webvulscan

WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...

CVE-2019-16097

CVE-2019-16097-batch Disclaimer Only for security research purposes. Do not use for illegal testing. You bear all consequences!!! CVE-2019-16097-batch Batch vulnerability exploitation script Add target addresses in batch to the url.txt file http://1.1.1.1 http://2.2.2.2 Run this script with Pytho...

CVE-2021-34621

CVE-2021-34621 ProfilePress 3.0 - 3.1.3 - Unauthenticated Privilege Escalation Description The user registration functionality of the plugin allowed arbitrary user meta to be supplied, including wpcapabilities, during registration which made it possible for users to register as an administrator...

WebLogic-Shiro-shell

Java Deserialization Technology Sharing This sharing covers the following points: 1. Java Serialization and Deserialization Basics 2. Why do vulnerabilities occur during deserialization? 3. Java Reflection 4. ysoserial CommonsCollections2, CommonsCollections5 5. Java ClassLoader: Several methods...

SecretsStalker

secretstalker / / / / / / / / / / / \ / - / - -/ /\ \ / / // / ' / -/ / // // / / / / /, /// /\// root@kitploit: ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY do...

audit-xss-cve-2020-7934

CVE 2020-7934 How to run CVE Requirements 1. docker Remarks it's possible put the script attack online given the js code http://yourjavascript.com/ Our Js script online for the attack html Commands for configuration 1. go to root folder of this project 2. run "sudo docker-compose up --build" 3. n...

gh-hijack-runner

gh-hijack-runner A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets. Discover more details in the following blogpost: https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization Exploitation If you can obtain a...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

CVE-2026-44506 Medplum - Exposure of OAuth client secret via dynamic registration endpoint in self-hosted configurations

Medplum is a developer platform that enables development of healthcare apps. In Medplum versions 4.1.10 through 5.1.6, the /oauth2/register endpoint could return the clientsecret of preconfigured OAuth clients defined via the defaultOAuthClients server configuration when a matching redirecturi wa...

CVE-2026-44506

Medplum , a developer platform for healthcare apps, had a flaw in versions 4.1.10 through 5.1.6 affecting self-hosted configurations . The /oauth2/register endpoint (OAuth dynamic registration) could return the client_secret of preconfigured OAuth clients defined via the defaultOAuthClients serve...

Pachine

Pachine Python implementation for CVE-2021-42278 Active Directory Privilege Escalation. Installation root@kitploit: $ pip3 install impacket Usage root@kitploit: Impacket v0.9.23 - Copyright 2021 SecureAuth Corporation usage: pachine.py -h -scan -spn SPN -impersonate IMPERSONATE -domain-netbios...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - 인증되지 않은 권한 상승 이것은 WordPress용 JSON API User = 3.9.3 플러그인의 CVE-2024-6624 취약점을 악용하는 Python 스크립트입니다. 이 도구는 인증되지 않은 공격자가 승인 없이 새 사용자를 등록하고 권한을 관리자로 상승시킬 수 있게 합니다. 사용 방법 준비 사항 1. 시스템에 Python 2.7이 설치되어 있는지 확인하십시오. 2. requests 종속성을 설치하십시오: root@kitploit: pip instal...

CVE-2024-29868

CVE-2024-29868: Use of Cryptographically Weak PRNG in Recovery Token Generation This repository contains the proof of concept related to CVE-2024-29868 that affects Apache StreamPipes from v0.69.0 through 0.93.0. Description : Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2019-16097-batch

CVE-2019-16097-batch Disclaimer For security research purposes only. Do not use for illegal testing. Bear all consequences yourself!!! CVE-2019-16097-batch Batch exploit script Add target URLs in bulk in the url.txt file http://1.1.1.1 http://2.2.2.2 Run this script with Python. The verification...

SharpSCOM

SharpSCOM A C tool for interacting with Microsoft System Center Operations Manager SCOM. This tool has been tested against SCOM Server version 10.22.10118.0. SSPI integration is provided via the nsspi library from Kevin Thompson antiduh released under the BSD-2 license. Command Line Usage...

CVE-2024-28741-northstar-agent-rce-poc

NorthStar C2 agent RCE via stored XSS Agent RCE PoC for CVE-2024-28741, a stored XSS vulnerability in NorthStar C2. This exploit works by sending multiple malicious agent registration requests to the teamserver to incrementally build a functioning javascript payload in the logs web page. This XSS...

CVE-2022-24227-updated

CVE-2022-24227 업데이트됨 - BoltWire v8.00 - 저장형 크로스 사이트 스크립팅 XSS 설명 CVE-2022-24227 업데이트됨 : BoltWire CMS 8.00 버전 에서 회원 등록 완료 페이지의 First Name 및 Last Name 필드는 7.10 버전과 마찬가지로 저장형 크로스 사이트 스크립팅XSS 공격에 취약합니다. 이러한 유형의 공격은 악성 스크립트가 실행될 수 있게 합니다. 수정 제안 이러한 필드의 사용자 입력을 무해화sanitize하십시오. 재현 단계: 1 새 회원을 생성합니다. 2 다...

wp-user-registration-vuln-checker

WordPress User Registration Checker for CVE-2026-1492 Read-only checker for owned WordPress sites that may be affected by CVE-2026-1492 in the User Registration & Membership plugin. It helps a site owner confirm plugin exposure and look for compromise indicators such as hidden administrator...

twitterBFTD

twitterBFTD Twitter back from the death looks in a user tweets history for domain names that are available for registration. See blogpost: How I hijacked top celebrities tweets including Katy Perry, Shakira… pip install pythonwhois tweepy Usage: Just run it at the root of the folder and it will...

outlook-auto-register

Outlook Auto Register Pure-protocol Microsoft Outlook bulk registration · PerimeterX solver · Web console · Proxy pool / account pool / liveness checks What it solves · Screenshots · Quick start · Anti-ban guide · 中文 · Tiếng Việt...