AddUser-SAMR

AddUser-SAMR Crear administradores locales usando la API SAMR, operando a un nivel más bajo que net.exe, el cmdlet New-LocalUser de PowerShell o la API NetUserAdd. Requiere privilegios de Administrador y si el usuario existe, se añade al grupo pero la contraseña no se actualiza. Hay 4...

CVE-2024-6387

Comprobador de Vulnerabilidad CVE-2024-6387 de OpenSSH Este script en Python verifica si los servidores están ejecutando una versión vulnerable de OpenSSH susceptible a la vulnerabilidad CVE-2024-6387. Escanea las direcciones IP o rangos de red especificados en busca del banner de OpenSSH y lo...

oracleShell

oracleShell Oracle Database Command Execution Test Environment - DBA Privileges: SELECT FROM v$version root@kitploit: Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1...

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0 allows remote code execution when the attacker has administrator privileges by writing a malicious C script and executing it on the server via server settings in the administrator control panel on port 8101, by default. How to use: python CVE-2023-30459.py -t...

CVE-2017-16997-poc

Usage Run ./CVE-2017-16997.sh . If run as non-root user, make sure you can elevate to root via sudo. Details 1. https://nvd.nist.gov/vuln/detail/CVE-2017-16997...

CVE-2026-52199

CVE-2026-52199 : Unauthenticated Remote Code Execution in UZ801 4G Router Vulnerability Summary A critical Incorrect Access Control vulnerability exists in the Generic OEM UZ801v2.1 4G LTE Router Firmware V3.4.3. The device improperly exposes an unauthenticated Android Debug Bridge ADB daemon...

CVE-2022-36446

CVE-2022-36446 CVE-2022-36446 - Webmin 1.996 Remote Code Execution Access to the "Software Package Updates" module is required to trigger the vulnerability. Users with access to this module can run commands with root privileges on the system by performing OS Command Injection during a new package...

macOS-enterprise-privileges

Privileges Transparent, free, and secure admin rights management for macOS. Privileges is a free macOS application designed for modern enterprise environments. It gives users temporary administrator privileges when needed without granting permanent admin rights. The application is built with...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

airgorah

Airgorah A WiFi security auditing software mainly based on aircrack-ng tools suite Installation | Usage | Credits Airgorah is a WiFi security auditing software that can capture nearby WiFi traffic, discover clients connected to access points, perform deauthentication attacks, capture handshakes,...

r0ak

r0ak r0ak is a Windows command-line utility that enables you to easily read, write, and execute kernel-mode code with some limitations from the command prompt, without requiring anything else other than Administrator privileges. Quick Peek root@kitploit: r0ak v1.0.0 -- Ring 0 Army Knife...

CVE-2020-5844

CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script root@kitploit: Usage: python3 CVE-2020-5844.py URL USER...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 es una omisión de autenticación en el software PAN-OS de Palo Alto Networks que permite a un atacante no autenticado con acceso de red a la interfaz web de gestión obtener privilegios de administrador de PAN-OS para realizar acciones administrativas, manipular la...

CVE-2019-9193byVulHub

CVE-2019-9193byVulHub PostgreSQL Arbitrary Command Execution with Admin Privileges CVE-2019-9193 Description PostgreSQL is a powerful open-source relational database management system. A vulnerability present in versions 9.3 through 11 allows administrators or users with COPY TO/FROM PROGRAM...

LegacyHive

LegacyHive : Vulnerabilidad de elevación de privilegios por carga arbitraria de hive en el servicio de perfil de usuario de Windows El PoC requiere las credenciales de otro usuario estándar y un tercer nombre de usuario que puede ser una cuenta de administrador. Si el PoC tiene éxito, terminará...

CVE-2018-8090

CVE-2018-8090 DLL Hijacking in Quickheal Total Security/ Internet Security/ Antivirus Pro Installers Affected Products: Quick Heal Total Security - 17.00 Quick Heal Internet Security - 17.00 Quick Heal AntiVirus Pro - 17.00 Affected Installers: Quick Heal Total Security 64 bit 17.00 QHTS64.exe,...

CVE-2025-21293

CVE-2025-21293 CVE-2025-21293 es una vulnerabilidad de elevación de privilegios en Active Directory Domain Services. Permite que "Network Configuration Operators" ejecuten código con privilegios SYSTEM a través de Windows Performance Counters. Las versiones afectadas de Windows incluyen Windows 1...

firepwner

CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example o...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 es una vulnerabilidad crítica en WSO2 Identity Server, una plataforma de gestión de identidad y acceso de código abierto. La vulnerabilidad permite a atacantes remotos cargar archivos JSP maliciosos que pueden ejecutar comandos arbitrarios en el sistema objetivo con...