Lucene search
+L

837 matches found

Kitploit
Kitploit
added 2026/09/09 4:37 a.m.4 views

mole

Mole Un framework para identificar y explotar vulnerabilidades fuera de banda OOB. Instalación y Configuración Instalación de Mole Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Establec...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 2:58 a.m.112 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 2:58 a.m.5 views

sqlmap

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 12:22 a.m.6 views

CVE-2025-25198-PoC

CVE-2025-25198-PoC Prueba de concepto para CVE-2025-25198, un problema de envenenamiento de cabecera Host que afecta los flujos de restablecimiento de contraseña de Mailcow. El script inicia un listener HTTPS local en el puerto 443, obtiene un token CSRF válido automáticamente, envía la secuencia...

8.8CVSS7.2AI score0.01121EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/08 11:41 p.m.8 views

Arecibo

Arecibo Endpoint para exfiltración fuera de banda DNS y HTTP Autores Juan Manuel Fernández @TheXC3LL y Pablo Martinez @Xassiz Exfiltración DNS Crear un nuevo token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Ahora puedes usar este token...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 8:40 p.m.37 views

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 7:31 p.m.6 views

lorsrf

LORSRF - 2.1 Lorsrf es una potente herramienta de pruebas de penetración web diseñada para identificar parámetros que pueden ser explotados para ataques SSRF o de carga de recursos fuera de banda. Al añadir un host OAST como Burp Collaborator al valor del parámetro, Lorsrf puede generar una...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 7:19 p.m.302 views

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 7:09 p.m.18 views

dnsobserver

DNSObserver Un práctico servicio DNS escrito en Go para ayudar en la detección de varios tipos de vulnerabilidades ciegas. Monitorea el servidor de un pentester en busca de interacciones DNS fuera de banda y envía notificaciones con los detalles de la solicitud recibida a través de Slack...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 6:22 p.m.6 views

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

9.8CVSS7.5AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/08 6:13 p.m.7 views

XXEinjector

XXEinjector XXEinjector automatiza la recuperación de archivos utilizando métodos directos y fuera de banda. El listado de directorios solo funciona en aplicaciones Java. Para otras aplicaciones, se debe utilizar el método de fuerza bruta. Opciones: root@kitploit: --host Mandatory - our IP addres...

6.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 4:08 p.m.6 views

XOE

XOE Exploit XXE Out-Of-Band Vulnerability Easily Details This tool creates xml file which contain the ip and port you entered and listen to connection to response :D Screenshot...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 2:23 p.m.6 views

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-Vulnerabilidad-de-Inyección-SQL-OOB Autor del exploit: ersinerenler Página del proveedor https://code-projects.org/blood-bank-in-php-with-source-code Enlace del software https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/08 1:29 p.m.173 views

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 11:05 a.m.7 views

cve-2022-33891

cve-2022-33891 Usage: root@kitploit: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数,则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py...

8.8CVSS8AI score0.93076EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/08 10:04 a.m.15 views

w3af

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

5.9AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/08 9:11 a.m.103 views

RaspAP <=2.6.5 - Remote Command Injection

RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";". id: CVE-2021-33357 info: name: RaspAP =2.6.5 - Remote Command Injection...

9.8CVSS8.4AI score0.17446EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/09/08 7:59 a.m.4 views

CVE-2026-43971

A flaw was found in ninenines cowlib. This vulnerability, due to improper encoding or escaping of output, allows an attacker to perform Link header directive smuggling. By manipulating the target URI, 'rel' value, or attribute keys in applications that process Link headers through cowlib, a remot...

6.3CVSS0.00372EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/07 6:43 p.m.6 views

POC-CVE-2025-54988

CVE-2025-54988 - POC Disclaimer: I am not the original discoverer of this vulnerability. This post documents my process of reproducing the issue in a controlled environment for educational purposes and to help others validate their own systems. The tests were conducted in an isolated lab with no...

9.8CVSS7.8AI score0.15038EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/07 3:40 p.m.5 views

CVE-2025-32375

Setup for the vulnerable version. Start the vulnerable container: root@kitploit: docker compose up Create a listener e.g. ncat: root@kitploit: ncat -klnv 1337 Run the exploit: root@kitploit: python3 exploit.py You should receive an HTTP request in the ncat window with the contents of the OS comma...

9.8CVSS8.2AI score0.52109EPSS
SaveExploits5References1
Rows per page
Query Builder