Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

CVE-2026-43499-S24U

CVE-2026-43499 PoC for Galaxy S24 Ultra SM-S928U1 Device-specific research port of CVE-2026-43499 for the US Samsung Galaxy S24 Ultra on firmware S928USQS6DZF2 app-domain / production path. This repository is the S24U counterpart of CVE-2026-43499-S25U. It captures the current incomplete progress...

Rawsec-website

RawSec Static website hosted on GitLab Pages Topics & Tags : Security Cybersecurity, Linux, News, System, Virtualization, ... Dev Install the required version of nodejs with nodenv. Then install the hexo cli tool: root@kitploit: $ npm install -g hexo-cli Then install dependencies: root@kitploit: ...

svja

svja The RDPS Super Vulnerable Java Application is just that -- a super vulnerable java application created for the benefit of all to see a variety of common, often "complex", vulnerabilities. This software was created as part of the Roniel and DaRon Podcast Show...

RS256-2-HS256

RS256-2-HS256 JWT Attack to change the algorithm RS256 to HS256 Usage root@kitploit: usage: RS2562HS256JWT.py -h payload pubkey positional arguments: payload JSON payload from JWT to attack pubkey Public key file to use for signing optional arguments: -h, --help show this help message and exit...

CVE-2023-48788

CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerabilitiy An exploit proof of concept for FortiClient EMS CVE-2023-48788 Blog Post More details here: https://www.horizon3.ai/attack-research/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive Usage root@kitploit: $ python3...

CVE-2020-0688

Exploit and detect tools for CVE-2020-0688Microsoft Exchange default MachineKeySection deserialize vulnerability build root@kitploit: csc ExchangeCmd.cs csc ExchangeDetect.cs usage root@kitploit: ExchangeDetect root@kitploit: ExchangeCmd sub commands: exec args exec command arch get remote proces...

lisa.py

LLDB MCP Integration This project provides a Model-Context Protocol MCP integration for LLDB, allowing AI assistants like Claude to interact with your debugging sessions through a standardized interface. Overview The integration consists of two main components: 1. server.py - An MCP server that...

rep-chrome

rep+ rep+ is a lightweight Chrome DevTools extension inspired by Burp Suite's Repeater, now supercharged with AI. I often need to poke at a few requests without spinning up the full Burp stack, so I built this extension to keep my workflow fast, focused, and intelligent with integrated LLM suppor...

CVE-2024-22532

CVE-2024-22532 Description XnSoft XnView Classic 2.51.5 and NConvert 7.163 are vulnerable to Heap-based Buffer Overflow via a crafted .xwd file Vendor XnSoft Affected Products XnView Classic 2.51.5 NConvert 7.163 Impact Denial of Service Remote Code Execution PoC Denial of Service cmdline used...

burpfox

🦊 BurpFox A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow. Features 🎯 Right-click scanning - Scan requests directly from Proxy History or Repeater. ⚙️ Full Dalfox options - Context-aware, WAF evasion, Blind XSS and more. Prerequisites 1. Install Dalfox...

dotnetpaddingoracle

dotnetpaddingoracle Small script to check if the .NET web application is vulnerable to padding Oracle This script actually verify if the oracle is present and exploitable, not just if the patch has been installed. usage root@kitploit: dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER Burp reques...

EyeWitness

EyeWitness EyeWitness is designed to take screenshots of websites provide some server header info, and identify default credentials if known. EyeWitness is designed to run on Kali Linux. It will auto detect the file you give it with the -f flag as either being a text file with URLs on each new...

flar

flar FLAR is the Fast Light Agent Restrictor. It runs on rocks called gars. It is a simple, lightweight CLI tool in Go to run coding agent CLIs like Claude Code, Antigravity, Codex, Copilot and Reasonix safely inside isolated Bubblewrap bwrap sandboxes. The purpose is to instantly and without...

Farmer

Farmer Author: @domchell Overview I wanted to be a farmer, so I started harvesting hashes Farmer is a project for collecting NetNTLM hashes in a Windows domain. Farmer achieves this by creating a local WebDAV server that causes the WebDAV Mini Redirector to authenticate from any connecting client...

VcenterKiller

VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...

DOMPurify

DOMPurify DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It's also very simple to use and get started with. DOMPurify was started in February 2014 and, meanwhile, has reached version v3.4.15. DOMPurify runs as JavaScript and works in all modern browsers...

cve-2019-2215

CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215 Based on a proof-of-concept by Jann Horn & Maddie Stone of Google Project Zero Overview Demonstration of a kernel memory R/W-only privilege escalation attack resulting in a temporary root shell. It works on Google Pixel 2/Pixel 2...

Rusty-Playground

Rusty-Playground 🦀 A collection of Rust programs showcasing some offensive-securtiy and evasions techniques Tool| Description| References ---|---|--- ClipboardMon| Monitors the clipboard for changes and logs clipboard content or copies files depending on detected changes.| - DumpMDEConfig|...

tools

About This section offers a selection of our fully featured security and hacking tools. We also provide some exploits, proof of concept code, shellcodes and snippets. That means some tools are not tested and may not have the feature set. If you find some bugs or if you have any questions, ideas o...