xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

cliam

cliam Strumento di enumerazione delle autorizzazioni IAM multi-cloud. Attualmente copre: AWS GCP Azure Oracle 🚧 WIP Descrizione Cliam è un semplice identificatore di permessi cloud. Ci sono due componenti principali nella CLI. La maggior parte dei permessi enumerati sono permessi di tipo list,...

wphardening

WPHardening Erhöhen Sie die Sicherheit jeder WordPress-Installation. ❮ HINWEIS ❯ Dieses Tool veröffentlicht regelmäßig neue Versionen. Stellen Sie sicher, dass Sie Ihre Abhängigkeiten häufig aktualisieren, um die neueste Version zu erhalten. Informationen zu den neuen Funktionen finden Sie im...

wphardening

WPHardening Fortify the security of any WordPress installation. ❮ NOTE ❯ This tool releases new versions on a regular basis. Make sure to update your dependencies frequently to get the latest version. Check out the changelog or CHANGELOG.md to learn about the new features. Installation Installing...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

CVE-2026-36213

CVE-2026-36213 CVE-2026-36213 | Escalada de Privilégio Local no MEmu Android Emulator 9.2.7.0 via Permissões Inseguras de Binário de Serviço | Corrigido na versão 9.3.2 CVE-2026-36213 — MEmu Android Emulator 9.2.7.0 LPE Resumo Uma vulnerabilidade de Escalada de Privilégio Local LPE no MEmu Androi...

GCPBucketBrute

GCPBucketBrute Uno script per enumerare i bucket di Google Storage, determinare quale accesso hai ad essi e stabilire se possono essere soggetti a escalation dei privilegi. Questo script opzionalmente accetta credenziali di account utente/di servizio GCP e una parola chiave. Successivamente, verr...

s3_objects_check

Controllo oggetti S3 Descrizione Valutazione whitebox dei permessi effettivi sugli oggetti S3, per identificare oggetti accessibili pubblicamente. Consente di identificare gli oggetti accessibili pubblicamente, così come gli oggetti accessibili a AuthenticatedUsers utilizzando un profilo...

WindowsDACLEnumProject

Windows DACL Enum Project Una raccolta di strumenti per enumerare e analizzare le DACL di Windows Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsDACLEnumProject...

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...

CVE-2026-59292

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to $java.io.tmpdir/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring...

CVE-2025-47962-POC

CVE-2025-47962-POC Reproduktionsprozess: i686-w64-mingw32-gcc -shared -o CRYPTBASE.dll poc.c -lkernel32 copy CRYPTBASE.dll "C:\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\CRYPTBASE.dll" net stop IpOverUsbSvc net start IpOverUsbSvc Erklärung: IpOverUsbSvc root@kitploit: SERVICENAME: IpOverUsbSvc...

EUVD-2026-67180

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to $java.io.tmpdir/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring...

CVE-2020-14066

CVE-2020-14066 Icewarp Email Server 12.3.0.1 insecurepermissions https://nvd.nist.gov/vuln/detail/CVE-2020-14066...

CVE-2026-81682

opensslencrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. Attackers can read decrypted output files created by the GUI as unprivileged local users on multi-user systems...

CVE-2024-34329

CVE-2024-34329 Produto Testado: Datacard XPS Card Printer Driver Versão: = 8.4 Descrição: O aplicativo é propenso a uma vulnerabilidade de Escalação de Privilégio Local LPE devido a permissões inseguras de arquivo/pasta em sua instalação padrão, pela qual concede a todos os direitos de controle...

Electrolink-FM-DAB-TV

Electrolink-FM-DAB-TV für CVE-2025-51040 Das Electrolink FM/DAB/TV Transmitter Web Management System enthält eine Schwachstelle für unbefugten Zugriff, die Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07 und Display v1.4, v1.2 betrifft. Beschreibung Das Electrolink...

CVE-2021-39273-CVE-2021-39274

CVE-2021-39273 Nella versione gratuita di XeroSecurity Sn1per 9.0, durante l'esecuzione dell'applicazione vengono impostati permessi non sicuri 0777, consentendo a un utente non privilegiato di modificare l'applicazione, i moduli e i file di configurazione. Ciò porta all'esecuzione di codice...

nimbostratus

Nimbostratus Tools for fingerprinting and exploiting Amazon cloud infrastructures. These tools are a PoC which I developed for my "Pivoting in Amazon clouds" talk, developed using the great boto library for accessing Amazon's API. For more information visit the project page Feel free to report...

CVE-2020-14066

Icewarp Email Server 12.3.0.1 insecurepermissions https://nvd.nist.gov/vuln/detail/CVE-2020-14066...