CVE-2015-57115

CVE-2015-57115 Mass Checker For CVE-2015-57115 Description The CVE-2015-57115 Checker Script is a Python tool for detecting vulnerabilities related to CVE-2015-57115, which is a path traversal vulnerability in certain PHP applications. The script checks multiple URLs for the presence of this...

beacon_health_check

Beacon Health Check Aggressor Script Joe Vest Twitter: @joevest Description This aggressor script uses a beacon's note field to indicate the health status of a beacon. This is done by ... Tracking each beacon's current sleep/jitter time Calculating health based on a "max expected check in time"...

CVE-2023-50164

CVE-2023-50164 A scanning utility and PoC for CVE-2023-50164 Considerations CVE-2023-50164's exploitation is very environment specific. This PoC attempts to generalize the exploitation process by requiring the user to enter environment specific details through the script flags. The script attempt...

XPL-SEARCH

XPL SEARCH root@kitploit: Busca exploits/vulnerabilidades en múltiples bases de datos en línea! XPL SEARCH es una herramienta multiplataforma Windows y Linux, desarrollada en PHP con el objetivo de ayudar a la comunidad hacker a encontrar exploits o vulnerabilidades, utilizando bases de datos en...

CVE-2022-26134

CVE-2022-26134 poc Declaration: This POC is for learning purposes only. Any illegal operations are prohibited. If used for malicious destruction, it has nothing to do with the author!!! Usage Single URL verification root@kitploit: python CVE-2022-26134.py target url Batch URL verification...

Remot3d

Remot3d - Una forma fácil de explotación Se actualizará próximamente Remot3d - Una herramienta diseñada para generar una puerta trasera para controlar y explotar un servidor que ejecuta PHP Hypertext Preprocessor. Equipada con una puerta trasera ofuscada, lo que significa que generalmente debería...

F-Scrack

Para evitar el uso malicioso de este script, este proyecto ha sido eliminado...

MagicArch

MagicArch: Configuración Automatizada de Arch Linux para Pentesting por MagicBytes MagicArch es un script integral de post-instalación construido con Ansible, diseñado para transformar una instalación básica de Arch Linux en una Distribución de Pentesting completamente equipada, personalizada par...

CVE-2019-14287

CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...

fb-phisher-python

Phishing de Facebook Autor original : Arslan Mughal POR : arjunindia repositorio original : https://github.com/arslanmughal5566/facebookphishing Acerca del script : Con este script puedes realizar el robo de credenciales de inicio de sesión de Facebook con algunas habilidades de ingeniería social...

Steghide-Brute-Force-Tool

Herramienta de Fuerza Bruta para Steghide Ejecuta un ataque de fuerza bruta con Steghide sobre un archivo que contiene información oculta y tiene una contraseña establecida. Cómo funciona Clona este repositorio en tu computadora y escribe en tu terminal: git clone...

NextGEN Gallery <= 4.2.3 - Reflected Cross-Site Scripting

NextGEN Gallery through 4.2.3 reflects a URL-decoded nggtag route value into the generated tag page without the context-specific escaping added in 4.2.4. An unauthenticated attacker can break out of the tag context and inject an auto-executing script. This template injects an svg onload payload...

ReQlogic v11.3 - Cross Site Scripting

ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the POBatch and WaitDuration parameters. id: CVE-2022-41441 info: name: ReQlogic v11.3 - Cross Site Scripting author: r3Y3r53 severity: medium description: | ReQlogic v11.3 allow attackers ...

CandidATS 3.0.0 - Cross-Site Scripting

CandidATS 3.0.0 contains a cross-site scripting vulnerability via the page parameter of the ajax.php resource. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

Parallels H-Sphere 3.6.1713 - Cross-Site Scripting

Parallels H-Sphere 3.6.1713 contains a cross-site scripting vulnerability via the indexen.php 'from' parameter. id: CVE-2022-30777 info: name: Parallels H-Sphere 3.6.1713 - Cross-Site Scripting author: 3th1cyuk1 severity: medium description: | Parallels H-Sphere 3.6.1713 contains a cross-site...

WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting

A cross-site scripting vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. id: CVE-2011-5106 info: name: WordPress Plugin Flexible Custom Post Type 0.1.7 - Cross-Site...

PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting XSS via the "action" parameter of index.php. id: CVE-2023-40751 info: name: PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | PHPJabbers Fundraising Script v1.0 is...

osTicket < 1.10.2 - Cross-Site Scripting

Cross-site scripting XSS vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter. id: CVE-2018-7196 info: name: osTicket 1.10.2 - Cross-Site Scripting author: ritikchaddha severity: medium...

Apache ActiveMQ <=5.15.5 - Cross-Site Scripting

Apache ActiveMQ versions 5.0.0 to 5.15.5 are vulnerable to cross-site scripting via the web based administration console on the queue.jsp page. The root cause of this issue is improper data filtering of the QueueFilter parameter. id: CVE-2018-8006 info: name: Apache ActiveMQ =5.15.5 - Cross-Site...