46099 matches found
CVE-2017-1000117
CVE-2017-1000117 usage root@kitploit: $ git clone --recursive https://github.com/ieee0824/CVE-2017-1000117.git when git has problem, ifconfig is executed...
CVE-2025-7384
CVE-2025-7384 — PHP Object Injection to RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Critical CWE: CWE-502 — Deserialization of Untrusted Data Authentication Requirement: None Unauthenticated Impact: Remote Code Execution Table of Contents 1. Vulnerability Overvi...
CVE-2025-43400
CVE-2025-43400 Video + my report + crash file .pfa...
mesh-kridik
mesh-kridik ¡Mejora la seguridad de tu malla de servicios de Kubernetes! mesh-kridik es un verificador de seguridad de código abierto que realiza varias comprobaciones de seguridad en un clúster de Kubernetes con malla de servicios Istio y genera un informe de seguridad. Las pruebas de comprobaci...
mesh-kridik
mesh-kridik Enhance your Kubernetes service mesh security !! mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and outputs a security report The security checks tests are the full implementation of istio security...
aquaman
🔱 Aquaman 🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you already keep them, never in the agent's memory. Compatible with 1Password, keychain, keepassxc and many others. You set up Claude Code,...
Application-Security-Curriculum
Application-Security-Curriculum Grant Ongers - Scaling AppSec through Education - DEF CON 29 AppSec Village...
fierce
Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...
dnsdiag
DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...
tplink-smartplug
TP-Link WiFi SmartPlug Client and Wireshark Dissector For the full story, see Reverse Engineering the TP-Link HS110 tplinksmartplug.py A python client for the proprietary TP-Link Smart Home protocol to control TP-Link HS100, HS110 and KP115 WiFi Smart Plugs. The SmartHome protocol runs on TCP por...
Industrial Security Auditing Framework
Industrial Security Auditing Framework root@kitploit: ▄█ ▄████████ ▄████████ ▄████████ ███ ███ ███ ███ ███ ███ ███ ███▌ ███ █▀ ███ ███ ███ █▀ ███▌ ███ ███ ███ ▄███▄▄▄ ███▌ ▀███████████ ▀███████████ ▀▀███▀▀▀ ███ ███ ███ ███ ███ ███ ▄█ ███ ███ ███ ███ █▀ ▄████████▀ ███ █▀ ███ ISAF aims to be a...
CVE-2015-6637
CVE-2015-6637 PoC by Edward Hung Please backup your device while run PoC https://source.android.com/security/bulletin/2016-01-01.html...
TERM1B1TB0T
TERMI₿IT₿OT 🤖 A basic tool that tracks Bitcoin transactions in real time above or below a particular price target using a websocket API on your terminal. STEP-BY-STEP: WINDOWS -Step 1: Install Python if not already installed Download from python.org During install → make sure to check ✅ “Add Pyth...
dorkX
dorkX Pipe different tools with google dork Scanner Version 1.0 Install zoid@MSI /dorkX git clone https://github.com/ethicalhackingplayground/dorkX zoid@MSI /dorkX cd dorkX zoid@MSI /dorkX go build dorkx.go zoid@MSI /dorkX go build corsx.go zoid@MSI /dorkX go build csrfx.go zoid@MSI /dorkX go bui...
react2shell
React2Shell Vulnerability Checker CVE-2025-55182 Detection Tool for Ubuntu Linux and Windows 10/11 Description This tool detects potential React2Shell vulnerabilities CVE-2025-55182 in React projects by checking: package.json and lock files for vulnerable packages nodemodules directory for affect...
pipe-intercept
pipe-intercept Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools Named Pipes are very popular for interprocess communication on Windows. They are used in many applications, including Windows Remote Procedure Call RPC. The purpose of this tool is to allow security...
hackbox
HackB0x v2.0 HackBox is the combination of awesome tools and techniques. HackBox is a comprehensive and powerful tool that combines a variety of cutting-edge techniques to empower security professionals in their mission to identify and remediate vulnerabilities within web applications and network...
snitch
snitch a friendlier ss / netstat for humans. inspect network connections with a clean tui or styled tables. install homebrew root@kitploit: brew install snitch thanks to @bevanjkay for adding snitch to homebrew-core go root@kitploit: go install github.com/karol-broda/snitch@latest nixpkgs...
juicy-potato
Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...