CVE-2026-65400

CVE-2026-65400 Пожертвовать Поддержите сопровождение этого проекта через PayPal или отсканировав QR-код ниже. ⚡ Простое использование Используйте этот проект только в безопасных и авторизованных средах, таких как: Локальные виртуальные машины Контейнеры Docker Изолированные лабораторные среды...

alterx

AlterX Features • Installation • Usage • Running AlterX • Join Discord root@kitploit: Fast and customizable subdomain wordlist generator using DSL. Features Fast and Customizable Automatic word enrichment Pre-defined variables Configurable Patterns Pattern Mining - Automatically discover subdomai...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Cet exploit utilise des adresses et du shellcode pour Citrix VPX 13.1-48.47. Pour l'article complet, cliquez ici. Utilisation NASM est nécessaire pour construire le shellcode. root@kitploit: $ sudo apt install nasm Le shellcode inclus téléchargera et exécutera un scri...

CVE-2019-14079

Fuzzing de périphériques USB sur Android CVE-2019-14079 Cet article de blog concerne un simple bogue que j'ai trouvé dans mon appareil Android MI A2 - fonctionne sous Android stock en utilisant le fuzzing de périphériques USB et qui a été marqué comme de haute sévérité par Google. Le bogue se...

CVE-2026-41089-Detector

Outil de détection CVE-2026-41089 Ceci est un script de détection CVE-2026-41089 destiné aux audits de sécurité défensifs. Cette vulnérabilité est une vulnérabilité d’exécution de code à distance dans Windows Netlogon divulguée par Microsoft lors de la mise à jour de sécurité de mai 2026. Le scri...

EUVD-2026-69458

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2026-73731

A reflected cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer allows an unauthenticated remote attacker to execute arbitrary script code in a victim's browser. The attack requires user interaction (e.g., clicking a crafted link) and r...

CVE-2026-73731 Unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script...

CVE-2025-49844

CVE-2025-49844 RediShell PoC реверс-шелла, созданный ИИ Непроверенное завершение PoC Redishell, созданного ИИ. Оригинальный PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py Корейская часть: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua Прогресс?...

EUVD-2026-69430

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

CVE-2026-73703 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

CVE-2026-73703

CVE-2026-73703 is a stored cross-site scripting (XSS) vulnerability in the web-based management interface of HPE Networking Fabric Composer . An unauthenticated adjacent attacker can inject malicious script that executes in a victim's browser within the context of the interface, requiring user in...

CVE-2026-73703 Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script co...

Cobaltstrike-MS17-010

Cobaltstrike Aggressor Script Инструмент эксплуатации и сканер ms17-010. 1. Скачайте файлы в корневую папку cobaltstrike. 2. Импортируйте "aggressor.cna" Инструменты эксплуатации ms17-010 поддерживают только win7 x64 и win2008 r2 pwn/Invoke-EternalBlue.ps1 из Empire getinfo/Invoke-EternalScan.ps1...

ecologyExp.jar

ecologyExp.jar Чтение файла конфигурации базы данных Weaver OA java -jar ecologyExp.jar http://127.0.0.1 Исходный код package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import...

CVE-2024-6387-nmap

Script Nmap de vérification de vulnérabilité OpenSSH Description Le script openssh-vuln-checker.nse vérifie si un serveur exécute une version vulnérable d'OpenSSH CVE-2024-6387. Il se connecte au port SSH, récupère la bannière SSH et la compare à une liste de versions vulnérables connues. Version...

SR-71

All in One Recon Tool The purpose of this tool is to help bug hunters and pentesters during reconnaissance... Installation: Can be used on any system with python3 You can easily install SR-71 using pip: root@kitploit: pip3 install SR-71 To use it, just type "SR-71 " in your terminal If you want t...

FTPBuster

FTPBuster FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based attacks. It is intended for ethical hacking and penetration testing Features Brute-force support for FTP , SFTP , and explicit FTPS AUTH TL...

ZipRarHunter

ZipRarHunter ZipRarHunter is a powerful command-line ethical hacking tool designed to crack passwords of ZIP and RAR archive files using a wordlist.It automates the process of password recovery from encrypted archives Features Cracking ZIP files encrypted with both ZipCrypto and AES-256 encryptio...

Internet-Security-Project---CVE-2021-26814

Projet de sécurité Internet - CVE-2021-26814 Projet de sécurité Internet, pour mon examen à l'Université de Catane, dans lequel vous pouvez apprendre comment exploiter une vulnérabilité de Wazuh v4.0.3 et comment cette vulnérabilité peut être corrigée. Lien vers le dépôt original du script :...