Lucene search
+L

11795 matches found

Kitploit
Kitploit
added 2026/09/04 12:51 a.m.19 views

webvulscan

WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 11:48 p.m.5 views

CVE-2019-16097

CVE-2019-16097-batch Disclaimer Only for security research purposes. Do not use for illegal testing. You bear all consequences!!! CVE-2019-16097-batch Batch vulnerability exploitation script Add target addresses in batch to the url.txt file http://1.1.1.1 http://2.2.2.2 Run this script with Pytho...

6.5CVSS6.5AI score0.22443EPSS
SaveExploits5References3
Kitploit
Kitploit
added 2026/09/03 10:00 p.m.7 views

CVE-2021-34621

CVE-2021-34621 ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation Description The user registration functionality of the plugin allowed arbitrary user meta to be supplied, including wpcapabilities, during registration which made it possible for users to register as an administrator...

9.8CVSS7.2AI score0.68862EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/03 9:26 p.m.9 views

WebLogic-Shiro-shell

Java Deserialization Technology Sharing This sharing covers the following points: 1. Java Serialization and Deserialization Basics 2. Why do vulnerabilities occur during deserialization? 3. Java Reflection 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader: Several methods...

9.8CVSS7.3AI score0.97116EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/03 8:50 p.m.5 views

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 8:18 p.m.6 views

audit-xss-cve-2020-7934

CVE 2020-7934 How to run CVE Requirements 1. docker Remarks it's possible put the script attack online given the js code http://yourjavascript.com/ Our Js script online for the attack html Commands for configuration 1. go to root folder of this project 2. run "sudo docker-compose up --build" 3. n...

5.4CVSS6AI score0.04457EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/03 7:37 p.m.3 views

gh-hijack-runner

gh-hijack-runner A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets. Discover more details in the following blogpost: https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization Exploitation If you can obtain a...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 7:35 p.m.43 views

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

5.9AI score
SaveExploits0
Cvelist
Cvelist
added 2026/09/03 7:04 p.m.20 views

CVE-2026-44506 Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations

Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, the /oauth2/register endpoint could return the clientsecret of preconfigured OAuth clients defined via the defaultOAuthClients server configuration when a matching redirecturi wa...

8.2CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/03 7:04 p.m.6 views

CVE-2026-44506

Medplum , a developer platform for healthcare apps, had a flaw in versions 4.1.10 through 5.1.6 affecting self-hosted configurations . The /oauth2/register endpoint (OAuth dynamic registration) could return the client_secret of preconfigured OAuth clients defined via the defaultOAuthClients serve...

8.2CVSS5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/03 6:25 p.m.3 views

Pachine

Pachine Python implementation for CVE-2021-42278 Active Directory Privilege Escalation. Installation root@kitploit: $ pip3 install impacket Usage root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios...

8.8CVSS6.9AI score0.7717EPSS
SaveExploits10References4
Kitploit
Kitploit
added 2026/09/03 6:07 p.m.5 views

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - 인증되지 않은 권한 상승 이것은 WordPress용 JSON API User = 3.9.3 플러그인의 CVE-2024-6624 취약점을 악용하는 Python 스크립트입니다. 이 도구는 인증되지 않은 공격자가 승인 없이 새 사용자를 등록하고 권한을 관리자로 상승시킬 수 있게 합니다. 사용 방법 준비 사항 1. 시스템에 Python 2.7이 설치되어 있는지 확인하십시오. 2. requests 종속성을 설치하십시오: root@kitploit: pip instal...

9.8CVSS5.9AI score0.0287EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/03 4:17 p.m.4 views

CVE-2024-29868

CVE-2024-29868: Use of Cryptographically Weak PRNG in Recovery Token Generation This repository contains the proof of concept related to CVE-2024-29868 that affects Apache StreamPipes from v0.69.0 through 0.93.0. Description : Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

9.1CVSS5.8AI score0.05995EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/03 2:47 p.m.3 views

CVE-2019-16097-batch

CVE-2019-16097-batch Disclaimer For security research purposes only. Do not use for illegal testing. Bear all consequences yourself!!! CVE-2019-16097-batch Batch exploit script Add target URLs in bulk in the url.txt file http://1.1.1.1 http://2.2.2.2 Run this script with Python. The verification...

6.5CVSS6.5AI score0.22443EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/03 2:01 p.m.4 views

SharpSCOM

SharpSCOM A C tool for interacting with Microsoft System Center Operations Manager SCOM. This tool has been tested against SCOM Server version 10.22.10118.0. SSPI integration is provided via the nsspi library from Kevin Thompson antiduh released under the BSD-2 license. Command Line Usage...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 2:01 p.m.2 views

CVE-2024-28741-northstar-agent-rce-poc

NorthStar C2 agent RCE via stored XSS Agent RCE PoC for CVE-2024-28741, a stored XSS vulnerability in NorthStar C2. This exploit works by sending multiple malicious agent registration requests to the teamserver to incrementally build a functioning javascript payload in the logs web page. This XSS...

8.8CVSS7.2AI score0.78158EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/03 1:42 p.m.5 views

CVE-2022-24227-updated

CVE-2022-24227 업데이트됨 - BoltWire v8.00 - 저장형 크로스 사이트 스크립팅 XSS 설명 CVE-2022-24227 업데이트됨 : BoltWire CMS 8.00 버전 에서 회원 등록 완료 페이지의 First Name 및 Last Name 필드는 7.10 버전과 마찬가지로 저장형 크로스 사이트 스크립팅XSS 공격에 취약합니다. 이러한 유형의 공격은 악성 스크립트가 실행될 수 있게 합니다. 수정 제안 이러한 필드의 사용자 입력을 무해화sanitize하십시오. 재현 단계: 1 새 회원을 생성합니다. 2 다...

6.1CVSS6.3AI score0.02256EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/03 1:09 p.m.2 views

wp-user-registration-vuln-checker

WordPress User Registration Checker for CVE-2026-1492 Read-only checker for owned WordPress sites that may be affected by CVE-2026-1492 in the User Registration & Membership plugin. It helps a site owner confirm plugin exposure and look for compromise indicators such as hidden administrator...

9.8CVSS7.4AI score0.24229EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/03 11:57 a.m.3 views

twitterBFTD

twitterBFTD Twitter back from the death looks in a user tweets history for domain names that are available for registration. See blogpost: How I hijacked top celebrities tweets including Katy Perry, Shakira… pip install pythonwhois tweepy Usage: Just run it at the root of the folder and it will...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 3:36 a.m.4 views

outlook-auto-register

Outlook Auto Register Pure-protocol Microsoft Outlook bulk registration · PerimeterX solver · Web console · Proxy pool / account pool / liveness checks What it solves · Screenshots · Quick start · Anti-ban guide · 中文 · Tiếng Việt...

5.4AI score
SaveExploits0References7
Rows per page
Query Builder