Lucene search
+L

606648 matches found

Kitploit
Kitploit
added 2026/09/14 11:36 p.m.7 views

get-pixels-updated

This is an updated version of get-pixels which patches the CVE-2020-8175 security issue. At the time of creation, every file is the same as the ones from the original repository, excluding the package.json. get-pixels-updated The following is from the get-pixels GitHub page. As mentioned before,...

5.5CVSS5.8AI score0.01077EPSS
SaveExploits1References6
Kitploit
Kitploit
added 2026/09/14 11:36 p.m.6 views

HawkScan

HawkScan Security Tool for Reconnaissance and Information Gathering on a website. python 3.x News Installation Special features TODO Usage Exemples Thanks Donations Tools used Wiki News v2.x root@kitploit: - Add proxy function - Redefining priorities/tasks - Let's debug certificate subdomains...

6AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/14 11:35 p.m.6 views

CVE-2024-10914

CVE-2024-10914 A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument name leads t...

9.8CVSS7.9AI score0.96183EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/14 11:35 p.m.6 views

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST...

10CVSS8.2AI score0.99993EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/14 11:35 p.m.6 views

CVE-2020-25540

CVE-2020-25540 ThinkAdmin CVE-2020-25540 poc Since the directory traversal vulnerability is too limited, only the file reading function has been implemented. Please go easy on the criticism, and I appreciate your guidance. The logic is based on the PHP source code; the key is the encryption metho...

7.5CVSS7.1AI score0.75332EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/14 11:34 p.m.9 views

defenselessV1

defenselessV1 Defenseless is a vulnerable web application written in PHP/MySQL. This is the first version of this application. The purpose of this application is to create security awareness among developers and new guys in application security. It would soon be updated with with more bugs and a...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 11:33 p.m.7 views

CVE-2015-2291

CVE-2015-2291 1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d...

7.8CVSS8.1AI score0.09011EPSS
SaveExploits7References3
Kitploit
Kitploit
added 2026/09/14 11:31 p.m.5 views

wordpress-cve-2024-10924-exploit

WordPress CVE-2024-10924 Exploit 📌 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication 2FA. Attackers can exploit this flaw to log in as any user with a valid...

9.8CVSS7.2AI score0.82025EPSS
SaveExploits21References1
Kitploit
Kitploit
added 2026/09/14 11:31 p.m.7 views

awesome-ai-security

Awesome AI Security A curated list of awesome AI security related frameworks, standards, learning resources and open source tools. If you want to contribute, create a PR or contact me @ottosulin. Table of Contents Learning Resources Reading & Guides Courses, Labs & CTFs Podcasts Governance & Risk...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 11:30 p.m.6 views

CVE-2026-63030-wp2r00t

wp2r00t - WordPress REST Batch Route-Confusion SQLi PoC A self-contained proof-of-concept for the unauthenticated blind SQL injection reachable through the WordPress REST batch endpoint /wp-json/batch/v1. It is an independent implementation built from the published vulnerability mechanics. Offici...

9.8CVSS8.4AI score0.97271EPSS
SaveExploits77
Kitploit
Kitploit
added 2026/09/14 11:30 p.m.7 views

swarmer

swarmer A tool for sneakily adding registry keys to HKCU without EDR/AV being able to see what's happening even if you don't have administrator access. How do I use this? NOTE: You will only get to do this ONCE, afterNTUSER.MAN is your new registry hive you CANNOT change it without being an admin...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 11:30 p.m.7 views

Ponce

Ponce Ponce pronounced 'poN θe pon-they is an IDA Pro plugin that provides users the ability to perform taint analysis and symbolic execution over binaries in an easy and intuitive fashion. With Ponce you are one click away from getting all the power from cutting edge symbolic execution. Entirely...

6AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/14 11:30 p.m.8 views

Scrummage

Scrummage VERSION 3.9 Improved dependency management migration to Poetry Stricter type checking of variables. Improved anonymity of the configuration file via encryption. Manual editing of configuration file is now difficult and it's advised to not edit the configuration file manually. Code quali...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/14 11:29 p.m.7 views

WhisperPair

WhisperPair: Testing Harness for Google Fast Pair A practical tool to test whether Google Fast Pair devices are vulnerable to pairing, account-binding, and protocol-level attacks. This repository provides the WhisperPair testing harness, a tool for evaluating the security of Google Fast Pair...

5.8AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/14 11:29 p.m.10 views

execute-assembly-pico

Execute Assembly PICO A PICO for Crystal Palace that implements native CLR hosting to execute an appended .NET assembly in memory, using the same technique as the donut shellcode generator. This allows you to load .NET tools like Rubeus or Seatbelt from position-independent code without dropping...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 11:29 p.m.11 views

LinusWare-Source-Code-Internal

Linusware 1.2 — Source Code & Engine Architecture Reconstructed, Reverse-Engineered & Documented by tekkenbugatti Target Platform: Linux x8664 / Luau / Roblox Runtime Engine Overview Linusware 1.2 is a native Linux x8664 runtime extension and execution engine for Roblox / Luau. This repository...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 11:28 p.m.82 views

hijackthis

Download Latest build v3.x - Release Stable build v2 outdated - not updated anymore this is beta-version - major changes are in progress; although it is definitely safe to use HiJackThis+ HiJackThis+ Plus previously called: HiJackThis Fork v3 is a fork and a continuation of the original Trend Mic...

5.8AI score
SaveExploits0References18
Kitploit
Kitploit
added 2026/09/14 11:28 p.m.9 views

page_table_walk

Capture the Flag in Physical Memory You've read about paging. The diagrams make sense. Four levels, 9 bits each, page frame, offset. Sure. But then you hit a challenge that requires actually walking page tables, and you realize you don't know it. You know about it. Big difference. What worked for...

7.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 11:27 p.m.8 views

NetworkSherlock

NetworkSherlock: Porwerfull Port Scanning With Shodan NetworkSherlock is a powerful and flexible port scanning tool designed for network security professionals and penetration testers. With its advanced capabilities, NetworkSherlock can efficiently scan IP ranges, CIDR blocks, and multiple target...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 11:27 p.m.103 views

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

5.8AI score
SaveExploits0References3
Rows per page
Query Builder