EternalView

EternalView EternalView is an all in one basic information gathering CLI tool made purely in BASH EternalView in action CAUTION: This tool is purely for educational purposes, don't use it on any website without the permission of it's owner. The user is responsible for his/her actions! Update:...

CVE-2019-12384

CVE-2019-12384 Jackson RCE And SSRF 0x01 python -m SimpleHTTPServer root@kitploit: python -m SimpleHTTPServer Serving HTTP on 0.0.0.0 port 8000 ... 127.0.0.1 - - 24/Jul/2019 03:06:32 "GET /inject.sql HTTP/1.1" 200 - inject.sql root@kitploit: CREATE ALIAS SHELLEXEC AS $$ String shellexecString cmd...

authelia

!OpenSSF Best...

authelia

!OpenSSF Best...

shellshock

shellshock Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock CVE-2014-6271 & CVE-2014-7169 vulnerabilities in Bash environments. Installation: Clone the repository: git clone https://github.com/ajansha/shellshock.git Navigate to the directory...

gaia

Gaia: Global API Integrity Assessor Dependencies Install opam to build the tests API. Install git, python3, pip and .NET to build RESTler and Schemathesis. Install cargo to build Gaia. Install docker v26.0.1 and docker compose v2.26.1 to build Gaia with the ELK Stack optionnal if not. Install nod...

CVE-2025-24016

Wazuh रिमोट कोड एक्ज़ीक्यूशन RCE - PoC भेद्यता अवलोकन यह रिपॉजिटरी Wazuh सर्वर में रिमोट कोड एक्ज़ीक्यूशन RCE भेद्यता को प्रदर्शित करती है, जो wazuh-manager पैकेज में असुरक्षित डिसीरियलाइज़ेशन के कारण उत्पन्न हुई है। यह भेद्यता API एक्सेस वाले रिमोट हमलावरों समझौता किया गया डैशबोर्ड, क्लस्टर में...

X-force

IBM X-Force Exchange library | IBM Security X-FORCE Exchange library in Python 3. Search: threatactivities, threatgroups, malwareanalysis, collector and industries. For others applications. See ---|--- Install root@kitploit: pip3 install XForce Use Using you APIKEY make a basic authentication. Se...

certificate-of-compromise

Certificate of Compromise SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service v1.0.0 Living Document & Community Contributions This paper is a living document. ADCS research is not static — techniques get patched, new conditions are discovered, and community analys...

stegowiper

stegoWiper: स्टेगोमालवेयर को बाधित करने के लिए एक शक्तिशाली और लचीला सक्रिय हमला पिछले 10 वर्षों में, कई खतरे वाले समूहों ने सभी क्षेत्रों और दुनिया के सभी क्षेत्रों में संगठनों पर हमला करने के लिए स्टेगोमालवेयर या अन्य स्टेगानोग्राफी-आधारित तकनीकों का उपयोग किया है। कुछ उदाहरण हैं: APT15/Vixen...

stegowiper

stegoWiper: A powerful and flexible active attack for disrupting stegomalware Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Pand...

quantum

Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...

sysreptor

An easy and customizable pentest reporting platform designed to simplify pentest report creation for security professionals. The FFG is the central national funding organization and strengthens Austria's innovative power. This project is funded by the FFG...

Sn1per

Products Attack Surface Management About Sn1per News Contact Demo Pricing Shop Sn1per — The Offensive-Security Platform for Modern Teams Recon, scanning, exploitation, and reporting in a single workspace — whether you're a solo pentester or a global SOC. Sn1per Professional 2026 is here The large...

CVE-2022-23909

CVE-2022-23909 विवरण: Windows पर, Sherpa Connector Service संस्करण 2020.2.20328.2050 में एक अनकोटेड सर्विस पथ भेद्यता है, जो स्थानीय रूप से प्रमाणित उपयोगकर्ताओं को प्रशासनिक विशेषाधिकारों के साथ दुर्भावनापूर्ण निष्पादन योग्य फ़ाइलों को LocalSystem विशेषाधिकारों के साथ चलाने की अनुमति देती है। एक...

CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite

CVE-2023-32422-ثغرة-تجاوز-TCC-في-macOS-في-sqlite...

MOEW

Invisible Threats, Visible Solutions. Misaligned Opcode Exception Waterfall MOEW 3‑Stage SEH Waterfall PoC Benign, x86/Wow64 TL;DR: This PoC demonstrates a 3‑stage Structured Exception Handling SEH cascade caused by deliberate misaligned execution into raw byte blobs whose first valid instruction...

CVE-2026-23744-PoC

विवरण MCPJam inspector MCP सर्वरों के लिए स्थानीय-प्रथम विकास मंच है। संस्करण 1.4.2 और इससे पहले के संस्करण रिमोट कोड निष्पादन RCE भेद्यता के लिए संवेदनशील हैं, जो एक हमलावर को एक निर्मित HTTP अनुरोध भेजने की अनुमति देता है, जो MCP सर्वर की स्थापना को ट्रिगर करता है, जिससे RCE होता है। चूंकि MCPJ...

CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING This PoC is entirely generated by AI. Usage: root@kitploit: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi An unpatched version of ffmpeg will crash when processing baseline.avi...

cve-2026-9082-drupal-postgresql-rce

CVE-2026-9082 Drupal PostgreSQL SQLi to RCE This repository contains a local lab and a short exploit for the Drupal JSON:API PostgreSQL SQL injection described in the Ambionics article. The important part of the exploit is the PostgreSQL escalation: once the injection can evaluate a SELECT...