CVE-2023-29808

Exploit Title: Reflected Cross Site Scripting Google Dork: Date: 27.04.2023 Exploit Author: Lucas Noki 0xPrototype Vendor Homepage: https://github.com/vogtmh Software Link: https://github.com/vogtmh/cmaps Version: 8.0 Tested on: Mac, Windows, Linux CVE : CVE-2023-29808 Description: The...

subdomain3

Subdomain3 README.md inEnglish 描述 Subdomain3是新一代子域名爆破工具,它帮助渗透测试者相比与其他工具更快发现更多的信息,这些信息包括子域名,IP,CDN信息等,开始使用它吧! 截图 medium 模式下的截图: 特性 更快 三种速度模式. 用户也可以修改配置文件/lib/config.py 来获得更高的速度. CDN识别支持 可以判定域名是否使用了CDN,同时新增在某些情况下自动识别是否使用CDN，而不只依赖给定的列表； 标准C段支持 可以对未使用CDN的域名IP进行分类. 多级域名支持 可以发现多级域名,无限制. 大字典支持 可以支持百万级字典...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

CVE-2019-5736-PoC-2

Overview The exploit from the following repository adapted to run in a Docker image. https://github.com/feexd/pocs Usage Building the Image root@kitploit: $ git clone https://github.com/k-onishi/CVE-2019-5736-PoC $ cd CVE-2019-5736-PoC $ make $ sudo docker build -t poc . Execution Run the contain...

CVE-2025-32965-xrpl-js-poc

CVE-2025-32965 — xrpl.js Supply Chain Attack PoC Report Vulnerability Description CVE Code: CVE-2025-32965 Vulnerability Type: Supply Chain Attack CWE-506: Embedded Malicious Code Target: xrpl.js library versions 4.2.1–4.2.4 and 2.14.2 Impact: User's wallet seed/secret data sent to the attacker...

CVE-2022-26138

CVE-2022-26138 1.Introduction Confluence Hardcoded Password POC 2.Usage root@kitploit: poc -f host.txt // 批量扫描 poc -h 192.168.1.1 // 单个扫描 3.Disclaimer This tool is only for learning, research, and self-checking. It should not be used for illegal purposes. Please comply with relevant laws and...

CVE-2025-29927_demo

CVE-2025-29937 Reproduction Steps root@kitploit: npm i npm run dev curl -H "x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware" http://localhost:3000/protected...

tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A remote attacker could exploit this by providing a specially crafted .traineddata LSTM model component. When Tesseract's deserializer processes this component during OCR recognition, an unchecked integer...

phantun

Phantun 一个轻量且快速的UDP到TCP混淆器。 目录 Phantun 最新发布 概述 用法 1. 启用内核 IP 转发 2. 添加必要的防火墙规则 客户端 使用 nftables 使用 iptables 服务端 使用 nftables 使用 iptables 3. 以非 root 用户运行 Phantun 二进制文件（可选） 4. 启动 Phantun 守护进程 服务端 客户端 MTU 开销 WireGuard 的 MTU 计算 版本兼容性 文档 性能 未来计划 与 udp2raw 的比较 许可证 最新发布...

CVE-2019-0708

This repository does not have a README...

CVE-2022-1119

CVE-2022-1119 1.Introduction WordPress Simple File List 3.2.8 FileRead POC 2.Usage root@kitploit: poc -f host.txt // Batch scan poc -h 192.168.1.1 // Single scan 3.Disclaimer This tool is only for learning, research, and self-assessment. It should not be used for illegal purposes. Please comply...

resolvers

Resolvers The most exhaustive list of reliable DNS resolvers resolvers.txt: A simple list of resolver IP addresses, which you can pass directly to your DNS enumeration tool. resolvers-extended.txt: All of the resolvers in resolvers.txt with additional information about each server, including the...

resolvers

Resolvers La lista más exhaustiva de resolvers DNS fiables resolvers.txt: Una lista simple de direcciones IP de resolvers, que puedes pasar directamente a tu herramienta de enumeración DNS. resolvers-extended.txt: Todos los resolvers de resolvers.txt con información adicional sobre cada servidor,...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Veeam Backup & Replication Vulnerability Vulnerability Description Veeam Backup & Replication contains a vulnerability that allows encrypted credentials stored in the configuration database to be obtained, allowing attackers to access backup infrastructure hosts. Nuclei Template...

CVE-2024-2074

This repository does not have a README...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services...

Starkiller

...

CVE-2026-39259

SmallerC scanf s Stack.md SmallerC - scanf %s Stack Buffer Overflow Project: https://github.com/alexfru/SmallerC SmallerC's scanf implementation does not enforce an upper bound on string reads when %s or % is used without an explicit field width in the format string The runtime will continue...

assetfinder

assetfinder Find domains and subdomains potentially related to a given domain. Install If you have Go installed and configured i.e. with $GOPATH/bin in your $PATH: root@kitploit: go get -u github.com/tomnomnom/assetfinder Otherwise download a release for your platform. To make it easier to execut...

assetfinder

assetfinder 查找可能与给定域名相关的域名和子域名。 安装 如果你已安装并配置好 Go（即 $GOPATH/bin 已在 $PATH 中）： root@kitploit: go get -u github.com/tomnomnom/assetfinder 否则，请为你所使用的平台下载一个发布版本。为了方便执行，你可以将二进制文件放到 $PATH 中。 用法 root@kitploit: assetfinder --subs-only 数据源 欢迎通过 pull request 提交新的数据源！: 已实现 crt.sh certspotter hackertarget...