CiscoRV320Dump

CiscoRV320Dump Exploits CVE-2019-1653/CVE-2019-1652 para volcar configuraciones de Cisco RV320 y obtener RCE Implementaciones de los exploits CVE-2019-1652 y CVE-2019-1653 divulgados por Red Team Pentesting GmbH. Solo probé estos en un RV320, pero según el aviso de Cisco, el RV325 también es...

keycloak-cve-2026-18963-hunt

CVE-2026-18963: Keycloak account takeover, exploitation trace hunt A psql script that searches a Keycloak PostgreSQL database for traces of CVE-2026-18963 exploitation unauthenticated account takeover through the reset-credentials flow. Published by KYOS. We wrote it while patching the Keycloak...

CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE

CVE-2026-4040 – 文件上传中的竞态条件导致远程代码执行（RCE） 程序代码（Python Flask） root@kitploit: uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads' os.makedirsUPLOADDIR, existok=True @app.route'/upload',...

EvilDroid

EvilDroid: Automated Exploit for CVE-2024-0044 EvilDroid is a sophisticated tool designed for automated exploitation of CVE-2024-0044 vulnerabilities. This script streamlines the process of exploiting vulnerable Android applications by automating the payload deployment and APK installation...

CVE-2024-21413

CVE-2024-21413 Este script de Python se utiliza para abusar de la CVE-2024-21413 denominada «MonikerLink». Sala de TryHackMe: MonikerLink Suposiciones Este PoC ha sido creado para un entorno de laboratorio, lo que significa que el servidor debe configurarse con un ajuste específico es decir, la...

CVE-2009-3103---srv2.sys-SMB-Code-Execution-Python-MS09-050-

Microsoft-Windows---srv2.sys-SMB-Code-Execution-Python-MS09-050- Microsoft Windows - 'srv2.sys' SMB Code Execution Python MS09-050 Exploit for CVE-2009-3103 Overview This Python script is an updated version of a public exploit for CVE-2009-3103. The original code relied on the SMB.connection...

CVE-2023-22515-Scan.

CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...

CVE-2017-0199-v5.0

Exploit toolkit CVE-2017-0199 - v5.0 Exploit toolkit CVE-2017-0199 - v5.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

CVE-2012-2982

CVE-2012-2982 Python POC for CVE-2012-2982 Webmin 1.580 improved from the original by user OstojaOfficial This is an improved version of the original script that allows the user to see the input data format without needing to view the entire script to discover it. To achieve this, that section of...

spring-retry-toolkit

This project provides declarative retry support for Spring applications. It is used in Spring Batch, Spring Integration, and others. Imperative retry is also supported for explicit usage. Version The version fix spring-retry with 2.0.13 for java8 and spring4 or spring5, For more information, plea...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Nodejs modules js-yaml, thrift and hono

Summary IBM App Connect Enterprise Runtime is vulnerable to multiple vulnerabilities due to Nodejs modules js-yaml, thrift and hono. Vulnerability Details CVEID:CVE-2026-59868 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yam...

subfinder

快速被动的子域枚举工具。 功能特性 • 安装 • 使用方法 • API 设置 • 库 • 加入 Discord subfinder 是一款子域发现工具，使用被动在线源返回网站的有效子域。它具有简单、模块化的架构，并针对速度进行了优化。subfinder 只专注于做一件事——被动子域枚举，而且做得非常好。 我们已使其符合所有使用的被动源许可证和使用限制。被动模式保证了速度和隐蔽性，渗透测试人员和漏洞赏金猎人同样可以利用这些优势。 功能特性 快速且强大的解析和通配符消除模块 精选 被动源以最大化结果 支持多种输出格式（JSON、文件、stdout） 针对速度优化且对资源轻量 STDIN/OU...

CVE-2026-39047

CVE-2026-39047: Epson Printer RAW Protocol Exploit Framework Repository: https://github.com/J4ck3LSyN-Gen2/CVE-2026-39047 PoC Script: poc.py Mock Target: mockprinter.py Author: J4ck3LSyN Overview This framework demonstrates the CVE-2026-39047 vulnerability - a remote buffer overflow in Epson...

CVE-2023-41064

LibWebP vulnerability CVE-2023-41064 Code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP file an image format with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...

massh-enum

+----------------+ | massh-enum 1.0 | +----------------+ root@kitploit: OpenSSH 2.3 up to 7.4 Mass Username Enumeration CVE-2018-15473 This script contains Matthew Daley Python script License: GPLv3, Description OpenSSH versions 2.3 up to 7.4 suffer from a username enumeration vulnerability. The...

ElectronVulnerableVersion

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129 This PowerShell script downloads Sysinternals Strings, recursively searches for strings within all .exe files across all drives, and compares the Electron version found with known patched versions below to determine vulnerability to...

CVE-2015-3224

CVE-2015-3224 Ruby-On-Rails Web Console RCE What is this? This is a metasploit module for Metasploit. I already have this module. Yes, this is packaged into metasploit. But with that module you can't get arbitrary command execution. I mean, you can only establish reverse/bind shell payloads with...

openrisk

openrisk openrisk 是一个实验性工具，用于读取 nuclei 的输出（文本、Markdown 和 JSON），并利用 OpenAI 的 GPT-4o 模型为主机生成风险评分。目前，它旨在一次针对单个目标运行。 注意 ：这是由 ProjectDiscovery 研究团队发布的实验性程序。因此，它可能无法达到我们其他项目的代码质量标准，并且可能未经充分测试。我们欢迎针对将这些实验整合到其他工具中的建议、错误修复和创意！ 安装 openrisk openrisk 需要 go1.20 才能成功安装。运行以下命令安装最新版本 - root@kitploit: go install ...

CVE-2020-0688

CVE-2020-0688 Scanner This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688 It's written ugly and in PHP. Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch! Requirements You need php-cl...

CVE-2024-25832-PoC

CVE-2024-25830 y CVE-2024-25832 - DataCube3: Control de Acceso Inadecuado y Carga de Archivos Sin Restricciones. Resumen Este repositorio presenta una Prueba de Concepto PoC para una cadena de explotación de dos pasos dirigida a dispositivos DataCube3. Combina CVE-2024-25830 Control de Acceso...