CVE-2019-17137

CVE-2019-17137 Información CVE: https://vulners.com/cve/CVE-2019-17137 POC root@kitploit: GET /index.htm%00currentsetting.htm HTTP/1.1 Host: 192.168.1.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Accept: / Accept-Language:...

ciphertest

cipherTest.sh by Patrick Bogen cipherTest.sh is a "better" SSL cipher checker in that it uses gnutls, which has support for many more configurations than openssl. It tests potentially 3,200 different configurations but does some pre-optimization so that it minimizes "failed" checks. It relies on...

HKddos

HKddos First tool in ARABIC language, its ddos attack tool based on hammer. $ cd HKddos $ python3 HK-ddos.py Photos...

trivy-java-db

trivy-java-db Overview trivy-java-db builds a SQLite database from maven-index repository data, storing ArtifactID, GroupID, Version and sha1 for jar files. The DB is used in Trivy to discover information about jars without GAV inside them. Update interval Every day at 00:00 Download the java...

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob — a SOCKS5 proxy that tunnels all traffic through Azu...

GoMapEnum

Este proyecto fue escrito originalmente para aprender Golang y explorar las diferentes formas que he encontrado durante pruebas de penetración para enumerar o forzar brutamente usuarios, y unificarlas en una sola herramienta. Si encuentras algún error, no dudes en crear un issue y haré mi mejor...

GitFive

🐍 ¡Ahora compatible con Python 3.13! Descripción GitFive es una herramienta OSINT para investigar perfiles de GitHub. Características principales : Historial de nombres de usuario / nombres Variaciones de nombres de usuario / nombres Dirección de correo electrónico a cuenta de GitHub Encontrar...

nextjs-CVE-2025-29927-hunter

About A simple Python tool that automates Shodan searches and filters target IPs/domains to identify assets potentially vulnerable to CVE-2025-29927 in Next.js deployments. Usage Extract both IPs and domains root@kitploit: python3 nextjs-CVE-2025-29927-hunter.py -t target.com Only extract domains...

Apache-spark-CVE-2022-33891

Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Síguenos Vulnmachines Platform YouTube Twitter...

CVE-2018-9995

Tool show DVR Credentiales root@kitploit: Exploit Title: "Gets DVR Credentials" CVE: CVE-2018-9995 CVSS Base Score v3: 7.3 / 10 CVSS Vector String: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Date: 09/04/2018 Exploit Author: Fernandez Ezequiel optimized from CodeHolic Exploit: root@kitploit: $...

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper para maximizar las capacidades de la app iSH en iOS sin jailbreak. Lo que hace API HTTP + panel integrado en http://127.0.0.1:8088 Transmisión en tiempo real por WebSocket en ws://127.0.0.1:8089 Descubrimiento automático de herramientas SynChan Huginn, OmnINT...

Aurea

Aurea Specification Golden Standards for IaC Security HTML Mirror: https://roxanneardary.com/aurea-specification/ Specification Overview Aurea is a fully open-source, AI-powered Infrastructure-as-Code security specification designed to provide continuous security analysis throughout the software...

sightline

Sightline Geospatial infrastructure intelligence platform for discovering and analyzing physical-world assets using OpenStreetMap data. Overview Sightline enables searching, monitoring, and analyzing real-world infrastructure including: Telecommunications towers and data centers Power plants,...

Exploits

Exploits Exploits developed by Outflank B.V. team members...

r2ai

R2AI - Augmented reversing with LLM for radare2 root@kitploit: ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Components This...

PTP-RAT

PTP-RAT Exfiltrate data over screen interfaces More information about how the tool works can be found at https://www.pentestpartners.com/security-blog/exfiltration-by-encoding-data-in-pixel-colour-values/...

CVE-2022-0847

DIRTY PIPE CVE-2022-0847 This is a kernel vulnerability that allows overwriting of data in arbitrary read-only files, which can therefore lead to privilege escalation since an unprivileged process can write into a privileged process. All credits go to 🥇Max Kellermann for finding the vulnerability...

CVE-2018-10388

Este repositorio no tiene un README...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4-byte XFRM/ESP Proof-of-concept local privilege escalation via XFRM/ESP page-cache corruption 4-byte write primitive · 48 iterations · 192-byte ELF overwrite · unprivileged user + netns Proof of concept Left: kernel preflight, setuid scan, and exploit chain · Right: root shell...

certighost-cve-2026-54121-slides

Presentación Slidev de Certighost Este directorio contiene la presentación Slidev para CVE-2026-54121.md. root@kitploit: npm install npm run dev Otros comandos: root@kitploit: npm run build npm run export La presentación de origen es slides.md. El estilo general de la presentación está en...