Lucene search
+L

214367 matches found

Kitploit
Kitploit
added 2026/09/09 5:54 a.m.4 views

pwn2own2020

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities Overview This repository contains exploitation and technical details of our Pwn2Own 2020 winning submission targeting Apple Safari with a kernel escalation of privilege for macOS 10.15.3. For further information, you can...

6.3AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/09 5:54 a.m.5 views

CVE-2022-25636

CVE-2022-25636 netfilter Kernel Privilege Escalation toc Vulnerability Overview Vulnerability ID: CVE-2022-25636 Product: linux kernel - netfilter Affected versions: linux kernel 5.4 Impact: Heap out-of-bounds write in the netfilter kernel module, can lead to privilege escalation when SYSADMIN is...

7.8CVSS7.4AI score0.02633EPSS
SaveExploits6References2
Kitploit
Kitploit
added 2026/09/09 5:52 a.m.10 views

sickle-pdk

Sickle - Payload Development Kit Sickle is a tool I originally developed to help me be more effective, in both developing and understanding shellcode. However, throughout the course of its development and usage It has evolved into a payload development kit. Although current modules are mostly aim...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 5:52 a.m.6 views

CF-Hero

CF-Hero CF-Hero What's it? • Features • Background • Installation • Usage • Running cf-hero • ZoomEye Sponsor • To Do What's it? CF-Hero is a comprehensive reconnaissance tool developed to discover the real IP addresses of web applications protected by Cloudflare. It performs multi-source...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 5:49 a.m.4 views

filtron

Filtron Proxy HTTP inverso para filtrar solicitudes según diferentes reglas. Se puede usar entre el servidor web de producción y el servidor de aplicaciones para evitar abusos del backend de la aplicación. El propósito original de este programa era defender searx, pero puede usarse para proteger...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/09 5:49 a.m.78 views

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

5.6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/09 5:49 a.m.5 views

friman

friman Do you ever feel that finding the right Frida version for the job is like threading a needle? With different projects, devices, and debugging scenarios all requiring specific builds, keeping track of Frida versions can quickly become a tedious balancing act. friman pronounced "free man " i...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 5:48 a.m.9 views

Slackor

Slackor Maintained at https://github.com/n00py/Slackor A Golang implant that uses Slack as a command and control channel. This project was inspired by Gcat and Twittor. This tool is released as a proof of concept. Be sure to read and understand the Slack App Developer Policy before creating any...

6AI score
SaveExploits0References22
Kitploit
Kitploit
added 2026/09/09 5:47 a.m.7 views

CVE-2021-43503

Warning The vulnerability has been revoked Override This is Abount CVE-2021-43503, I can not replicate this vulnerability through exp Requirement PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c $this-manager-method=$...

6AI score
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/09 5:46 a.m.4 views

CVE-2025-31161

CrushFTP CVE-2025-31161 Exploit Tool 🔓 Advanced detection and exploitation tool for CVE-2025-31161 vulnerability in vulnerable CrushFTP versions. CVE-2025-31161 is a critical authentication bypass vulnerability in the CrushFTP Web Interface. By manipulating the HTTP Authorization header, an...

9.8CVSS8.5AI score0.99976EPSS
SaveExploits18
Kitploit
Kitploit
added 2026/09/09 5:46 a.m.29 views

cve-mcp-server

🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...

6.2AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/09 5:45 a.m.4 views

CVE-2024-22939

target:https://github.com/sunkaifei/FlyCms version: v1.0 FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /system/article/categoryedit Poc root@kitploit: history.pushState'', '', '/' Success:...

8.8CVSS5.8AI score0.0069EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 5:44 a.m.4 views

Joomla_CVE-2015-8562

JoomlaCVE-2015-8562 A proof of concept for Joomla's CVE-2015-8562 vulnerability Object Injection RCE Intro/Changelog This PoC is the second version of the implementation hosted at exploit-db. root@kitploit: -Fixed regenerate session -Added the option to switch from X-Forwarded-For to User-Agent...

7.5CVSS7.9AI score0.98283EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/09/09 5:43 a.m.8 views

pyod

.. image:: https://raw.githubusercontent.com/yzhao062/pyod/master/brand/pyod-icon.svg :target: https://pyod.dev :alt: PyOD Ecosystem :width: 84px Python Outlier Detection PyOD 3 PyOD 3: Agentic Anomaly Detection At Scale |badgewebsite| |badgepypi| |badgeanaconda| |badgedocs| |badgestars|...

5.9AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/09 5:43 a.m.9 views

RsWindowsThingies

RsWindowsThingies Windows Thingies... but in Rust Tools listenmft Watch an entries' values change. root@kitploit: listenmft 0.2.0 Matthew Seyer See the differences in MFT attirbues. USAGE: listenmft.exe OPTIONS FLAGS: -h, --help Prints help information -V, --version Prints version information...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 5:42 a.m.8 views

awesome-termux-hacking

seeker - Accurately Locate Smartphones using Social Engineering. ANDRAX - ANDRAX is a Penetration Testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution, But more powerful than a common...

6AI score
SaveExploits0References704
Kitploit
Kitploit
added 2026/09/09 5:41 a.m.4 views

CVE-2025-51868

CVE-2025-51868 Vulnerability description Dippyis a popular website to chat with millions of proactive AI characters. Dippy allows users to chat with characters based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to...

7.5CVSS5.8AI score0.00436EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 5:40 a.m.10 views

brutespray

Brutespray Creado por: Shane Young/@x90sky && Jacob Robles/@shellfail Inspirado por: Leon Johnson/@sho-luv Descripción Brutespray intenta automáticamente credenciales por defecto en los servicios descubiertos. Toma la salida de escaneo de Nmap GNMAP/XML, Nessus, Nexpose, JSON y listas, y luego...

6AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/09/09 5:40 a.m.37 views

brutespray

Brutespray Created by: Shane Young/@x90sky && Jacob Robles/@shellfail Inspired by: Leon Johnson/@sho-luv Description Brutespray automatically attempts default credentials on discovered services. It takes scan output from Nmap GNMAP/XML, Nessus, Nexpose, JSON, and lists, then brute-forces...

5.9AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/09/09 5:39 a.m.93 views

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

5.9AI score
SaveExploits0
Rows per page
Query Builder