Lucene search
+L

831 matches found

Kitploit
Kitploit
added 2026/09/02 4:01 p.m.5 views

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 2:40 p.m.4 views

lorsrf

LORSRF - 2.1 Lorsrf es una potente herramienta de pruebas de penetración web diseñada para identificar parámetros que pueden ser explotados para ataques SSRF o de carga de recursos fuera de banda. Al añadir un host OAST como Burp Collaborator al valor del parámetro, Lorsrf puede generar una...

5.9AI score
SaveExploits0
F5 Networks
F5 Networks
added 2026/09/02 1:52 p.m.7 views

K000162872: Out-of-band Security Notification (September 2, 2026)

Security Advisory Description On September 2, 2026, F5 announced the following security issues. This document is intended to serve as an index of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associated...

9.2CVSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 1:47 p.m.4 views

CVE-2025-25198-PoC

CVE-2025-25198-PoC Proof-of-concept for CVE-2025-25198, a Host header poisoning issue affecting Mailcow password reset flows. The script starts a local HTTPS listener on port 443, obtains a valid CSRF token automatically, sends the password reset sequence with a poisoned Host header, and stops wh...

8.8CVSS7AI score0.01099EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/02 1:30 p.m.170 views

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 1:19 p.m.4 views

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

9.8CVSS6.9AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/02 11:43 a.m.6 views

XXEinjector

XXEinjector XXEinjector は、直接および Out of Band 方式を使用したファイル取得を自動化します。ディレクトリリストは Java アプリケーションでのみ機能します。他のアプリケーションでは、ブルートフォース方式を使用する必要があります。 オプション: root@kitploit: --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file Mandatory - file containing valid HTTP request with xml...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 10:25 a.m.4 views

dnsobserver

DNSObserver Un práctico servicio DNS escrito en Go para ayudar en la detección de varios tipos de vulnerabilidades ciegas. Monitorea el servidor de un pentester en busca de interacciones DNS fuera de banda y envía notificaciones con los detalles de la solicitud recibida a través de Slack...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 9:43 a.m.3 views

RMASmoke

RMASmoke A tool to disable Write-Protect using an oob write in the TPM2 BUILDING Check BUILDING.MD;...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 8:58 a.m.12 views

w3af

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

5.9AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.103 views

RaspAP <=2.6.5 - Remote Command Injection

RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";". id: CVE-2021-33357 info: name: RaspAP =2.6.5 - Remote Command Injection...

9.8CVSS7.5AI score0.17446EPSS
SaveExploits1References5
Kitploit
Kitploit
added 2026/09/02 6:20 a.m.298 views

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/02 5:07 a.m.112 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 5:07 a.m.3 views

sqlmap

sqlmap sqlmap은 SQL 인젝션 결함 탐지 및 활용, 데이터베이스 서버 장악 프로세스를 자동화 하는 오픈소스 침투 테스팅 도구입니다. 최고의 침투 테스터, 데이터베이스 핑거프린팅 부터 데이터베이스 데이터 읽기, 대역 외 연결을 통한 기반 파일 시스템 접근 및 명령어 실행에 걸치는 광범위한 스위치들을 위한 강력한 탐지 엔진과 다수의 편리한 기능이 탑재되어 있습니다. 스크린샷 또는, wiki에 나와있는 몇몇 기능을 보여주는 스크린샷 모음 을 방문하실 수 있습니다...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/02 4:48 a.m.4 views

Arecibo

Arecibo Endpoint for Out-of-Band Exfiltration DNS & HTTP Authors Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz DNS Exfiltration Create a new token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Now you can use this identificative token to d...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 11:57 p.m.37 views

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/01 11:50 p.m.3 views

mole

Mole OOBOut-of-Band 취약점을 식별하고 악용하기 위한 프레임워크입니다. 설치 및 설정 Mole 설치 Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive config.yml에 API 키를 설정하세요 클라이언트와 서버에서 같아야 합니다. DNS 구성 DNS 레코드를 등록 기관에서 구성하여...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/01 5:42 p.m.5 views

cve-2022-33891

cve-2022-33891 Usage: root@kitploit: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数,则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py...

8.8CVSS7.2AI score0.93076EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/01 1:29 p.m.5 views

CVE-2021-3262

CVE-2021-3262 SQL Injection in TripSpark VEO Transportation / NovusEDU The public "Student Busing Information" lookup page shipped with TripSpark VEO Transportation takes unauthenticated POST body input and concatenates it into a SQL Server query without parameterisation or server-side validation...

9.8CVSS7.3AI score0.01021EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 3:40 p.m.4 views

CVE-2025-32375

Setup for the vulnerable version. Start the vulnerable container: root@kitploit: docker compose up Create a listener e.g. ncat: root@kitploit: ncat -klnv 1337 Run the exploit: root@kitploit: python3 exploit.py You should receive an HTTP request in the ncat window with the contents of the OS comma...

9.8CVSS7.2AI score0.50675EPSS
SaveExploits5References1
Rows per page
Query Builder