reconftw

reconFTW !Dockerhttps://img.shields.io/badge/docker-%230db7ed.svg?style=for-the-badge&logo=docker&logoColor=w...

Duplicate-of-CVE-2023-26982

Trudesk versión 1.2.6 Explicación de la vulnerabilidad: Se descubrió que Trudesk versión 1.2.6 contiene una vulnerabilidad de cross-site scripting XSS almacenado a través de los tickets Create/Modify Ticket Tags en el rol de administrador. Vectores de ataque: El atacante debe ir al menú de...

Grouper

Grouper 不要再使用Grouper了。请使用Grouper2！ https://github.com/l0ss/Grouper2 一个用于帮助发现Active Directory组策略中易受攻击设置的PowerShell脚本。 照片由Jon Hanson拍摄 - https://www.flickr.com/people/61952179@N00?rb=1 - https://creativecommons.org/licenses/by-sa/2.0/ 概述...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner （DSXS）是一款功能完整的跨站脚本漏洞扫描器（支持 GET 和 POST 参数），代码行数不到 100 行。 在可选设置方面，它支持 HTTP 代理以及 HTTP 头部字段 User-Agent、Referer 和 Cookie。 示例运行 root@kitploit: $ python3 dsxs.py -h Damn Small XSS Scanner DSXS 100 LoC Lines of Code v0.3a by: Miroslav Stampar @stamparm Usage:...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys versión 10.0.20348.825 root@kitploit: 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9...

CVE-2024-50849

CVE-2024-50849: Stored XSS in the WorldServer v11.8.2 A Stored Cross-Site Scripting XSS vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attacker to execute arbitrary JavaScript code. An authenticated high-privileged user must go to the "Rules" page...

CVE-2024-0195-SpiderFlow

CVE-2024-0195 代码生成控制不当（'代码注入'）严重漏洞 2024 摘要 CVE-2024-0195 是 spider-flow 0.4.3 Web 应用程序中的严重代码注入漏洞，具体存在于 FunctionController.java 文件中的 FunctionService.saveFunction 函数。攻击者可以远程注入恶意代码并在服务器上执行，从而导致应用程序完全沦陷。 影响.. 该漏洞极为严重，因为它允许在托管易受攻击的 spider-flow...

CVE-2021-24959

CVE-2021-24959 描述 WP Email Users WordPress 插件版本至 1.7.6 未对 weuselectedusers1 AJAX 动作中的 dataraw 参数进行转义，该动作可供任何已认证用户使用，允许他们执行 SQL 注入攻击。 root@kitploit: CVE CVE-2021-24959 CVSS 8.8 High Publicly Published January 31, 2022 Last Updated January 22, 2024 Researcher Krzysztof Zając - CERT PL 该工具将转储 wpuser...

CVE-2023-0157

CVE ID : CVE-2023-0157 漏洞类型 : 目录遍历 描述 : 用于 WordPress 的 All-In-One Security AIOS 插件在版本 5.1.4 及之前版本中存在目录遍历漏洞。这使得经过身份验证且具有管理员权限的攻击者能够读取服务器上任意文件的内容。 复现步骤 : root@kitploit: Just create a test.pdf file with JavaScript content necessarily in one line and display the file in the Host system logs. An examp...

firefox-devtools-mcp v0.10.2

Firefox DevTools MCP Model Context Protocol server for automating Firefox via WebDriver BiDi through Selenium WebDriver. Works with Claude Code, Claude Desktop, Cursor, Cline and other MCP clients. Repository: https://github.com/mozilla/firefox-devtools-mcp Note : This MCP server requires a local...

CVE-2024-4443-Poc

CVE-2024-4443-Poc CVE-2024-4443 Business Directory Plugin – Easy Listing Directories for WordPress execute \business-directory-plugin\includes\helpers\class-listing-search.php:88 WPBDPListingSearch-traversetree \business-directory-plugin\includes\helpers\class-listing-search.php:185...

policy_sentry

Policy Sentry IAM 最小权限策略生成器。 教程 安装 包管理器 Shell 补全 步骤 1：创建模板 步骤 2：复制/粘贴 ARN 步骤 3：write-policy 命令 速查表 策略编写速查表 IAM 数据库查询速查表 本地初始化（可选） 其他用法 命令 Python 库用法 Docker Terraform 参考 文档 有关详细说明和完整文档，请访问 ReadTheDocs 上的项目。 查看 Salesforce 工程博客文章 了解 Policy Sentry。 概述 手动编写安全高效的 IAM 策略既繁琐又低效。许多基础设施即代码 IaC 开发者都有过这样的经历：...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

XXEinjector

XXEinjector XXEinjector 自动化使用直接和带外方法检索文件。目录列表仅适用于 Java 应用程序。其他应用程序需要使用暴力破解方法。 Options: root@kitploit: --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file Mandatory - file containing valid HTTP request with xml. You can also mark with "XXEINJECT" a point where DTD...

Exploit for CVE-2026-0920

CVE-2026-0920 - LA-Studio Element Kit / Unauthenticated Privil...

Basileak

Basileak "El dojo siempre estuvo abierto. Los pergaminos nunca estuvieron sellados. Solo tenías que saber cómo pedirlo." — El Samurái Fracasado Basileak es un modelo de lenguaje grande intencionalmente vulnerable, construido para el entrenamiento en inyección de prompts, la educación en red team ...

dolos_cloak

Dolos Cloak Dolos Cloak is a python script designed to help network penetration testers and red teamers bypass 802.1x solutions by using an advanced man-in-the-middle attack. The tool is able to piggyback on the wired connection of a victim device that is already allowed on the target network...

CVE-2026-37065

CVE-2026-37065 Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion. To exploit the vulnerability, an authenticated attacker with the role of superadmin can send a specially crafted POST request to the affected endpoint using the url parameter remove to control the file to be...

CVE-2023-24055

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your own risk! configscanner.py A simple Parser for the KeePass config file running unter Windows. The tool will open the directory %APPDATA%\Roaming\KeePass\KeePass.config.xml and will output all triggers. The triggers Execute command line...

CVE-2025-55886

CVE-2025-55886 Description An Insecure Direct Object Reference IDOR vulnerability was discovered in ARD. The flaw exists in the feuid parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without...