CVE-2022-23131

CVE-2022-23131 Create a urls.txt file and put the targets into urls.txt. python CVE-2022-23131.py If a vulnerability exists, it will generate bug.txt...

CVE-2018-6389

CVE-2018-6389 Exploit CVE-2018-6389 Checker — a small, non‑destructive Python tool that checks for indicators of the CVE‑2018‑6389 WordPress vulnerability by issuing three controlled load-scripts.php requests and analysing response size, timing and JS token patterns. ⚠️ Disclaimer Use this tool...

CVE-2025-55182-Terminal

Next.js RSC Vulnerability Scanner CVE-2025-66478 / CVE-2025-55182 A lightweight, multi-threaded Proof of Concept PoC tool designed to detect and demonstrate the Next.js React Server Components RSC Remote Code Execution vulnerability React2Shell. This tool allows for both single-target verificatio...

CVE-2020-5902-POC

CVE-2020-5902-POC Batch detection of CVE-2020-5902 python3 CVE-2020-5902.py infile.txt...

CVE-2024-3400

CVE-2024-3400 Finding Palo Alto devices vulnerable to CVE-2024-3400. root@kitploit: options: -h, --help show this help message and exit -r IP, --ip IP IP address for single request -R FILE, --file FILE File path containing list of IP addresses...

CVE-2024-56145-craftcms-rce

Before you run script again do fuser -k 6666/tcp Usage - python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200 Custom command can be used like python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami" -i is your IP or your vps IP use that by doing ipconfig / ifconfig. Like - python3 poc.py -f...

archerysec

...

CVE-2022-41040

CVE-2022-41040 Code set relating to CVE-2022-41040. scanner.py is a Python based scanner testing for the CVE-2022-41040. Requirements The only additional modules needed to run this code is requests and colorama. root@kitploit: pip install -r requirements.txt Usage This script takes a single URL o...

SSTI-Exploit-Detector

SSTI-Exploit-Detector SSTI Exploit Detector is a tool designed to detect potential Server-Side Template Injection SSTI vulnerabilities in web applications. SSTI-Exploit-Detector Jenderal92 Features Custom Payload File : Allows users to add their own payloads to test various template engines...

Mongodb-Redis-scan

Mongodb-Redis-scan mongodb-redis anonymous scan script, supports anonymous scanning of mongodb and redis mongodb-redis anonymous scan script, supports anonymous scanning of mongodb and redis. This script was written for a previous requirement, and now it is shared for everyone to learn and...

Automated-blind-xss-search-for-Burp-Suite

Femida-xss WIP An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/ianxtianxt/Automated-blind-xss-search-for-Burp-Suite.git Burp - Extender - Add - find and select blind-xss.py How to use Settings First of all you need to setup your callback URL in field...

openvas-scanner

OpenVAS Scanner Este es el escáner OpenVAS de la Greenbone Community Edition. Se utiliza para los dispositivos Greenbone Enterprise y es un motor de escaneo con todas las funciones que ejecuta un feed continuamente actualizado y ampliado de pruebas de vulnerabilidad VTs. Versiones Todos los...

DBScanner

DBScanner Unauthorized access + weak password batch detection Automatically scan common SQL and No-SQL database scripts on the internal network mysql, mssql, oracle, postgresql, redis, mongodb, memcached, elasticsearch, including unauthorized access and common weak password detection Runs in a...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

SR-71

Herramienta de Reconocimiento Todo en Uno El propósito de esta herramienta es ayudar a cazadores de bugs y pentesters durante el reconocimiento... Instalación: Se puede usar en cualquier sistema con python3 Puedes instalar SR-71 fácilmente usando pip: root@kitploit: pip3 install SR-71 Para usarlo...

skulto

Skulto Scan AI agent skills for prompt injection before you install them root@kitploit: ╔════════════════════════════════════════════════════════╗ ║ ███████╗██╗ ██╗██╗ ██╗██╗ ████████╗ ██████╗ ║ ║ ██╔════╝██║ ██╔╝██║ ██║██║ ╚══██╔══╝██╔═══██╗ ║ ║ ███████╗█████╔╝ ██║ ██║██║ ██║ ██║ ██║ ║ ║...

confusploit

This is a Script to find vulnerable servers to CVE-2022-26134 and can be used together SHODAN CLI and Bash Scripting One-Liner Please use only for legal and educational purposes Confluence Pre-Auth Remote Code Execution via OGNL Injection CVE-2022-26134 On June 02, 2022 Atlassian released a...

CVE-2024-29973

One day, I saw this Repositories about CVE-2024-29973 .But after my testing, the script can be executed but it doesn't work. So I made a slight change and it can be used very smoothly! Thanks for it! https://github.com/bigb0x/CVE-2024-29973 To scan a single target: python CVE-2024-29973.py -u...

NetRaptor

NetRaptor - Herramienta MITM de Envenenamiento ARP NetRaptor es una herramienta de envenenamiento ARP con interfaz gráfica construida con Python que permite escanear una red, seleccionar un objetivo y un gateway, y realizar un ataque Man-in-the-Middle MITM. Esta herramienta está diseñada únicamen...

git-all-secrets

git-all-secrets Acerca de git-all-secrets es una herramienta que puede: Clonar múltiples repositorios públicos/privados de GitHub de una organización y escanearlos, Clonar múltiples repositorios públicos/privados de GitHub de un usuario que pertenece a una organización y escanearlos, Clonar un so...