Lucene search
+L

831 matches found

Kitploit
Kitploit
added 2026/09/03 12:25 p.m.4 views

dnsobserver

DNSObserver Un práctico servicio DNS escrito en Go para ayudar en la detección de varios tipos de vulnerabilidades ciegas. Monitorea el servidor de un pentester en busca de interacciones DNS fuera de banda y envía notificaciones con los detalles de la solicitud recibida a través de Slack...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 11:58 a.m.4 views

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

9.8CVSS6.8AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/03 7:58 a.m.12 views

w3af

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/03 6:17 a.m.6 views

Grassmarlin-CVE-2026-6807-XXE-POC

这是基于 CISA 于 2026 年 4 月 28 日披露的 Grassmarlin 中一个已报告漏洞的功能性概念验证代码。 查看 Grassmarlin 的代码后,我确定可能的脆弱参数与打开已保存会话时摄入的 XML 文件有关。通过构造恶意请求,我发现可以在 Grassmarlin 的消息控制台中诱发一个错误。该错误的原因和内容已从 Grassmarlin 的所有日志和输出中适当剥离。 然而,通过引用 DTD 中的外部主机,可以实现任意文件的 OOB 外泄。确实存在一些限制:系统上不能使用较新版本的 Java,这意味着 Grassmarlin 必须使用安装程序中捆绑的 Java...

5.5CVSS6.1AI score0.00197EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 5:37 a.m.300 views

interactsh

An OOB interaction gathering server and client library Features • Usage • • • •...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/03 4:05 a.m.112 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 4:05 a.m.3 views

sqlmap

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

5.9AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/03 2:10 a.m.103 views

RaspAP <=2.6.5 - Remote Command Injection

RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";". id: CVE-2021-33357 info: name: RaspAP =2.6.5 - Remote Command Injection...

9.8CVSS7.5AI score0.17446EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/03 2:10 a.m.122 views

TimeKeeper by FSMLabs - Remote Code Execution

An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named argx, with x an integer starting from 1; it is possible t...

9.8CVSS7.3AI score0.46304EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/03 2:10 a.m.4 views

CVE-2025-25198-PoC

CVE-2025-25198-PoC Proof-of-concept for CVE-2025-25198, a Host header poisoning issue affecting Mailcow password reset flows. The script starts a local HTTPS listener on port 443, obtains a valid CSRF token automatically, sends the password reset sequence with a poisoned Host header, and stops wh...

8.8CVSS7.1AI score0.01099EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/03 1:40 a.m.4 views

Arecibo

Arecibo Endpoint for Out-of-Band Exfiltration DNS & HTTP Authors Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz DNS Exfiltration Create a new token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Now you can use this identificative token to d...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 1:01 a.m.7 views

WSUS-RCE-Mitigation-59287

🚨 关键网络安全警报:WSUS 中的 RCE(CVE-2025-59287)🚨 创建者与致谢: @esteban11121 本指南旨在帮助社区快速缓解此漏洞。 状态:已确认存在活跃(野外)利用。 这是一个影响 WSUS 服务器的远程代码执行(RCE) 漏洞,允许未经身份验证的攻击者获取 SYSTEM 权限。需要立即采取带外(OOB) 补丁措施。 详情| 值 ---|--- 标识符| CVE-2025-59287 CVSS 严重性| 9.8(严重) 攻击向量| 网络(远程执行,未经身份验证) 受影响服务| Windows Server Update Services WSUS 所需操作|...

9.8CVSS8.6AI score0.99979EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/02 10:12 p.m.37 views

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/02 9:28 p.m.3 views

mole

Mole Un framework para identificar y explotar vulnerabilidades fuera de banda OOB. Instalación y Configuración Instalación de Mole Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Establec...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 7:29 p.m.6 views

cve-2022-33891

cve-2022-33891 Usage: root@kitploit: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数,则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py...

8.8CVSS7.2AI score0.93076EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/02 4:01 p.m.5 views

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

5.5CVSS6.1AI score0.00349EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 2:40 p.m.4 views

lorsrf

LORSRF - 2.1 Lorsrfは、SSRFまたはOut-of-bandリソースロード攻撃に悪用可能なパラメータを特定するために設計された強力なWeb侵入テストツールです。Burp CollaboratorのようなOASTホストをパラメータ値に追加することで、Lorsrfは対象に関する実際の情報なしに、Burp Collaboratorで受信されるHTTPリクエストを生成できます。...

5.9AI score
SaveExploits0
F5 Networks
F5 Networks
added 2026/09/02 1:52 p.m.12 views

K000162872: Out-of-band Security Notification (September 2, 2026)

Security Advisory Description On September 2, 2026, F5 announced the following security issues. This document is intended to serve as an index of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associated...

9.2CVSS5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 1:30 p.m.170 views

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 11:43 a.m.6 views

XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: root@kitploit: --host Mandatory - our IP address for reverse connections...

6.1AI score
SaveExploits0
Rows per page
Query Builder