Lucene search
+L

35368 matches found

Kitploit
Kitploit
added 2026/09/13 6:18 a.m.5 views

CVE-2024-22120-RCE-with-gopher

Uso root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Escenario de ejemplo Has identificado un servidor Zabbix ejecutándose en la IP 192.168.1.100, y tienes acceso a un usuario con privilegios limitados con los siguientes detalles: ID de sesión sid:...

9.1CVSS8.2AI score0.76618EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 6:06 a.m.7 views

CheeseTools

CheeseTools This repository has been made basing onto the already existing MiscTool, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context ...

6.1AI score
SaveExploits0References15
Kitploit
Kitploit
added 2026/09/13 4:28 a.m.8 views

printix-CVE-2022-29552

CVE-2022-29552 Versión Simple | Imprimible Una vulnerabilidad de "Uso Incorrecto de APIs Privilegiadas" en PrintixService.exe, en "Printix Secure Cloud Print Management" de Kofax Printix, Versión 1.3.1156.0 y anteriores, permite a un atacante local o remoto la capacidad de cambiar cualquier valor...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:48 a.m.7 views

EntraFalcon

EntraFalcon EntraFalcon is a PowerShell-based assessment tool for pentesters, security analysts, and system administrators to evaluate the security posture of a Microsoft Entra ID environment. Designed for ease of use, EntraFalcon runs on PowerShell 5.1 and 7, supports both Windows and Linux, and...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:35 a.m.6 views

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — Research PoC Overview This repository contains research material and proof-of-concept code developed during the analysis of the 2026 Adobe Acrobat Reader in-the-wild exploit chain involving: Prototype Pollution Interna...

8.6CVSS7.4AI score0.07086EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/13 3:27 a.m.5 views

CVE-2021-31762

CSRF-to-RCE ..| CVE-2021-31762 |.. Descripción : Explotando un ataque de falsificación de petición en sitios cruzados CSRF para crear un usuario privilegiado a través de la función de añadir usuarios de Webmin y luego obtener una shell inversa a través de la función de procesos en ejecución de...

8.8CVSS7.8AI score0.0878EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 3:05 a.m.5 views

Shwmae

Shwmae Shwmae shuh-my is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context. root@kitploit: Shwmae Copyright C 2024 Shwmae enum Default Ve...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:03 a.m.8 views

ACLight

ACLight A tool for advanced discovery of Privileged Accounts - including Shadow Admins. ACLight2 is the improved version of the tool. Shadow Admins Research The tool version 1 was published as part of the "Shadow Admins" research - more details on "Shadow Admins" are in the blog post:...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 2:47 a.m.12 views

TaskHound

Windows Privileged Scheduled Task Discovery Tool for fun and profit. TaskHound hunts for Windows scheduled tasks that run with privileged accounts and stored credentials. It enumerates tasks over SMB, parses XMLs, and identifies high-value attack opportunities through BloodHound integration. For...

6AI score
SaveExploits0References9
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.53 views

W&B Weave Server - Remote Arbitrary File Leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin. id:...

8.8CVSS8.2AI score0.05015EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.80 views

Klog Server <=2.41 - Unauthenticated Command Injection

Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...

10CVSS8.4AI score0.88099EPSS
SaveExploits9References5
Kitploit
Kitploit
added 2026/09/13 1:01 a.m.88 views

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

6.3AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/13 12:39 a.m.6 views

zBang

zBang is a special risk assessment tool that detects potential privileged account threats in the scanned network. Organizations and red teamers can utilize zBang to identify potential attack vectors and improve the security posture of the network. The results can be analyzed with the graphic...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 12:33 a.m.7 views

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support PoC de RCE pre-autenticación !WARNING Este script está destinado únicamente a fines educativos y de investigación. No lo utilices contra sistemas sin permiso explícito. El acceso o las pruebas no autorizados son ilegales y poco éticos. Lee el DESCARGO DE...

9.9CVSS8.2AI score0.895EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/12 7:13 p.m.8 views

CVE-2019-10008

CVE-2019-10008 ManageEngine Service Desk Plus 9.3 Secuestro de cuenta privilegiada Fecha: 30-03-2019 Autor del exploit: Ata Hakçıl, Melih Kaan Yıldız Vendor: ManageEngine Página del vendor:www.manageengine.com Producto: Service Desk Plus Versión: 10.0 Probado en: Windows 10 64 bits CVE : 2019-100...

8.8CVSS7.7AI score0.19395EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/12 6:51 p.m.7 views

badPods

Bad Pods Una colección de manifiestos que crean pods con diferentes privilegios elevados. Demuestra rápidamente el impacto de permitir atributos de pod sensibles a la seguridad como hostNetwork, hostPID, hostPath, hostIPC y privileged. Para obtener más información, consulte nuestra publicación de...

6AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/12 5:54 p.m.324 views

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

7AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/12 3:53 p.m.10 views

Reaper

「💀」 About Reaper Reaper is a proof-of-concept designed to exploit BYOVD Bring Your Own Vulnerable Driver driver vulnerability. This malicious technique involves inserting a legitimate, vulnerable driver into a target system, which allows attackers to exploit the driver to perform malicious action...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 2:03 p.m.9 views

CVE-2021-32160

..| XSS to Privileged user |.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

6.1CVSS6.5AI score0.02001EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 2:01 p.m.4 views

CVE-2024-11467

CVE-2024-11467 macOS 운영 체제는 XPC 서비스를 사용하여 기본적인 프로세스 간 통신을 수행합니다. 예를 들어 XPC Service 데몬과 타사 애플리케이션의 권한 있는 도우미 도구 간 통신이 이에 해당합니다. VMware Horizon Client는 설치 시 /Library/PrivilegedHelperTools/ 디렉토리에 com.vmware.horizon.CDSHelper 권한 있는 도우미를 등록합니다. 또한, 위에 표시된 대로 권한 있는 도우미가 들어오는 XPC 연결을 수신 대기하기 위해 mach 이름...

7.8CVSS6AI score0.00188EPSS
SaveExploits1
Rows per page
Query Builder