Lucene search
+L

3344016 matches found

Kitploit
Kitploit
•added 2026/09/28 4:29 p.m.•9 views

Livepyre

Livepyre A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APPKEY of the Livewire project is known. Authors of the tool: @remsio @Worty. Help root@kitploit: $ ./Livepyre.py -h usage: Livepyre.py -h -u URL -f FUNCTION -p PARAM -H HEADERS -P PROXY -a APPKEY -d -F -c...

9.8CVSS9.1AI score0.97072EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/09/28 4:29 p.m.•15 views

vuln-scanner

vuln-scanner An automated vulnerability assessment platform that orchestrates 210 open-source security tools , aggregates and deduplicates findings, optionally chains tools into a discovery data-flow graph , runs an optional OpenAI-compatible LLM analysis layer for triage, clustering, and...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 4:29 p.m.•9 views

CVE-2020-5260

CVE-2020-5260 CVE-2020-5260 Demonstration Record When git executes a command like "git clone https://example.com", it requests the protocol "https" to store credentials for the host "example.com", and when the remote side requests authentication, it appends the returned credentials to the outgoin...

9.3CVSS7.5AI score0.10047EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/28 4:29 p.m.•15 views

CVE-2019-11043

Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix Vulnerability Overview PHP-FPM Remote Code Execution Vulnerability CVE-2019-11043 During the Real World CTF organized by Chaitin Tech, foreign security researcher Andrew Danau discovered while solving a CTF challenge that sending the %0a symbol to t...

9.8CVSS8AI score0.9978EPSS
SaveExploits57
Kitploit
Kitploit
•added 2026/09/28 4:29 p.m.•12 views

CVE-2019-16759

vBulletin RCE 5.x Get Email + SMTP CVE-2019-16759 This tools will extracts and dumps Email + SMTP from database server USAGE root@kitploit: $ git clone https://github.com/mas1337/CVE-2019-16759.git && cd CVE-2019-16759 $ ./vb-email-smtp.sh list.txt Disclaimer All code on this repository is for...

9.8CVSS9AI score0.99728EPSS
SaveExploits28
Kitploit
Kitploit
•added 2026/09/28 4:29 p.m.•14 views

Supershell

Supershell is a C2 remote control platform accessed through WEB services. By establishing a reverse SSH tunnel, a fully interactive shell can be obtained, and it supports multi-platform architecture Payload...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 4:28 p.m.•12 views

CVE-2021-44228-Demo

CVE-2021-44228-Demo An example of remotely injecting code via RMI and LDAP using CVE-2021-44228. root@kitploit: Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello, $jndi:ldap://127.0.0.1:1389/org.mazhuang.ldap.Exploit RmiServ...

10CVSS7.8AI score0.99999EPSS
SaveExploits375References2
Kitploit
Kitploit
•added 2026/09/28 4:28 p.m.•9 views

wordpress_cropimage

WordPress Crop-Image CVE-2019-8943 A python3 script for WordPress Crop-Image CVE-2019-8943 Authenticated Remote Code Execution RCE. It drops a malicious PHP backdoor. Getting Started Executing program RCE root@kitploit: python3 wprce.py -t http://wordpress.rce/ -u admin -p password -m twentytwent...

6.5CVSS7.6AI score0.92642EPSS
SaveExploits10
Kitploit
Kitploit
•added 2026/09/28 4:28 p.m.•11 views

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...

6.7AI score
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 4:28 p.m.•24 views

vc5

VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...

6.2AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/28 4:28 p.m.•10 views

CVE-2024-25153

CVE-2024-25153 Este es una prueba de concepto para CVE-2024-25153, una vulnerabilidad de Ejecución Remota de Código en Fortra FileCatalyst Workflow 5.x, antes de 5.1.6 Build 114. Los detalles técnicos completos se pueden encontrar en...

9.8CVSS8.8AI score0.41741EPSS
SaveExploits4
Kitploit
Kitploit
•added 2026/09/28 4:28 p.m.•881 views

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

6.2AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/28 4:28 p.m.•6 views

tamarin-prover

The Tamarin prover repository This README describes the organization of the repository of the Tamarin prover for security protocol verification. Its intended audience are interested users and future developers of the Tamarin prover. For installation and usage instructions of the Tamarin prover se...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/28 4:27 p.m.•15 views

CVE-2025-49844

CVE-2025-49844 - RediShell Use-after-free in Redis Lua scripting leading to remote code execution. Summary of the CVE Redis is an open source, in-memory database. CVE-2025-49844 is a use-after-free vulnerability in Redis's embedded Lua scripting engine. An authenticated user with access to Lua...

9.9CVSS8AI score0.82294EPSS
SaveExploits14
Kitploit
Kitploit
•added 2026/09/28 4:27 p.m.•21 views

VulnFanatic-NG

VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...

6.2AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/28 4:27 p.m.•10 views

CVE-2026-3300

CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross-Site Scripting Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Availability Published:...

9.8CVSS6.7AI score0.04431EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/28 4:27 p.m.•14 views

zyrox

Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not ¯\ツ/¯ One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 4:27 p.m.•8 views

Root-My-Galaxy-Payloads

Root My Galaxy Payloads This repository contains the device-specific native side of Root My Galaxy: exact firmware profiles and offsets; the app-domain CVE-2026-43499 exploit source and compiled payload; the app bootstrap helper source; the verified KernelSU late-load build artifacts; the support...

7.8CVSS7.8AI score0.00278EPSS
SaveExploits114References9
Kitploit
Kitploit
•added 2026/09/28 4:27 p.m.•6 views

log4shell-CVE-2021-44228

Log4Shell direct-impact fixture Deliberately vulnerable, non-deployable Java/Maven input for ShieldOps. Do not build, execute, or deploy it. The project pins org.apache.logging.log4j:log4j-core:2.14.1. LoginAuditService.recordLoginAttempt sends an unauthenticated HTTP User-Agent value into a Log4...

10CVSS6AI score0.99999EPSS
SaveExploits375
Kitploit
Kitploit
•added 2026/09/28 4:27 p.m.•21 views

awesome-connected-things-sec

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder