45869 matches found
SYNwall
SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...
ST3GG
root@kitploit: ███████╗████████╗██████╗ ██████╗ ██████╗ ██╔════╝╚══██╔══╝╚════██╗██╔════╝ ██╔════╝ ███████╗ ██║ █████╔╝██║ ███╗██║ ███╗ ╚════██║ ██║ ╚═══██╗██║ ██║██║ ██║ ███████║ ██║ ██████╔╝╚██████╔╝╚██████╔╝ ╚══════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═════╝ ⊰•-•✧ THE ULTIMATE STEGANOGRAPHY TOOLKIT ✧•-•⊱ Hi...
tivoli-poc
tivoli-poc CVE-2017-1635 PoC code CVEID: CVE-2017-1635 CVSS Base Score: 8 Affected Products and Versions: KDH component of IBM Tivoli Monitoring Basic Services KGL,KAX for Version 6.2.2.0 through 6.2.2.9 A vulnerability exists in the internal web server provided by IBM Tivoli Monitoring basic...
proftpd_bypass
This tool uses a specially craffted chain of commands to exploit CVE-2015-3306 and bypass the authentication system of ProFTPD's modcopy. It can be downloaded here you will need to run it from the command line Usage: proftpdbypass target port lcopy within target/rcopy to target lpath rpath...
CVE-2025-2825-CrushFTP-AuthBypass
🚨 CVE-2025-2825 – CrushFTP Authentication Bypass 🔎 Overview CVE-2025-2825 is a critical authentication bypass vulnerability affecting CrushFTP , a widely used secure file transfer server. The flaw allows remote attackers to bypass login authentication and gain administrative access by spoofing...
DriverSentinel
🛡️ DriverSentinel 🛡️ Vulnerable Windows Driver Scanner DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them against the LOLDrivers.io database. Features • Installation • Usage • How It Works 📋 Table of Contents Features...
cve-2022-30190-mitigate
This repository does not have a README...
SNEK_Equinox
SNEK Equinox I would like to thank Nightmare-Eclipse for the inspiration not personal from the project UnDefend - https://web.archive.org/web/20260521145157/https://github.com/Nightmare-Eclipse/UnDefend: Now funnily enough, I found a way to lie to the EDR web console to show that defender is up a...
cve-2022-42889-check
This repository does not have a README...
CrystalSliver
crystal-kit-sliver Crystal Palace evasion kit ported to Sliver C2. This is the first public port of rasta-mouse's Crystal-Kit Cobalt Strike to Sliver. It follows the same cross-C2 pattern proven by Crystal-Kit-Xenon Mythic. License: MIT — Copyright c 2026 Simone Licitra Target: Windows x64 only...
Citrix_CVE-2019-19781
This repository does not have a README...
mssqli-duet
MSSQLi-DUET - MSSQL Injection-based Domain User Enumeration Tool SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing. Supports various forms of WAF bypass techniques through the implementation of SQLmap tamper functions...
xtrace-sdk
The encrypted vector database. Your data never leaves your machine in plaintext. Documentation | X | LinkedIn Manage your AI memory → mem.xtrace.ai What is XTrace? Every vector database on the market requires you to hand your data to a third party in plaintext. XTrace doesn't. Your documents and...
CVE-2025-54322-exploit
CVE-2025-54322: XSpeeder SXZOS Pre-Auth RCE Exploit A professional Proof-of-Concept PoC exploit for CVE-2025-54322 , a critical pre-authentication remote code execution vulnerability in XSpeeder SXZOS firmware. This vulnerability was discovered and disclosed by the autonomous AI agent from pwn.ai...
CVE-2018-6961
CVE-2018-6961 - UNAUTHENTICATED COMMAND INJECTION VULNERABILITY This exploit works in Python2.7 - Not tested in any other version 1 Install Dependencies root@kitploit: pip install request if don't have pip installed, just run root@kitploit: apt-get install python-pip 2 Usage root@kitploit: python...
evilMP4
evilMP4 Explore CVE-2022-41741 with the Evil MP4 repository. It offers educational PoCs, and detailed documentation on securing nginx against MP4 file vulnerabilities. For legal, ethical security testing only. This repository provides tools, documentation, and examples for understanding and...
CVE-2019-7609
CVE-2019-7609 Kibana Vulnerability allowing remote code execution due to a flaw in Kibana's Timelion visualizer Environment Setup docker 1. Run the attached docker-compose.yml. root@kitploit: docker-compose up -d 2. Access http://127.0.0.1:5601 in a browser. Exploit 1. Prepare a reverse shell...
CVE-2022-45771-Pwndoc-LFI-to-RCE
Pwndoc local file inclusion to remote code execution of Node.js code on the server, discovered by @yuriisanin Features Custom Node.js code to execute server-side using --payload-file Cleanup after exploit Requirements An admin account on the PwnDoc instance Usage...
PortWitness
PortWitness v1.1 Written in Python2 This version of PortWitness has been developed in python2 in which modules like os,subprocess and sys etc have been used.The entire code is based on the concept of socket programming.Using Sockets we establish a connection with a web application to find out if...