829 matches found
CVE-2022-42889-POC
CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...
w3af
w3af - إطار عمل هجوم وتدقيق تطبيقات الويب w3af هو ماسح أمان تطبيقات ويب مفتوح المصدر يساعد المطورين ومختبر الاختراق على تحديد واستغلال الثغرات في تطبيقات الويب الخاصة بهم. الماسح قادر على تحديد أكثر من 200 ثغرة، بما في ذلك Cross-Site Scripting، SQL injection و OS commanding. المساهمة طلبات السحب...
XXEinjector
XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: root@kitploit: --host Mandatory - our IP address for reverse connections...
Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection
Nagios XI 5.5.6 through 5.7.5 is susceptible to authenticated remote command injection. There is improper sanitization of authenticated user-controlled input by a single HTTP request via the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php. This in turn can lead to...
RaspAP <=2.6.5 - Remote Command Injection
RaspAP 2.6 to 2.6.5 allows unauthenticated attackers to execute arbitrary OS commands via the "iface" GET parameter in /ajax/networking/getnetcfg.php, when the "iface" parameter value contains special characters such as ";". id: CVE-2021-33357 info: name: RaspAP =2.6.5 - Remote Command Injection...
mole
Mole إطار عمل لتحديد واستغلال الثغرات خارج النطاق OOB. التثبيت والإعداد تثبيت Mole بايثون = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive تعيين مفتاح API في config.yml يجب أن يكون نفسه للعميل...
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
sqlmap
sqlmap sqlmap è uno strumento open source per il penetration testing. Il suo scopo è quello di rendere automatico il processo di scoperta ed exploit di vulnerabilità di tipo SQL injection al fine di compromettere database online. Dispone di un potente motore per la ricerca di vulnerabilità, molti...
Arecibo
Arecibo Endpoint per l'esfiltrazione out-of-band DNS e HTTP Autori Juan Manuel Fernández @TheXC3LL e Pablo Martinez @Xassiz Esfiltrazione DNS Crea un nuovo token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Ora puoi usare questo token identificativo...
xcat
XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...
cve-2022-33891
cve-2022-33891 Uso: root@kitploit: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py -...
lorsrf
LORSRF - 2.1 Lorsrf è un potente strumento di penetration testing web progettato per identificare parametri che possono essere sfruttati per attacchi SSRF o di caricamento di risorse out-of-band. Aggiungendo un host OAST come Burp Collaborator al valore del parametro, Lorsrf può generare una...
dnsobserver
DNSObserver Un comodo servizio DNS scritto in Go per aiutare nel rilevamento di diversi tipi di vulnerabilità blind. Monitora il server di un penetration tester per interazioni DNS out-of-band e invia notifiche con i dettagli della richiesta ricevuta tramite Slack. DNSObserver può aiutarti a...
shennina
Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...
AirFlow < 2.4.0 - Remote Code Execution
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0. id: CVE-2022-40127 info: name: AirFlow 2.4.0 -...
TimeKeeper by FSMLabs - Remote Code Execution
An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsamplebacklog call. Some query parameters are passed directly in the URL and named argx, with x an integer starting from 1; it is possible t...
CVE-2021-3262
CVE-2021-3262 Iniezione SQL in TripSpark VEO Transportation / NovusEDU La pagina di ricerca pubblica "Student Busing Information" distribuita con TripSpark VEO Transportation accetta input non autenticati nel corpo della richiesta POST e li concatena in una query SQL Server senza parametrizzazion...
Grassmarlin-CVE-2026-6807-XXE-POC
Este é um código de prova de conceito funcional baseado na divulgação da CISA sobre uma vulnerabilidade relatada no Grassmarlin, publicada em 28/04/2026. Analisando o código do Grassmarlin, determinei que os parâmetros provavelmente vulneráveis estavam relacionados aos arquivos XML ingeridos ao...
CVE-2025-25198-PoC
CVE-2025-25198-PoC Proof-of-concept per CVE-2025-25198, un problema di avvelenamento dell'header Host che interessa i flussi di reimpostazione della password di Mailcow. Lo script avvia un listener HTTPS locale sulla porta 443, ottiene automaticamente un token CSRF valido, invia la sequenza di...