Lucene search
+L

66406 matches found

Kitploit
Kitploit
added 2026/09/11 8:57 a.m.8 views

CVE-2019-11043-Vulnerability

Collaberators: Olaf Madejski, Andrew Masone, Nate Desany PHP-FPM Reverse Tunnel Exploitation & Persistence Demonstration CVE-2019-11043 — Debian PHP-FPM Path Handling Vulnerability Project Overview In October 2019, Debian Security Advisory researchers Emil Lerner and Andrew Danau published a noti...

9.8CVSS7.1AI score0.9978EPSS
SaveExploits57References8
Kitploit
Kitploit
added 2026/09/11 8:47 a.m.7 views

CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-Conditions

CVE-2026-28992: IOHIDFamily FastPathUserClient Race Conditions CVE-2026-28992 | Author: Johnny Franks @zeroxjf Component: IOHIDFamily Impact: An attacker may be able to cause unexpected app termination Description: A memory corruption vulnerability was addressed with improved locking. —Apple...

4.7CVSS6.3AI score0.00143EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 8:33 a.m.10 views

CS-Remote-OPs-BOF

Remote Operations BOF This repo serves as an addition to our previously released SA repo. Our original stance was that we would not release our tooling that modified other systems, and we would only provide information gathering tooling in a ready to go format. Over time, we have seen many other...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 8:28 a.m.4 views

CVE-Tracker

CVE-Tracker With the help of this automated script, you will never lose track of newly released CVEs. What does this powershell script do is exactly running the Microsoft Edge at system startup, navigate to 2 URLs ,and then put the browser in to full screen mode. As ethical hackers, it's vital th...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 7:56 a.m.6 views

check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 7:53 a.m.6 views

lighty-sqlinj-demo

title: Ep4 - Network-Related Vulnerability members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 Related vulnerability: root@kitploit: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. Confirm:...

9.8CVSS7AI score0.62752EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/11 7:52 a.m.7 views

CVE-2024-24386

VitalPBX - CVE-2024-24386 Vulnerability Title: Command Injection Author: Erick Duarte Version: 3.2.5-2 The vulnerability occurs when using the Task Manager module in conjunction with Cron Profile. To exploit this vulnerability, we need to place a script in a specific folder within the OS. The...

7.2CVSS5.7AI score0.01024EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 7:39 a.m.3 views

AI-Infra-Guard v4.6.1

📖 Documentation | 🌐 🇨🇳 中文 · 🇯🇵 日本語 · 🇪🇸 Español · 🇩🇪 Deutsch · 🇫🇷 Français · 🇰🇷 한국어 · 🇧🇷 Português · 🇷🇺 Русский 🚀 AI Red Teaming Platform by Tencent Zhuque Lab A.I.G AI-Infra-Guard integrates capabilities such as ClawScanOpenClaw Security Scan, Agent Scan,AI infra vulnerability scan, MCP Server &...

6.1AI score
SaveExploits0References41
Kitploit
Kitploit
added 2026/09/11 7:32 a.m.7 views

CVE-2025-5058

eMagicOne Store Manager for WooCommerce Warning: Trying to access array offset on false in /home/vagrant/research/Lab1/wp-content/plugins/store-manager-connector/classes/class-emosmcwoocommerceoverrider.php on line 324 Warning: Trying to access array offset on false in /home/vagrant/research/...

9.8CVSS5.9AI score0.01383EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/11 7:31 a.m.7 views

OST-C2-Spec

Draft: Request for Discussion Abstract This document provides an overview of Version 1 of the OST C&C Specification. It is intended to provide a detailed description of messages and the fields within those messages. Introduction The motivation behind this specification is to provide a C&C messagi...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 7:23 a.m.8 views

recon_2024_windbg_workshop

REcon 2024 - Tips & Tricks for better debugging with WinDbg This repository contains the materials created for the workshop "Tips & Tricks for better debugging with WinDbg", at REcon 2024. Setup The workshop materials aims to provide useful features for WinDbg, when debugging in kernel-mode, but...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 7:22 a.m.10 views

LavaDome

LavaDome 🌋️ A newLavaMoat tool for DOM nodes secured E ncapsulation ⚠️ EXPERIMENTAL WIP - USE AT YOUR OWN RISK learn more Demo Take a crack atLavaDome - visit the demo app, open the console, and do whatever in your power to steal the secret from within the LavaDome instance report your success...

6AI score
SaveExploits0References21
Kitploit
Kitploit
added 2026/09/11 7:20 a.m.3 views

radar

Radar Radar es un escáner de red pequeño pero eficiente escrito en Rust, fuertemente inspirado por masscan. Estas son las características principales: Implementaciones de TCP, UDP, DHCP y ARP en espacio de usuario, gracias a pnet Ser asíncrono Escaneo aleatorio de IPs/puertos sin...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 7:19 a.m.3 views

CVE-2025-21420_POC

Diffing cleanmgr.exe The new version of cleanmgr.exe includes a call to the SetProcessMitigationPolicy function. With MitigationPolicy set to 16, corresponding to ProcessRedirectionTrustPolicy. Combined with Microsoft's description of CWE-59: Improper Link Resolution Before File Access 'Link...

7.8CVSS7.4AI score0.03699EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/11 7:18 a.m.4 views

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

7.8CVSS7AI score0.94921EPSS
SaveExploits154References2
Kitploit
Kitploit
added 2026/09/11 7:02 a.m.10 views

PoC-CVE-2021-41773

CVE-2021-41773 PoC Proof of concept to check if hosts are vulnerable to CVE-2021-41773. Description https://vulners.com/cve/CVE-2021-41773 A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49-2.4.50. An attacker could use a path traversal attack to map URLs to file...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
added 2026/09/11 7:01 a.m.9 views

SpawnWith

SpawnWith An experimental Beacon Object File BOF that provides an alternative to the spawnas and inject commands. This exposes a new command, spawnwith pid listener, that performs the following: 1. Obtain a handle to the target process. 2. Obtain a handle to the process' primary token. 3. Duplica...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:46 a.m.8 views

Christmas

Maldev Academy Maldev Academy Home Maldev Academy Syllabus Christmas Implementing an injection method mentioned by @Hexacorn. This PoC creates multiple processes, where each process performs a specific task as part of the injection operation. Each child process will spawn another process and pass...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:40 a.m.7 views

msi-search

MSI Search Windows caches MSI files at C:\Windows\Installer\ with randomized filenames consisting of letters and numbers followed by the ".msi" extension. This tool simplifies the task for red team operators and security teams to identify which MSI files correspond to which software and enables...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:32 a.m.5 views

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Un script de bash que demuestra la explotación manual de CVE-2016-10204 contra un endpoint objetivo, que lleva a la subida de una webshell php. Actualmente, la variable webshell está configurada para un payload de MySQL. Esto se puede reemplazar con cualquier backend que...

9.8CVSS8.1AI score0.02082EPSS
SaveExploits2
Rows per page
Query Builder