CVE-2024-52317 - Apache Tomcat HTTP/2 Data Leakage Vulnerability Overview CVE-2024-52317 is a vulnerability affecting Apache Tomcat's HTTP/2 implementation. The issue arises due to improper recycling of HTTP/2 request and response resources, potentially leading to data leakage...

duct

Pown Duct Essential tool for finding blind injection attacks using DNS side-channels. Credits This tool is part of secapps.com open-source initiative. root@kitploit: / | / | /\ | \ / | \ \ | / | / /\ \ |/// \| || |/ https://secapps.com NB : This tool is taking advantage of http://requestbin.net...

misp-galaxy

misp-galaxy MISP galaxy es un método sencillo para expresar un objeto grande llamado cluster que puede adjuntarse a eventos o atributos de MISP. Un cluster puede estar compuesto por uno o más elementos. Los elementos se expresan como pares clave-valor. Existe una base de conocimiento predetermina...

rdesktop

IMPORTANT: rdesktop is no longer maintained Please, beware that this project is no longer maintained and hadn't received a patch in many years. There are reported security vulnerabilities, yet those haven't been reviewed. Use with caution and use it at your own risk. rdesktop - A Remote Desktop...

rdesktop

IMPORTANTE: rdesktop ya no recibe mantenimiento Por favor, tenga en cuenta que este proyecto ya no recibe mantenimiento y no ha recibido parches en muchos años. Se han reportado vulnerabilidades de seguridad, pero estas no han sido revisadas. Úselo con precaución y bajo su propio riesgo. rdesktop...

linkedin2username

linkedin2username OSINT 工具：从 LinkedIn 上的公司生成用户名列表。 这是一个纯网页爬虫，无需 API 密钥。您使用有效的 LinkedIn 用户名和密码登录，它将为您指定的公司的所有员工生成多个可能的用户名格式列表。 以下是您将获得的内容： first.last.txt: 用户名如 Joe.Schmoe f.last.txt: 用户名如 J.Schmoe flast.txt: 用户名如 JSchmoe firstl.txt: 用户名如 JoeS first.txt 用户名如 Joe lastf.txt 用户名如 SchmoeJ rawnames.txt:...

linkedin2username

linkedin2username OSINT Tool: Generate username lists from companies on LinkedIn. This is a pure web-scraper, no API key required. You use your valid LinkedIn username and password to login, it will create several lists of possible username formats for all employees of a company you point it at...

CVE-2014-6287

Poc exploitbash script bash.webm About the exploit You can get reverse shell with .sh file in Linux You can get reverse shell with .py file in Windows and Linux in windows, you need to install netcat You must specify the url example: http://target.com/ using for .py: python exploit.py using for...

resterm

Resterm A terminal-native API client and workbench for REST, GraphQL, gRPC, WebSocket and SSE. Resterm is an API-as-code workbench - or, in more familiar terms, an API client - built around plain .http and .rest files that you can diff, review and version. It combines interactive request editing...

test_for6387

cve-2024-6387-poc...

cve-2021-21980-mock-server

Clippy of the Dead - entorno de pruebas para CVE-2021-21980 y plantilla de Nuclei Este repositorio contiene una plantilla de Nuclei de alta confianza para detectar CVE-2021-21980 path traversal de vSphere Web Client y un pequeño entorno simulado mock que reproduce el comportamiento vulnerable par...

CVE-2022-2414

EN GenXMLExternalEntityExploit is a PoC script for demonstrating an XML External Entity XXE vulnerability exploitation. The script leverages XML payloads to read sensitive files from a target server. This can be useful for security testing, penetration testing, or educational purposes. Features...

Computer-Security-Equifax-2017

Repositorio educativo que demuestra vulnerabilidades reales de software: Apache Struts2 CVE-2017-5638 RCE, exfiltración de datos, cifrado débil y estrategias de mitigación saneamiento, monitorización y mejores prácticas de criptografía. Demostración de red team vs. blue team sobre fallos de...

CVE-2021-34371.jar

CVE-2021-34371.jar CVE-2021-34371.jar from https://github.com/vulhub/vulhub/tree/master/neo4j/CVE-2021-34371/rhinogadget USE EXP...

Rainfall

Rainfall Rainfall is an iso challenge slightly more complex than Snow Crash. You will have to dive deep into reverse engineering, learn to reconstruct a code, and understand it to detect faults. Will you reach the last level? Description Rainfall is a project from the cybersecurity branch of 42,...

ADFSpray

ADFSpray ADFSpray is a python3 tool to perform password spray attack against Microsoft ADFS. ALWAYS VERIFY THE LOCKOUT POLICY TO PREVENT LOCKING USERS. How to use it First, install the needed dependencies: root@kitploit: pip3 install -r requirements.txt Run the tool with the needed flags:...