HTC

Hack The CCTV DVRs Credentials Exposed | CVE-2018-9995 | The CCTV Leaked Username For Get Loggin Access How To Use? root@kitploit: Open The https://www.zoomeye.org/ Search This Keyword '/login.rsp' Wait To Get IP and Port $ python3 thecctv.py More Information OS| Language| Contact ---|---|--- Lin...

CVE-2017-3066

CVE-2017-3066 Description Adobe ColdFusion uses message format the Action AMF. The AMF Protocol is a custom binary serialization Protocol. It has two formats: AMF0 and AMF3. Action message consists of headers and bodies. There are several implementations of AMF in different languages. For Java we...

CVE-2016-4438

ref: https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037PoC.py https://raw.githubusercontent.com/coffeehb/Some-PoC-oR-ExP/master/Struts2/S2-037CmdToolExP.py...

netty-resolver-dns-check

netty-resolver-dns-check Offline checker for three DNS cache poisoning CVEs in io.netty:netty-resolver-dns — CVE-2026-45674 , CVE-2026-47691 and CVE-2026-45673 — and for the question the version number cannot answer: is your application actually using that resolver? If you use Spring WebClient, t...

staged-DLL-Injection-SMB-

staged-DLL-Injection Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification study CRTO. ⚠️ Disclaimer: This project was developed strictly in an isolated lab environment for educational purposes as part of offensive...

CVE-2026-24061

CVE-2026-24061 Telnet RCE Exploit - By SafeBreach Labs This script exploits the CVE-2026-24061 vulnerability in Telnet servers using a malformed USER environment variable. Usage Run the script with a target host: root@kitploit: python telnetrce.py -p Arguments host: Target IP address or hostname...

taser

Taser TASER Testing and Security Resource is an abstraction library used to simplify the process of creating offensive security tooling. The various protocols and classes help streamline development of custom tooling during engagements. The examples directory contains a number of scripts...

urless

About - v2.7 This is a tool used to de-clutter a list of URLs. As a starting point, I took the amazing tool uro by Somdev Sangwan. But I wanted to change a few things, make some improvements like deal with GUIDs and make it more customizable. Installation urless supports Python 3. Install urless ...

cve-2026-43499-aak-an00

CVE-2026-43499 · 荣耀 WIN RT AAK-AN00 临时 Root 研究笔记 （全是deepseek写的，我啥也不懂） 设备 Bootloader 永久锁死 （ro.oemunlock.supported 为空），没有 fastboot、没有持久 su、没有 Magisk。 唯一还能走的路是内核漏洞。本仓库记录从「能不能打」到「打完之后到底有多稳」的完整过程。 性质：临时 root，重启即失效。 免责声明 本仓库记录的是在本人自有设备 上进行的安全研究过程，目的是理解内核 PI 竞态的成因与稳定性边界。 不包含任何 exploit 二进制或可直接运行的利用载荷 ——...

ghostlock-s26

GhostLock - Android wrapper indev.ghostlock.s26 One-click Android wrapper for 1ndevelopment/ghostlock-s26: GhostLock CVE-2026-43499 ported to the whole Samsung Galaxy S26 series Android 16 / GKI 6.12. One APK, three kernel lines, runtime parameter matching - no per-build app variants. Use only on...

CVE-2025-24071

CVE-2025-24071 — Windows File Explorer Spoofing / NTLM Hash Disclosure via .library-ms ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal...

CVE-2019-17147_Practice_Material

CVE-2019-17147PracticeMaterial This repo contains dumped flash partitions with firmware version vulnerable to CVE-2019-17147, and some useful binaries to downgrade and debug your WR841NV14 router. Doing hardware modifications such as overwriting flash chip partitions have its risks. Evaluate the...

burpsuite-copy-as-xmlhttprequest

Extensión Copy as XMLHttpRequest para BurpSuite La extensión añade un menú contextual a BurpSuite que permite copiar múltiples solicitudes como XmlHttpRequest de Javascript, lo que simplifica el desarrollo de PoC al explotar XSS. Instalación descarga el último JAR desde releases o constrúyelo...

burpsuite-copy-as-xmlhttprequest

Copy as XMLHttpRequest BurpSuite extension The extension adds a context menu to BurpSuite that allows you to copy multiple requests as Javascript's XmlHttpRequest, which simplifies PoC development when exploiting XSS. Installation download the latest JAR from releases or build manually add JAR to...

mediator

Mediator is an end-to-end encrypted reverse shell in which the operator and the shell connect to a "mediator" server that bridges the connections. This removes the need for the operator/handler to set up port forwarding in order to listen for the connection. Mediator also allows you to create...

andor

andor Blind SQL Injection Tool with Golang Usage Download andor.go and go to the folder where the file andor.go located. And type this to command prompt: go run andor.go --url "http://deneme.com/index.php?id=1" Note: Get parameter value must be correct, otherwise it will not work...

SharpShares

SharpShares Multithreaded C .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project root@kitploit: .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local"...

portclue

PortClue PortClue explains why a TCP port on a Linux machine may or may not be reachable. It turns socket, process, firewall, and Docker state into a short evidence chain instead of making you correlate ss, /proc, nftables, iptables, and docker inspect by hand. Run it without a port to discover...

terrier

Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...

vortex

🚩 This is the public repository of vortex, for latest version and updates please consider supporting us through https://porchetta.industries/ Vortex VPN Overall Reconnaissance, Testing, Enumeration and Exploitation Toolkit 🚩 Sponsors If you want to sponsors this project and have the latest update...