Lucene search
+L

841 matches found

Kitploit
Kitploit
added 2026/09/19 2:53 a.m.18 views

w3af

sqlmap sqlmap est un outil Open Source de test d'intrusion. Cet outil permet d'automatiser le processus de détection et d'exploitation des failles d'injection SQL afin de prendre le contrôle des serveurs de base de données. sqlmap dispose d'un puissant moteur de détection utilisant les techniques...

5.8AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.117 views

Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection

Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php. This in turn can lead to...

9CVSS8AI score0.75148EPSS
SaveExploits6References5
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.105 views

RaspAP <=2.6.5 - Remote Command Injection

RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";". id: CVE-2021-33357 info: name: RaspAP =2.6.5 - Remote Command Injection...

9.8CVSS8.5AI score0.17446EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.126 views

TimeKeeper by FSMLabs - Remote Code Execution

An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named argx, with x an integer starting from 1; it is possible t...

9.8CVSS8.1AI score0.46304EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.118 views

AirFlow < 2.4.0 - Remote Code Execution

A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0. id: CVE-2022-40127 info: name: AirFlow 2.4.0 -...

8.8CVSS8AI score0.85653EPSS
SaveExploits2References5
Kitploit
Kitploit
added 2026/09/19 1:30 a.m.11 views

cve-2022-33891

cve-2022-33891 Использование: root@kitploit: pip3 install requests Если вы не используете параметр -d, доменное имя dnslog будет запрошено автоматически. Если вы не используете параметр -d, доменное имя dnslog будет запрошено автоматически. python3 cve202233891poc.py -u http://127.0.0.1 python3...

8.8CVSS8.2AI score0.93076EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/19 1:29 a.m.8 views

CVE-2025-25198-PoC

CVE-2025-25198-PoC Preuve de concept pour CVE-2025-25198, un problème d'empoisonnement de l'en-tête Host affectant les flux de réinitialisation de mot de passe de Mailcow. Le script démarre un écouteur HTTPS local sur le port 443, obtient automatiquement un jeton CSRF valide, envoie la séquence d...

8.8CVSS7.3AI score0.01121EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/18 11:35 p.m.39 views

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 11:05 p.m.8 views

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnérabilité Auteur de l'exploit : ersinerenler Page d'accueil du fournisseur https://code-projects.org/blood-bank-in-php-with-source-code Lien du logiciel...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/18 10:27 p.m.11 views

lorsrf

LORSRF - 2.1 Lorsrf est un outil puissant de test de pénétration web conçu pour identifier les paramètres qui peuvent être exploités pour des attaques SSRF ou de chargement de ressources hors bande. En ajoutant un hôte OAST comme Burp Collaborator à la valeur du paramètre, Lorsrf peut générer une...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 10:04 p.m.10 views

area51

Every callback, captured. The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a dashboard you control, and it gets whatever response you choose in return...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 9:31 p.m.176 views

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/18 8:14 p.m.304 views

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 5:52 p.m.116 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/18 5:52 p.m.11 views

sqlmap

sqlmap برنامج sqlmap هو أداة اختبار اختراق مفتوحة المصدر تقوم بأتمتة عملية اكتشاف واستغلال ثغرات حقن SQL والسيطرة على خوادم قواعد البيانات. يأتي مع محرك كشف قوي، والعديد من الميزات المتخصصة لمختبر الاختراق المحترف، ومجموعة واسعة من الخيارات بما في ذلك تحديد بصمة قاعدة البيانات، واستخراج البيانات ...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/18 4:17 p.m.22 views

Arecibo

Arecibo Point de terminaison pour exfiltration hors bande DNS et HTTP Auteurs Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz Exfiltration DNS Créer un nouveau jeton : root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Vous pouvez maintenant...

6.2AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:16 p.m.15 views

XXEinjector

XXEinjector XXEinjector automatise la récupération de fichiers à l’aide de méthodes directes et hors bande. Le listage de répertoires fonctionne uniquement dans les applications Java. La méthode par force brute doit être utilisée pour les autres applications. Options : root@kitploit: --host...

6.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:04 p.m.8 views

CVE-2022-42889-POC

CVE-2022-42889-POC Une application de démonstration simple qui montre comment exploiter la vulnérabilité CVE-2022-42889. Utilise les services OOB Out of Band pour démontrer les préfixes dns et url. JavaDocs pour l'interpolation de commons-text commons-text JavaDocs Exemples d'interpolations...

9.8CVSS7.6AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/18 3:12 p.m.9 views

XOE

XOE Exploitez facilement la vulnérabilité XXE Out-Of-Band Détails Cet outil crée un fichier xml qui contient l'ip et le port que vous avez saisis et écoute les connexions pour répondre :D Capture d'écran...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/18 4:51 a.m.7 views

mole

Mole إطار عمل لتحديد واستغلال الثغرات خارج النطاق OOB. التثبيت والإعداد تثبيت Mole بايثون = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive تعيين مفتاح API في config.yml يجب أن يكون نفسه للعميل...

5.8AI score
SaveExploits0
Rows per page
Query Builder