XWiki < 4.10.20 - Remote code execution

XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user...

avet

AntiVirus Evasion Tool AVET is not being further developed due to technical development and time constraints. AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques, as well as other methods used by...

Log4J-Scanner

Burp एक्सटेंशन जो Log4Shell CVE-2021-44228 कमजोरी को कस्टम पेलोड के साथ स्कैन करता है।...

CVE-2026-64633

CVE-2026-64633 Analyse-Payloads Dateien payloads/ — generierte Payload-Dokumente Behandlungs- und Kontrollvarianten payloads/manifest.json — Payload-Manifest mit PIDs/Paaren...

img-payloads

⚠️ Disclaimer : Il contenuto di questo repository è fornito esclusivamente a scopo educativo e informativo; gli autori non si assumono alcuna responsabilità per un uso improprio. Assicurati di ottenere la dovuta autorizzazione prima dell'uso, agisci in modo responsabile a tuo rischio e pericolo e...

JavaPayload

JavaPayload JavaPayload هي مجموعة من حمولات Java النقية pure Java payloads تُستخدم لمرحلة ما بعد الاستغلال post-exploitation انطلاقًا من استغلالات Java النقية أو من أخطاء الإعدادات الشائعة مثل مدير Tomcat غير المحمي بكلمة مرور أو منفذ التصحيح. التوثيق القديم يمكن العثور عليه في...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

PAYLOAD-LISTS

Payloads Lista de payloads: Payloads de injeção SSTI Payloads XXE Payloads XSS Falsificação de solicitação do lado do servidor SSRF Payloads de injeção SQL Payloads de redirecionamento aberto Payloads de injeção NoSQL Payloads de injeção LDAP Payloads de inclusão de arquivos Payloads de injeção d...

CVE-2025-55182POC

CVE-2025-55182 React Server Components RCE POC यह प्रोजेक्ट CVE-2025-55182 - React Server Components RSC RCE Proof of Concept है, जो दर्शाता है कि विशिष्ट परिस्थितियों में vm.runInThisContext और दुर्भावनापूर्ण ACTION payload के माध्यम से रिमोट कोड एक्ज़ीक्यूशन RCE ट्रिगर किया जा सकता है। Python...

openclaw-defender

openclaw-defender Framework di sicurezza completo che protegge gli agenti OpenClaw dagli attacchi alla supply chain delle skill scoperti nella ricerca ToxicSkills di Snyk febbraio 2026. Repository: https://github.com/nightfullstar/openclaw-defender — gli aggiornamenti di blocklist e allowlist...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...

macro_pack

macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...

ezsploit

ezsploit Alt text Linux bash script automation for metasploit Command line script for automating metasploit functions Checks for metasploit service and starts if not present Easily craft meterpreter reversetcp payloads for Windows, Linux, Android and Mac Start multiple meterpreter reversetcp...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run root@kitploit: git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide root@kitploit: | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -...

POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution

⚠️🚀 CVE-2025-24813 — Suíte de Exploração RCE Apache Tomcat root@kitploit: ⚡ Versão: 1.0 🛡️ CVE ID: CVE-2025-24813 Apache Tomcat RCE 🧬 Payloads: ysoserial / Java 🌐 Modo: Interativo + Stealth 🔬 Uso: Ético, Investigativo, Educativo 🌌 Visão Geral...

pe-bear

PE-bear PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files...

mjet

mjet Kit de exploração de extensões de gerenciamento Java JMX da Mogwai Security mjet é uma ferramenta que pode ser usada para explorar serviços JMX configurados de forma insegura. Baseia-se no post do blog "Exploiting JMX-RMI" de Braden Thomas/Accuvant...

react2shell-detector

React2Shell Detector Un'estensione Chrome per rilevare le vulnerabilità React2Shell CVE-2025-55182 e CVE-2025-66478 nelle applicazioni web. Panoramica React2Shell Detector è un'estensione del browser che aiuta i ricercatori di sicurezza e gli sviluppatori web a identificare potenziali vulnerabili...

Root-My-Galaxy

Root My Galaxy Root My Galaxy ist ein Ein-Klick-Installer für ausdrücklich unterstützte Samsung-Modell- und Kernel-Kombinationen. Die Anwendung selbst bleibt getrennt von Geräte-Offsets, nativen Exploit-Payloads und KernelSU-Build-Artefakten. Neueste Version Der Geräte-Feed und die nativen Payloa...