Lucene search
+L

829 matches found

Kitploit
Kitploit
added 2026/08/28 5:34 a.m.4 views

w3af

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 3:10 a.m.3 views

cve-2022-33891

cve-2022-33891 Usage: root@kitploit: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数,则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py...

8.8CVSS8.2AI score0.93076EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/08/28 2:39 a.m.111 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/28 2:39 a.m.3 views

sqlmap

sqlmap sqlmap es una herramienta para pruebas de penetración "penetration testing" de software libre que automatiza el proceso de detección y explotación de fallos mediante inyección de SQL además de tomar el control de servidores de bases de datos. Contiene un poderoso motor de detección, así co...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 1:13 a.m.4 views

CVE-2025-32375

Configurazione per la versione vulnerabile. Avvia il container vulnerabile: root@kitploit: docker compose up Crea un listener es. ncat: root@kitploit: ncat -klnv 1337 Esegui l'exploit: root@kitploit: python3 exploit.py Dovresti ricevere una richiesta HTTP nella finestra di ncat con il contenuto d...

9.8CVSS8.6AI score0.50675EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/08/27 11:58 p.m.3 views

CVE-2025-7766

CVE-2025-7766 PoC शोषण CVE-2025-7766 में XML बाहरी इकाई XXE कमजोरी का शोषण करने के लिए PoC। फ़ाइल पढ़ने /etc/passwd और आउट-ऑफ-बैंड HTTP कॉलबैक का प्रदर्शन। लेखक : Byte Reaper CVE : CVE-2025-7766 कमजोरी : XML बाहरी इकाई XXE के माध्यम से दूरस्थ कोड निष्पादन CVE-2025-7766 में XXE का शोषण करने के लिए...

8.6CVSS5.2AI score0.01667EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/27 10:14 p.m.3 views

lorsrf

LORSRF - 2.1 Lorsrf ist ein leistungsstarkes Web-Penetrationstest-Tool, das darauf ausgelegt ist, Parameter zu identifizieren, die für SSRF- oder Out-of-Band-Resource-Load-Angriffe ausgenutzt werden können. Durch das Hinzufügen eines OAST-Hosts wie Burp Collaborator zum Parameterwert kann Lorsrf...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 9:20 p.m.3 views

XOE

XOE Sfrutta facilmente la vulnerabilità XXE Out-Of-Band Dettagli Questo strumento crea un file xml che contiene l'IP e la porta inseriti e ascolta la connessione per rispondere :D Screenshot...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 6:31 p.m.3 views

wordpress-CVE-2022-21661

wordpress-CVE-2022-21661 versão5.8.3 caminho: http://your target/wp-admin/admin-ajax.php O tipo de injeção é out-of-band, você precisa especificar o dnslog você mesmo e substituir ceye.io POST- DADOS:"taxquery":"field":"termtaxonomyid","terms":"1 and ifselect loadfileconcat'\',select...

8CVSS7.5AI score0.97795EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/08/27 5:39 p.m.4 views

dnsobserver

DNSObserver Un comodo servizio DNS scritto in Go per aiutare nel rilevamento di diversi tipi di vulnerabilità blind. Monitora il server di un penetration tester per interazioni DNS out-of-band e invia notifiche con i dettagli della richiesta ricevuta tramite Slack. DNSObserver può aiutarti a...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 2:06 p.m.3 views

POC-CVE-2025-54988

CVE-2025-54988 - POC Dichiarazione di non responsabilità: non sono lo scopritore originale di questa vulnerabilità. Questo post documenta il mio processo di riproduzione del problema in un ambiente controllato per scopi educativi e per aiutare altri a validare i propri sistemi. I test sono stati...

9.8CVSS8.1AI score0.15038EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/27 1:45 p.m.5 views

XXEinjector

XXEinjector XXEinjector는 직접 및 대역 외 방식을 사용하여 파일 검색을 자동화합니다. 디렉터리 목록은 Java 애플리케이션에서만 작동합니다. 다른 애플리케이션의 경우 무차별 대입 방식을 사용해야 합니다. 옵션: root@kitploit: --host 필수 - 역방향 연결을 위한 우리의 IP 주소. --host=192.168.0.2 --file 필수 - XML이 포함된 유효한 HTTP 요청이 들어 있는 파일. DTD가 삽입되어야 할 지점을 "XXEINJECT"로 표시할 수도 있습니다...

5.5AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.100 views

RaspAP <=2.6.5 - Remote Command Injection

RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";". id: CVE-2021-33357 info: name: RaspAP =2.6.5 - Remote Command Injection...

9.8CVSS9.2AI score0.17446EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/27 4:24 a.m.122 views

TimeKeeper by FSMLabs - Remote Code Execution

An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named argx, with x an integer starting from 1; it is possible t...

9.8CVSS8.8AI score0.46304EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/08/27 4:06 a.m.5 views

Grassmarlin-CVE-2026-6807-XXE-POC

这是基于 CISA 于 2026 年 4 月 28 日披露的 Grassmarlin 中一个已报告漏洞的功能性概念验证代码。 查看 Grassmarlin 的代码后,我确定可能的脆弱参数与打开已保存会话时摄入的 XML 文件有关。通过构造恶意请求,我发现可以在 Grassmarlin 的消息控制台中诱发一个错误。该错误的原因和内容已从 Grassmarlin 的所有日志和输出中适当剥离。 然而,通过引用 DTD 中的外部主机,可以实现任意文件的 OOB 外泄。确实存在一些限制:系统上不能使用较新版本的 Java,这意味着 Grassmarlin 必须使用安装程序中捆绑的 Java...

5.5CVSS5.5AI score0.00197EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/27 3:45 a.m.2 views

CVE-2022-42889-POC

CVE-2022-42889-POC Una semplice applicazione demo che mostra come sfruttare la vulnerabilità CVE-2022-42889. Utilizza servizi OOB Out of Band per dimostrare i prefissi dns e url. JavaDocs per commons-text interpolation commons-text JavaDocs Esempi di interpolazioni script:javascript...

9.8CVSS7.4AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/08/27 2:27 a.m.2 views

CVE-2025-25198-PoC

CVE-2025-25198-PoC Proof-of-concept for CVE-2025-25198 एक Host header poisoning समस्या है जो Mailcow password reset flows को प्रभावित करती है। स्क्रिप्ट पोर्ट 443 पर एक स्थानीय HTTPS लिसनर शुरू करती है, स्वचालित रूप से एक वैध CSRF टोकन प्राप्त करती है, दूषित Host हेडर के साथ पासवर्ड रीसेट अनुक्रम...

8.8CVSS7AI score0.01099EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/08/27 2:26 a.m.3 views

WSUS-RCE-Mitigation-59287

🚨 KRITISCHE CYBERSICHERHEITSWARNUNG: RCE in WSUS CVE-2025-59287 🚨 ERSTELLER UND CREDITS: @esteban11121 Dieser Leitfaden wurde erstellt, um der Community zu helfen, die Schwachstelle schnell zu entschärfen. STATUS: Aktive Ausnutzung In-the-Wild bestätigt. Dies ist eine Remote Code Execution RCE...

9.8CVSS8.6AI score0.99979EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/08/27 1:02 a.m.3 views

mole

Mole Un framework per identificare e sfruttare vulnerabilità out-of-band OOB. Installazione e Configurazione Installazione di Mole Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Imposta...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 12:58 a.m.2 views

RMASmoke

RMASmoke Ein Werkzeug zum Deaktivieren des Schreibschutzes mittels eines OOB-Schreibzugriffs im TPM2 ERSTELLEN Prüfen Sie BUILDING.MD;...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder