Lucene search
+L

214598 matches found

Kitploit
Kitploit
added 2026/09/11 9:20 a.m.5 views

CVE-2026-0257-PoC

CVE-2026-0257 — PAN-OS GlobalProtect Authentication Bypass Remote Detection PoC Detection only. No exploitation. No credentials submitted. No cookies forged. Overview CVE-2026-0257 is an authentication bypass vulnerability CWE-565 — Reliance on Cookies without Validation and Integrity Checking in...

9.1CVSS6.7AI score0.93905EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/11 9:17 a.m.108 views

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 9:16 a.m.7 views

my-CVE-2021-1675

= Print Nightmare Analysis Report :imagesdir: Figures :toc: :icons: font :figure-caption: Figure :xrefstyle: short :pdf-theme: basic-theme.yml On June 29, 2021, a very severe Windows Print Spooler vulnerability was exposed as a 0-day, with a base score of 8.8, and was published on GitHub now...

9.3CVSS7.5AI score0.99792EPSS
SaveExploits75References1
Kitploit
Kitploit
added 2026/09/11 9:15 a.m.11 views

windows_hardening

HardeningKitty 与 Windows 加固 简介 该项目最初只是一个针对 Windows 10 的简单加固清单。一段时间后,HardeningKitty 被创建出来,以简化 Windows 的加固过程。如今,HardeningKitty 支持来自 Microsoft、CIS Benchmarks、DoD STIG 和 BSI SiSyPHuS Win10 的指南。当然,还有我自己的加固清单。 这是一份加固检查清单,可用于个人和企业环境中对 Windows 10 进行加固。该检查清单可用于所有 Windows 版本,但在 Windows 10...

9CVSS7.2AI score0.99792EPSS
SaveExploits41References2
Kitploit
Kitploit
added 2026/09/11 9:14 a.m.7 views

CVE-2019-19871-AuditGuide

Update 1-22-2020 There is now a tool from FireEye that will help scan these items below. The key to this is that you need to have enough logs to go back to 1-9-2020 to have a chance to see what was done beyond the exploit was ran. If it finds .XML payload files then you need to use the informatio...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits48References2
Kitploit
Kitploit
added 2026/09/11 9:13 a.m.6 views

CVE-2022-38766

CVE-2022-38766 PoC for vulnerability in Renault ZOE Keyless System CVE-2022-38766 Introduce Companylogo AUTOCRYPT MalHyuk Overview This vulnerability raised the question of whether ZOE electric vehicles are safe form RF hacking. For this reason, the actual ZOE vehicle released this year was...

8.1CVSS7.6AI score0.00691EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 9:12 a.m.68 views

chiasmodon

Chiasmodon Chiasmodon is an OSINT tool that allows users to gather information from various sources and conduct targeted searches based on domains, Google Play applications, email addresses, IP addresses, organizations, URLs, and more. It provides comprehensive scanning capabilities, customizable...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 9:12 a.m.8 views

chiasmodon

Chiasmodon Chiasmodon es una herramienta OSINT que permite a los usuarios recopilar información de diversas fuentes y realizar búsquedas dirigidas basadas en dominios, aplicaciones de Google Play, direcciones de correo electrónico, direcciones IP, organizaciones, URL y más. Proporciona capacidade...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 9:12 a.m.48 views

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 9:11 a.m.5 views

SharpWMI

SharpWMI SharpWMI es una implementación en C de varias funcionalidades de WMI. Esto incluye consultas WMI locales/remotas, creación remota de procesos a través de win32process y ejecución remota de VBS arbitrario mediante suscripciones a eventos WMI. También se admiten credenciales alternativas...

6.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 9:06 a.m.5 views

windows_hardening

HardeningKitty and Windows Hardening Introduction The project started as a simple hardening list for Windows 10. After some time, HardeningKitty was created to simplify the hardening of Windows. Now, HardeningKitty supports guidelines from Microsoft, CIS Benchmarks, DoD STIG and BSI SiSyPHuS Win1...

9CVSS7.9AI score0.99792EPSS
SaveExploits41References6
Kitploit
Kitploit
added 2026/09/11 9:03 a.m.7 views

uofw

uOFW 本项目旨在对 PSP 基本内核与硬件进行逆向工程,以创建一套最新的系统技术文档,同时提供一个免费且开源的原始固件(vanilla firmware)。 要了解更多关于 uOFW 的信息(包括 PSP 社区使用它的示例),请查看此演示文稿。 项目的当前进展可在 Current Modules Status 维基页面上找到。 文档 PSP 内核 API 文档 PSP 硬件与软件信息可在 uofw/upspd 找到。 安装 您可以按照 uofw/uofwinst 中的说明运行 uOFW 的各个组件。 参与贡献 这个项目远未完成。我们欢迎所有人来帮助我们。 要开始,请阅读维基。其中包含...

5.9AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/11 9:02 a.m.12 views

ghidrecomp

Ghidrecomp - 命令行 Ghidra 反编译器 关于 这个 Python 命令行工具会反编译二进制文件中的所有函数,并将它们以单独的 C 文件形式写入目录:mermaid flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b -- output subgraph output subgraph decompilations direction LR ifunc1.c hfunc2.c ffuncB.c end subgraph callgraphs...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 9:02 a.m.26 views

htshells

HTSHELLS - Self contained web shells and other attacks via .htaccess files. Attacks are named in the following fashion, module.attack.htaccess and grouped by attack type in directories. Pick the one you need and copy it to a new file named .htaccess, check the file to see if it needs editing befo...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 9:01 a.m.5 views

Fastgate

TLDR This is a brief report of a vulnerability CVE-2019-12489 discovered playing around with a Fastgate modem/router of Fastweb and Ghidra. The vulnerability allow the execution of a command injection through an http request and can be used to enable an SSH shell. Firmware collection and extracti...

10CVSS8.2AI score0.06234EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/11 8:59 a.m.4 views

Powershell-C2

Powershell-C2 This attack stems off of my Powershell Payload Excel Delivery, but it uses a really cool method for Command and Control/persistence on the box. A walk-through can be found here: http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 8:58 a.m.6 views

CVE-2025-24587

CVE-2025-24587 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Email Subscription Popup Vulnerable version = 1.2.23 Component slug email-subscribe Component link https://wordpress.org/plugins/email-subscribe/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3: Injection...

7.6CVSS8AI score0.32237EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 8:57 a.m.11 views

awesome-soc

Awesome SOC An operational handbook and knowledge base to build, run and mature a SOC including CSIRT. Covering: SOC basics detection engineering threat intelligence SOC metrics/KPI SOC automation AI use cases and best practices SOP SOC playbooks Those are my view, based on my own experience as...

6AI score
SaveExploits0References30
Kitploit
Kitploit
added 2026/09/11 8:57 a.m.8 views

zeek-jetdirect

Zeek Package for zeek-jetdirect .. image::...

6AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/11 8:56 a.m.7 views

CVE-2026-69083_exploit

CVE-2026-69083 — SiYuan Unauthenticated SQL Injection Unauthenticated SQL injection in SiYuan a Go-based knowledge-base app via the asset-content search endpoint. POST /api/search/fullTextSearchAssetContent builds a raw SQL statement by concatenating the user-controlled query value straight into ...

10CVSS6AI score0.0035EPSS
SaveExploits1References1
Rows per page
Query Builder