Next.js-RCE-Scanner-BurpSuite-Extension-

CVE-2025-55182 Next.js RCE Burp Extension Plugin Features Passive Scanning : Automatically detect all Next.js sites passing through Burp Memory Shell Injection v2.2 New! Right-click on the target request, select Inject AntSword Memory Shell AntSword, supports both GET and POST types of memory...

Athanasius

Athanasius Hacking Framework Installation 1.Clone Repo root@kitploit: git clone https://github.com/shyam999/Athanasius.git 2.Install Requirements root@kitploit: pip install -r requirements.txt 3.Install hydra root@kitploit: sudo apt install hydra 4.Run The Script root@kitploit: python athanasius....

CVE-2021-22005-metasploit

CVE-2021-22005-metasploit el script de metasploit POC/EXP sobre CVE-2021-22005 VMware vCenter Server contiene una vulnerabilidad de carga arbitraria de archivos preparación POC root@kitploit: git clone https://github.com/TaroballzChen/CVE-2021-22005-metasploit cd CVE-2021-22005-metasploit mkdir -...

PichichiH0ll0wer

PichichiH0ll0wer PichichiH0ll0wer About Features Injection methods Installation Usage Credits About --== Process hollowing loader written in Nim for PEs only ==-- I built PichichiH0ll0wer to learn and contribute, sure. but also because I'm quite tired of shellcodes everywhere. Loading PEs might b...

cwe-tool

cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install...

octosuite

Kit de herramientas basado en terminal para el análisis de datos de GitHub. root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Instalación root@kitploit: pip...

octosuite

Terminal-based toolkit for GitHub data analysis. root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile Installation root@kitploit: pip install octosuite Usage T...

freeradius-server

The FreeRADIUS server Introduction The FreeRADIUS Server Project is a high performance and highly configurable multi-protocol policy server, supporting RADIUS, DHCPv4 DHCPv6, DNS, TACACS+ and VMPS. It is available under the terms of the GNU GPLv2. Using RADIUS allows authentication and...

CVE-2021-45232

CVE-2021-45232 CVE-2021-45232 POC 1、Apache APISIX Dashboard unauthorized access vulnerability CVE-2021-45232 scan 2、Apache APISIX Dashboard default password scan...

RayHunter-Web-Flasher

◈ RayHunter Install Wizard Interactive step-by-step guide to flashEFF's Rayhunter IMSI catcher detector on an Orbic RC400L hotspot. Auto-detects your OS. 🚀 Launch the Wizard 👉Open the Install Wizard What is Rayhunter? Rayhunter is the Electronic Frontier Foundation's open-source tool for detectin...

CVE-2024-50629_50631

CVE-2024-5062950631 Explotación N-day de RCE pre-autenticación en Synology BeeStation. Detalle: https://kiddo-pwn.github.io/blog/2025-11-30/writing-sync-popping-cron https://github.com/user-attachments/assets/8e2ef59c-4f60-4308-8cd4-6d7ce0ba72e1 root@kitploit: $ python3 poc.py 192.168.88.248...

LeakManager

LeakManager Install root@kitploit: sudo apt-get install mongodb-org screen pip3 install -r requeriments.txt Usage root@kitploit: screen -S leakManager hug -f index.py -p 1337 OR gunicorn index:hugwsgi -b 0.0.0.0:1337 OR uwsgi --http 0.0.0.0:1337 --wsgi-file index.py --callable hugwsgi ctrl + a + ...

XXRF-Shots

What is SSRF vulnerability? Server Side Request Forgery SSRF is a type of vulnerability that enables attackers to send specially crafted requests through a vulnerable web application. With this technique, attackers can gain unauthorized access to internal resources behind a firewall, which would...

relayer

Relayer - SMB Relay Attack Script. Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing...

dirstalk

Dirstalk Dirstalk is a multi threaded application designed to brute force paths on web servers. The tool contains functionalities similar to the ones offered by dirbuster and dirb. Here you can see it in action: Contents How to use it Scan Useful resources Dictionary generator Download Developmen...

Nightingale

Nightingale: Docker for Pentesters This project is supported by: | ---|--- Nightingale is a ready-to-use, multi-architecture Docker toolkit for pentesting and security research. It gives you a reproducible environment with curated tools for web, network, mobile, API, OSINT, and forensics workflow...

UltimateWDACBypassList

Ultimate WDAC Bypass List A centralized resource for previously documented WDAC/Device Guard/UMCI bypass techniques as well for building/managing/testing WDAC policies Note: WDAC Windows Defender Application Control has been rebranded by Microsoft as "Application Control" or "Application Control...

kcfg-bypass

kcfg-bypass Ejemplo de bypass de kcfg - CVE-2024-21338...

CVE-2021-21311

CVE-2021-21311 Descripción SSRFServer-side Request Forgery en Adminer herramienta de gestión de bases de datos de código abierto desde v4.0.0 v4.7.8 parcheado en v4.7.9 Commit del parche Uso root@kitploit: exploit.py -h -target TARGET -redirect REDIRECT -host HOST -port PORT options: -h, --help...

AI-driven-MITRE-Attack

POC : AI-driven MITRE Attack Detection and Alert Enrichment This repository demonstrates a machine learning pipeline for detecting MITRE ATT&CK techniques from logs and enriching the output using a local LLM. Overview The project is divided into two main components : 1. Machine Learning Model ML ...