Grafana_POC-CVE-2021-43798

Grafana-Poc Do not use this tool for illegal purposes. 1. Usage: python3 grafanahole.py Fill in ip:port in domain.txt 2. Vulnerability Impact Scope Affected versions: Grafana 8.0.0 - 8.3.0 Safe versions: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

CVE-2020-9484

CVE-2020-9484 Apache Tomcat RCE CVE-2020-9484 Affected versions are: Apache Tomcat 10.x 10.0.0-M5 Apache Tomcat 9.x 9.0.35 Apache Tomcat 8.x 8.5.55 Apache Tomcat 7.x 7.0.104...

DomainFrontDiscover

DomainFrontDiscover Scripts and results for finding domain frontable CloudFront domains A walkthrough of what happened here can be found at https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains ConfirmedFrontableDomains.txt A list of 93k+ domains that were...

CVE-2024-29943

CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE. This repository contains PoC, Exploit and Analysis Slides for CVE-2024-29943. Demo Demo.mp4 Slides Slides.pdf Reproduce Information Github Git Commit:...

dockerized-android

Dockerized Android Dockerized Android es un marco basado en contenedores que permite ejecutar un Emulador de Android dentro de Docker y controlarlo a través de un navegador. Este proyecto se ha desarrollado con el fin de proporcionar un punto de partida para integrar componentes de seguridad móvi...

cve-2023-50164

CVE-2023-50164 Vulnerable versions Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 Versions where the vulnerability is fixed Struts 2.5.33 Struts 6.3.0.2 Search Script Windows/PowerShell For PowerShell 5.1 and newer. Written by Kjetil Sigvartsen at Norsk...

sslScrape

sslScrape SSLScrape | A scanning tool for scaping hostnames from SSL certificates. Written by Peter Kim and @bbuerhaus . / ///| | // \ \ | | / \ / \ / / | | / \ | | // | | / / / /| / / | // / / / / / /|| / Usage | python sslScrape.py CIDR Range E.X | python sslScrape.py 10.100.100.0/24...

CVE-2017-5689

Script de détection pour CVE-2017-5689 Utilisation: CVE-2017-5689detector.py Exemple: CVE-2017-5689detector.py 192.168.1.253-255 Avis: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075...

hostscan

hostscan 0.2 Hostscan is a php tool which allows you to scan specific range of hosts, mostly for information gathering and testing for weak passwords. I guess it's a pentest tool, i'd created it to automate some tests that i often do. Since it's PHP, it works quite slowly compared to client-side...

attack_range

Splunk Attack Range v5 Splunk Attack Range создаёт инструментированные облачные среды AWS, Azure, GCP, имитирует атаки и пересылает данные в Splunk для разработки и тестирования правил детектирования. Что он делает: Строит лаборатории — развёртывает небольшую, приближённую к production среду...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

cve-2022-42889-text4shell-docker

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

CVE-2025-24893

PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11 , 16.4.1 and 16.5.0RC1. ⚠️ IMPORTANT — AUTHORIZED TESTING ONLY This repository contains a proof-of-concept PoC project intended for educational...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Masscanner for Laravel phpunit RCE CVE-2017-9841 deps root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Usage root@kitploit: usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help sh...

Astro Cloudflare Adapter - Server Side Request Forgery

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

CVE-2017-7529

Nginx Integer Overflow Vulnerability CVE-2017-7529 Vulnerability Information When using the nginx standard module, an attacker can obtain cache file header information in the response by sending a header request containing a maliciously crafted range field. In certain configurations, the cache fi...

killosx

killosx Use Apple CoreText exploit CVE-2012-3716 and launch an AP to affect all vulnerable Apple devices within wifi range. Installation: Run 'make install' in the killosx directory. killosx can now be run from anywhere with 'killosx'. Usage: root@kitploit: killOSX Usage - killosx -i wlan0 Run...

scanginx

Scanginx Escáner para Nginx - Vulnerabilidad de desbordamiento de entero remoto Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a la vulnerabilidad de desbordamiento de entero en el módulo de filtro de rango de nginx, lo que resulta en una fuga de información...

asf__commons-io_CVE-2021-29425_2-6

Apache Commons IO La bibliothèque Apache Commons IO contient des classes utilitaires, des implémentations de flux, des filtres de fichiers, des comparateurs de fichiers, des classes de transformation endian, et bien plus encore. Documentation Plus d'informations sont disponibles sur la page...