getsubdomain

getsubdomain Obtén una lista de subdominios y comprueba si están activos o no mediante cada código de respuesta. Usando la API de c99.nl Instalación root@kitploit: ▶ go install github.com/abaykan/getsubdomain@latest Pon tu APIKEY en /.config/c99.txt: root@kitploit: ▶ echo "" /.config/c99.txt Uso...

struts_rest_rce_fuzz-CVE-2017-9805-

This repository does not have a README...

pulsegram

PulseGram PulseGram is a keylogger integrated with a Telegram bot. It is a monitoring tool that captures keystrokes, clipboard content, and screenshots, sending all the information to a configured Telegram bot. It is designed for use in adversary simulations and security testing contexts. ⚠️...

CVE-2024-3656

Keycloak 24.0.5 уязвим к нарушению контроля доступа Broken Access Control, где атакующий может использовать любого аутентифицированного пользователя для выполнения некоторых действий API, таких как: Тестирование LDAP-подключений через конечную точку testLDAPConnection. Получение неуправляемых...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS Reflected XSS v3.2.3 Author: Sergio Description: Multiple Cross-site scripting XSS reflected vulnerabilities in the evolution v.3.2.3 installation process Admin options allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the cmsadmin,...

ZerologonWithImpacket-CVE2020-1472

Zerologon and Impacket Combination Exploit CVE-2020-1472 This repository contains an updated implementation 2024 of the Zerologon exploit combined with Impacket tools to exploit CVE-2020-1472 Zerologon. This exploit targets Windows Server environments to manipulate machine account passwords and...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme root@kitploit: +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as...

CVE-2023-0297_Pre-auth_RCE_in_pyLoad

CVE-2023-0297: Pre-auth RCE in pyLoad The Story of Finding Pre-auth RCE in pyLoad TL;DR A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality. You can find the report here and exploit code here. Details pyLoad is an OSS...

hunting-rules

Suricata Hunting Rules a.k.a. TGI HUNT Suricata rules to assist network anomaly detection. These rules are not performance focused and may perform poorly on high throughput networks. Requires Suricata version 7.0.3 or above. Feedback and suggestions are welcomed here. email blog...

android_kernel_oneplus_avicii

OnePlus Nord avicii NeverSettle Kernel Source OnePlus Nord codename:- avicii is the first upper mid-range non-flagship smartphone from OnePlus Technology Co., Ltd. released in the year 2020. The phone is available in 2 variants based on region: AC2001 India & AC2003 Europe & Global Features|...

CVE-2023-39141-LFI-enumerator

Enumerate remote server files by exploiting CVE-2023-39141 See POC: https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e...

CVE-2021-44910_SpringBlade

CVE-2021-44910-SpringBlade Vulnerability Detection Tool SpringBlade JWT authentication vulnerability. Usage python3 Tested with HS256, HS384, and HS512 algorithms respectively...

CVE-2023-36884-Scripts-for-Intune-Remediation-SCCM-Compliance-Baseline

This repository does not have a README...

CVE-2025-49132

CVE-2025-49132 Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute...

CVE-2018-13797

node-macaddress Retrieve MAC addresses in Linux, OS X, and Windows. A common misconception about MAC addresses is that every host had one MAC address, while a host may have multiple MAC addresses – since every network interface may have its own MAC address. This library allows to discover the MAC...

CVE-2025-30208

中文 | English Vite Dev Server Vulnerability Scanner 一个内外网通吃的自动化扫描器 An automated tool for scanning Vite development server vulnerabilities. This tool utilizes the FOFA API to collect potential targets and automatically detects specific vulnerabilities. Features Auto Automatic target asset collectio...

android_kernel_xiaomi_sunny

Linux kernel This file was moved to Documentation/admin-guide/README.rst Please notice that there are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. In order to build the documentation, use make htmldocs or make pdfdocs. The...

CVE-2024-28995

SolarWinds Serv-U Directory Traversal Vulnerability POC root@kitploit: cat targets.txt | nuclei -duc -t CVE-2024-28995.yaml image Analysis https://t.co/JPCd6Y4v1g Shodan Querys product:"Rhinosoft Serv-U httpd,rhinosoft serv-u httpd"...

cve-2020-0796-scanner

cve-2020-0796-scanner Этот проект основан на SMBGhost, который используется для сканирования уязвимости CVE-2020-0796 - RCE в SMBv3. Добавлена только функция пакетного сканирования. Использование root@kitploit: python3 cve-2020-0796-scanner.py -t Обходные пути root@kitploit: Set-ItemProperty -Pat...

CVE-2021-3493_CVE-2022-3357

ВНИМАНИЕ 1. Это github, содержащий исходный код и информацию об исследованиях двух CVE: CVE-2021-3493 и CVE-2022-3357, которые являются CVE для повышения привилегий и CVE для удаленного выполнения кода RCE соответственно. Если объединить эти две CVE, можно проникнуть на сервер Wordpress, и если...