Lucene search
+L

840 matches found

Kitploit
Kitploit
added 2026/09/15 2:28 a.m.113 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/15 12:31 a.m.7 views

CVE-2025-25198-PoC

CVE-2025-25198-PoC Proof-of-concept for CVE-2025-25198, a Host header poisoning issue affecting Mailcow password reset flows. The script starts a local HTTPS listener on port 443, obtains a valid CSRF token automatically, sends the password reset sequence with a poisoned Host header, and stops wh...

8.8CVSS7.2AI score0.01121EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 11:49 p.m.7 views

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 11:37 p.m.20 views

Arecibo

Arecibo Endpoint for Out-of-Band Exfiltration DNS & HTTP Authors Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz DNS Exfiltration Create a new token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Now you can use this identificative token to d...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 11:34 p.m.176 views

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 9:57 p.m.7 views

lorsrf

LORSRF - 2.1 Lorsrf is a powerful web penetration testing tool designed to identify parameters that can be exploited for SSRF or Out-of-band resource load attacks. By adding an OAST host like Burp Collaborator to the parameter value, Lorsrf can generate an HTTP request that is received in Burp...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 9:25 p.m.39 views

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 6:55 p.m.6 views

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

9.8CVSS7.5AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/14 6:43 p.m.6 views

POC-CVE-2025-54988

CVE-2025-54988 - POC Disclaimer: I am not the original discoverer of this vulnerability. This post documents my process of reproducing the issue in a controlled environment for educational purposes and to help others validate their own systems. The tests were conducted in an isolated lab with no...

9.8CVSS7.8AI score0.37713EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/14 6:22 p.m.304 views

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 5:48 p.m.11 views

XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: root@kitploit: --host Mandatory - our IP address for reverse connections...

6.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 3:40 p.m.6 views

CVE-2025-32375

脆弱性バージョンのセットアップ 脆弱性のあるコンテナを起動します: root@kitploit: docker compose up リスナー(例: ncat)を作成します: root@kitploit: ncat -klnv 1337 エクスプロイトを実行します: root@kitploit: python3 exploit.py すべてが正常に動作した場合、ncat ウィンドウに OS コマンド(デフォルトでは id)の内容を含む HTTP リクエストが届くはずです。 クレジット 脆弱性発見者: SeaW1nd VickyTheViking によるテスト環境に基づく...

9.8CVSS8.2AI score0.52109EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/14 3:06 p.m.7 views

XOE

XOE Exploit XXE Out-Of-Band Vulnerability Easily Details This tool creates xml file which contain the ip and port you entered and listen to connection to response :D Screenshot...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 2:21 p.m.8 views

sqlmap

sqlmap sqlmapはオープンソースのペネトレーションテスティングツールです。SQLインジェクションの脆弱性の検出、活用、そしてデータベースサーバ奪取のプロセスを自動化します。 強力な検出エンジン、ペネトレーションテスターのための多くのニッチ機能、持続的なデータベースのフィンガープリンティングから、データベースのデータ取得やアウトオブバンド接続を介したオペレーティング・システム上でのコマンド実行、ファイルシステムへのアクセスなどの広範囲に及ぶスイッチを提供します。 スクリーンショット wikiに載っているいくつかの機能のデモをスクリーンショットで見ることができます。 スクリーンショ...

5.9AI score
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.4 views

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: afunix: Update unixsksk-oobskb under the skreceivequeue lock. Billy Jheng Bing-Jhong reported a race between unixgc and queueoob. unixgc attempts to garbage-collect closed inflight sockets. If the socket contains MSGOOB in...

7.8CVSS6AI score0.00521EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 12:40 p.m.6 views

wordpress-CVE-2022-21661

wordpress-CVE-2022-21661 version5.8.3 path:http://your target/wp-admin/admin-ajax.php The injection type is out-of-band, you need to specify dnslog yourself and replace ceye.io POST- DATA:"taxquery":"field":"termtaxonomyid","terms":"1 and ifselect loadfileconcat'\',select...

8CVSS7.5AI score0.97795EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/14 12:25 p.m.5 views

CVE-2024-22024

CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure !WARNING FOR EDUCATIONAL PURPOSE AND AUTHORIZED TESTING ONLY. Parameters -u or --targeturl: The target Ivanti Connect Secure ICS URL or file with list of URLs. -c or --attackerurl: The attacker URL generate one using...

8.3CVSS8AI score0.94721EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 8:20 a.m.16 views

w3af

sqlmap sqlmapはオープンソースのペネトレーションテスティングツールです。SQLインジェクションの脆弱性の検出、活用、そしてデータベースサーバ奪取のプロセスを自動化します。 強力な検出エンジン、ペネトレーションテスターのための多くのニッチ機能、持続的なデータベースのフィンガープリンティングから、データベースのデータ取得やアウトオブバンド接続を介したオペレーティング・システム上でのコマンド実行、ファイルシステムへのアクセスなどの広範囲に及ぶスイッチを提供します。 スクリーンショット wikiに載っているいくつかの機能のデモをスクリーンショットで見ることができます。...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 5:49 a.m.5 views

mole

Mole アウトオブバンド(OOB)脆弱性の特定と悪用のためのフレームワーク。 インストールとセットアップ Mole のインストール Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive config.yml に API キーを設定します(クライアントとサーバーで同じキーを使用する必要があります)。 DNS 設定 レジストラで D...

5.9AI score
SaveExploits0
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.117 views

Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php. This in turn can lead to...

9CVSS7.9AI score0.75148EPSS
SaveExploits6References5
Rows per page
Query Builder