longtongue

Generate customized Password/Passphrase wordlist based on target information Coded with 💙 by edoardottt Share on Twitter! Installation ⬇️ pipx root@kitploit: pipx install longtongue Source root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r...

waymore

Acerca de - v8.9 La idea detrás de waymore es encontrar aún más enlaces de Wayback Machine además de otras fuentes que otras herramientas existentes. 👉 La mayor diferencia entre waymore y otras herramientas es que también puede descargar las respuestas archivadas para las URLs en Wayback Machine ...

CVE-2026-90514

SourceCodester School Registration and Fee System 1.0 is vulnerable to SQL injection via the Status argument in the file /bilal/normal/save_stud.php (function unspecified). The attack is remote and requires no authentication , rated CVSS 3.1: 7.3 (HIGH) with low impact on confidentiality, integri...

EUVD-2026-76996

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-90514 SourceCodester School Registration and Fee System save_stud.php sql injection

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/savestud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2000-0979

CVE-2000-0979 CVE-2000-0979.rb es la herramienta independiente para explotar CVE-2000-0979 contra el servicio SMB de Windows 95. msf20000979.rb es el módulo de Metasploit. Puedes copiarlo en ⁨metasploit-framework⁩ ▸ ⁨modules⁩ ▸ ⁨auxiliary⁩ ▸ scanner⁩ ▸ ⁨smb⁩ ¡Más documentación próximamente! Aviso...

CVE-2026-39987

CVE-2026-39987 — RCE pre-autenticación en Marimo /terminal/ws root@kitploit: CVSS 4.0 : 9.3 CRITICAL CVSS 3.x : 9.8 CRITICAL CWE : CWE-306 Missing Authentication for Critical Function Fix : Marimo 0.23.0+ Affects : Marimo Solo laboratorio / pruebas autorizadas HTB, CTF, proyectos con alcance por...

CVE-2026-13152

CVE-2026-13152: Escalada de Privilegios No Autenticada en Custom Fields Account Registration For WooCommerce 1.4 -blue.svg 📖 Resumen del Aviso CVE-2026-13152 es una vulnerabilidad de escalada de privilegios no autenticada que afecta al plugin de WordPress Custom Fields Account Registration For...

s3sec

s3sec Test AWS S3 buckets for read/write/delete access This tool was developed to quickly test a list of s3 buckets for public read, write and delete access for the purposes of penetration testing on bug bounty programs. Screenshot Found a bug bounty using this tool? Feel free to add me as a...

SUID3NUM

SUID3NUM Un script independiente de python2/3 que utiliza los módulos integrados de Python para encontrar bins SUID, separar bins predeterminados de bins personalizados, compararlos con bins en el repositorio de GTFO Bins y explotarlos automáticamente, ¡todo con colores! ͡ʘ ͜ʖ ͡ʘ Descripción Un...

LoadReload

LoadReload Cargador de shellcode basado en lo que hice para mi tesis de máster, diseñado para shellcode de Sliver menor a 25MB..... !Note Características: Descifrado Multibyte-XOR del Payload Obtiene el Payload localmente Anti-Emulación mediante la función BusySleep vía KUSERSHAREDDATA Bucle RW-R...

evilgophish

Table of Contents evilgophish A Word About Sponsorship Credits Prerequisites Disclaimer Why? Background Infrastructure Layout setup.sh Cloudflare Turnstile Setup Cloudflare Turnstile HTML Template Guide replacerid.sh Email Campaign Setup QR Code Generator SMS Campaign Setup Live Feed Setup A Word...

evilgophish

Tabla de Contenidos evilgophish Una palabra sobre el patrocinio Créditos Requisitos previos Descargo de responsabilidad ¿Por qué? Antecedentes Esquema de infraestructura setup.sh Configuración de Cloudflare Turnstile Guía de plantillas HTML de Cloudflare Turnstile replacerid.sh Configuración de...

EagleVM

EagleVM Playground for generating virtual machine protected x64 assembly. Project Breakdown EagleVM Main protection application that virtualizes code. EagleVM.Core Static library used by EagleVM that provides all virtualization and analysis functionality. EagleVM.Sandbox Project for future testin...

CVE-2018-20062

CVE-2018-20062 thinkphp 5.0.23 Aplicable a la vulnerabilidad ThinkPHP de vulhub Soy muy novato, lo iré optimizando poco a poco, por favor no me critiquen, expertos...

blackbird

Blackbird An OSINT tool to search fast for accounts by username across 574 sites. The Lockheed SR-71 "Blackbird" is a long-range, high-altitude, Mach 3+ strategic reconnaissance aircraft developed and manufactured by the American aerospace company Lockheed Corporation. Disclaimer root@kitploit:...

Invoke-ADEnum

Invoke-ADEnum Auditoría y Enumeración de Active Directory Invoke-ADEnum es una herramienta de auditoría y enumeración diseñada para automatizar la recopilación de información de un entorno de Active Directory. Una de las características de Invoke-ADEnum es su capacidad para generar un Informe de...

CVE-2026-30502-OpenKM-6.3.12-Reflected-XSS

🛡️ CVE-2026-30502 — Reflected XSS in OpenKM v6.3.12 Discovered & Reported by Dharmendra Kumar — Security Researcher Cybersecurity | Penetration Testing | Vulnerability Research | Responsible Disclosure 📌 Table of Contents Overview CVE Details Affected Product Vulnerability Description Root Cause...

CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, while Kali Linux was used for exploitation and walkthrough. This walkthrough guides you through exploiting the vulnerable server containing CVE-2024-46507 command injection and CVE-2024-46508 authentication bypass vulnerabilities. Initia...

CVE-2018-8581

CVE-2018-8581 This is a lateral movement and privilege escalation vulnerability at the mailbox level Once you have the credentials of an ordinary mailbox account, it allows you to delegate and take over the inboxes of other users including domain administrators This EXP script is an enhanced...