autoblue

AUTOBLUE: Automated EternalBlue Exploit Tool AUTOBLUE is an automation tool designed to exploit the EternalBlue vulnerability CVE-2017-0144 on Windows machines. The tool integrates the power of Nmap for vulnerability scanning and Metasploit's msfconsole for exploitation, enabling users to...

CVE-2018-9995_Batch_scanning_exp

CVE-2018-9995Batchscanningexp last 2018-8-9 Batch scanning script for DVR based on CVE-2018-9995 vulnerability Original exploit script for CVE-2018-9995 Original code Environmental preparation python3, ubuntu root@kitploit: user@ubuntu:$ sudo pip3 install grequests user@ubuntu:$ sudo pip3 install...

CVE-2020-14883

CVE-2020-14883 Weblogic Authentication Bypass Vulnerability Batch Detection Script Usage: Python CVE-2020-14883-Multiple.py ip.txt port Vulnerable addresses will be output to Vul.txt...

DEBIAN-CVE-2026-86433

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks t...

ssh_exploiter_CVE-2024-6387

sshexploiter CVE-2024-6387 with auto ip scanner and auto expliot OpenSSH Vulnerability Checker & Exploiter This Python script checks if servers are running vulnerable versions of OpenSSH and attempts exploitation if possible. Features SSH Version Detection : Retrieves SSH banner to determine the...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 Scanner SQL Injection Scanner untuk CKAN DataStore Tools ini digunakan untuk mendeteksi dan memvalidasi kerentanan CVE-2026-42031 SQL Injection pada platform CKAN DataStore . 📋 Fitur ✅ 8 Query Validasi otomatis database, tabel, kolom, dll. ✅ Multi-target scanning support domain &...

CVE-2024-6387-exploit

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a Python script that uses Nmap to scan a list of domains for vulnerable SSH versions. It checks multiple ports for SSH services and identifies versions that are known to have security vulnerabilities. Features Scans multiple domains from ...

CVE-2021-21972

Usage & Disclaimer VMware vCenter Server Remote Code Execution Vulnerability CVE-2021-21972 Usage: Python CVE-2021-21972.py urls.txt Each URL in urls.txt is on a single line, vulnerable addresses are output to vul.txt Affected Versions: VMware vCenter Server 7.0 series 7.0.U1c VMware vCenter Serv...

EUVD-2026-72391

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks t...

CVE-2026-86433 commonmark 1.5.0 before 2.8.4 Denial of Service via Attributes

commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection performs quadratic-time sibling list scanning. Unauthenticated attackers can submit approximately 32 KB of repeated attribute blocks t...

CVE-2026-86433

commonmark (PHP Markdown parser) versions 1.5.0 through 2.8.3 contain a denial-of-service vulnerability in the Attributes extension . The root cause is that AttributesListener::findTargetAndDirection() performs quadratic-time sibling list scanning , allowing an unauthenticated attacker to submit ...

CVE-2026-33017-Langflow-RCE

root@kitploit: ██╗ ██╗ ██████╗ ███████╗███████╗ ██████╗ ██████╗ ██████╗ ███████╗ ██║ ██║██╔═══██╗██╔════╝██╔════╝██╔═══██╗██╔══██╗██╔═══██╗██╔════╝ ██║ ██║██║ ██║███████╗███████╗██║ ██║██║ ██║██║ ██║███████╗ ╚██╗ ██╔╝██║ ██║╚════██║╚════██║██║ ██║██║ ██║██║ ██║╚════██║ ╚████╔╝...

Log4JShell-Bytecode-Detector

🔍 Log4JShell Bytecode Detector Log4jShell Bytecode Detector is an open source tool that helps identify if a jar file is affected by the critical CVE-2021-44228. The tool scans the jar file and compares the classses against a set of vulnerable hashes for classes within the jar file. The hashes hav...

Scanner_CVE_OpenSSH

Scanner for identifying servers with SSH software possibly vulnerable to CVEs CVE-2024-6387 and CVE-2023-48795. Covered CVEs CVE| Name| Condition| Severity ---|---|---|--- CVE-2024-6387| regreSSHion| OpenSSH 9.8p1| CRITICAL CVE-2023-48795| Terrapin| OpenSSH 9.6| HIGH CVE-2024-6387 — regreSSHion...

CVE-2026-9082-Mass_Scanner

CVE-2026-9082-MassScanner Mass Scanner For Drupal Exploit CVE-2026-9082 To Setup ExploitPOC Script execute this command : root@kitploit: pip install requirements.txt To use the ExploitPOC Script execute this Command : root@kitploit: python exploitpoc.py -t targets.txt -o results.txt -p 16 Éna Mas...

volatility-plugins

https://www.countercept.com/blog/hunting-for-gargoyle-memory-scanning-evasion/...

dotnet-gargoyle

dotnet-gargoyle A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique https://www.countercept.com/blog/gargoyle-memory-scanning-evasion-for-net/...

CVE-2021-43530-UXSS-On-QRcode-Reader-

CVE-2021-43530-UXSS-On-QRcode-Reader- CVE-2021-43530 A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This...

shai-hulud-scan

shai-hulud-scan A Claude Code skill that scans machines for indicators of compromise IOCs from the Mini Shai-Hulud supply chain worm CVE-2026-45321, CVSS 9.6. What is Mini Shai-Hulud? A self-propagating supply chain worm that compromised 170+ npm/PyPI packages on May 11, 2026 - including...

CVE-2025-20260-POC

CVE-2025-20260 EXPLOIT This is a proof of concept for CVE-2025-20260. This is a vulnerability in the ClamAV software's PDF scanning processes. By sending a specially crafted, malicious PDF file it is possible to cause a buffer overflow, resulting in a denial of service or arbitrary code execution...