grype

Grype A vulnerability scanner for container images and filesystems...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

shellsploit-framework

We'll back in several years. update...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

wig

wig - WebApp Information Gatherer wig is a web application information gathering tool, which can identify numerous Content Management Systems and other administrative applications. The application fingerprinting is based on checksums and string matching of known files for different versions of...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

PXEThief

PXEThief PXEThief es un conjunto de herramientas que implementa las vías de ataque discutidas en la charla de DEF CON 30 Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 contra la funcionalidad de Implementación del Sistema Operativo en Microsoft Endpoint...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

sar2html <=3.2.2 Plot Parameter - Remote Code Execution

sar2html version 3.2.2 and prior contains an OS command injection vulnerability in the plot parameter of index.php. A remote, unauthenticated attacker can append shell metacharacters to the plot parameter and execute arbitrary operating system commands. id: CVE-2025-34030 info: name: sar2html...

Web-Check < 2.0.1 Screenshot API - OS Command Injection

Lissy93/web-check contains a command injection caused by unsanitized user input in the screenshot API, letting attackers execute arbitrary system commands, exploit requires sending crafted url parameters. id: CVE-2025-32778 info: name: Web-Check 2.0.1 Screenshot API - OS Command Injection author:...

windows

Windows Docker 容器中的 Windows。 功能 ✨ 在 Docker 容器内运行 Windows 自动下载并无人值守安装 支持现代和旧版 Windows 版本 借助 KVM 加速实现接近原生的性能 可自定义 CPU、内存和存储分配 通过内存气球（ballooning）实现动态内存分配 USB 透传和宿主机文件夹共享 支持 NAT、用户模式、macvlan 和 macvtap 网络 视频 📺 使用方法 🐳 Docker Compose： root@kitploit: services: windows: image: dockurr/windows containernam...

ROOT-OS-DEBIAN-13-CVE-2026-8926 CVE-2026-8926 in curl - Patched by Root

Root has patched CVE-2026-8926 in the curl package for Root:Debian:13. Multiple fixed versions available...

cve-2024-3400

cve-2024-3400 Python exploit and checker script for CVE-2024-3400 Palo Alto Command Injection and Arbitrary File Creation root@kitploit: usage: cve-2024-3400.py -h exploit,check ... CVE-2024-3400 - Palo Alto OS Command Injection positional arguments: exploit,check Available modules exploit Exploi...

atomic-operator

license atomic-operator This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined with...

MangoPunch-CVE-2022-31898

🥭 MangoPunch: CVE-2022-31898 Authenticated OS Command Injection for GL.iNet Devices root@kitploit: | / | | \ | | | \ / | | | | | | | |/| |/ | ' \ / |/ | / | | | ' \ / | ' \ | | | | | | | | | | | | | | || | | | | | | | | || ||,|| ||, |/|| ,|| |||| || / | |/ 🔍 Vulnerability Overview...

os-experiment-4

os-experiment-4 os experiment 4 CVE-2016-5195 ./run.sh...

Kernel-Exploits

Kernel Exploits Repository for kernel exploits...

CVE-2026-20282 Cisco Identity Services Engine Authenticated Write Vulnerability

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte...