CVE-2021-24545

CVE-2021-24545 WP HTML Author Bio alert/XSS/ Then view post made by the author to trigger the XSS Video POC: https://www.youtube.com/watch?v=fhzJZ5hSI-g...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit About: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. root@kitploit: use - python3...

CVE-2022-44311

Out-Of-Bounds Read in html2xhtml : CVE-2022-44311 Summary Html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elmclosetreenodet nodo at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service DoS via a crafte...

log4j

CVE-2021-44228 a.k.a. LOG4J This is a public repository from Wortell containing information, links, files and other items related to vulnerabilities related to Log4j Due to vulnerabilities in log4j 2.17.0 it is now recommended to patch to version 2.17.1 Knows CVEs CVE| Score| Description...

CVE-2020-3452

This repository does not have a README...

open-sammy

SAMMY Open Source v2 This repository hosts the open source version of SAMMY - the OWASP SAMM tool. https://owasp.org/www-project-open-sammy/ License This project is licensed under the Creative Commons Attribution-ShareAlike 4.0 International License. See the LICENSE file for details. SAMMY v2 The...

heartbleed-tools

OpenSSL Heartbleed CVE-2014-0160 vulnerability scanner, data miner and RSA key-restore tools. Author: Einar Otto Stangvik / @einaros / https://hacking.ventures Since the cat is long since out of the bag, and others have begun publishing their tools, I'm putting mine out there too. Hopefully this...

Mega-Bot

Mega Bot ☣ Scanner & Auto Exploiter What's Mega Bot ? root@kitploit: from MegaBot import print """ Tool Scanner Tool Auto Exploiter """ About Mega Bot root@kitploit: from MegaBot import print """ +----------------------------------+----------------------------------+ 1 X4PriV8 V1 | 22 XAttacker 2...

kimi

Kimi: Attack Surface Discovery Engine Developed with 💜 by @alechilczenko Project Context: This project serves as a portfolio piece demonstrating concepts in offensive security, concurrency, and distributed architecture. 1. Introducing Kimi: The Origin Story What was Kimi ? During my early days...

BlueSpy

BlueSpy - 从蓝牙设备录制音频的 PoC 本仓库包含一个概念验证（PoC）的实现，用于在合法用户不知情的情况下录制和回放蓝牙设备的音频。 该 PoC 在马德里举行的 RootedCON 2024 上的 BSAM: Seguridad en Bluetooth 演讲中进行了演示。 它旨在提高人们对蓝牙设备不安全使用以及建立一致的安全评估方法论必要性的认识。这正是 BSAM（蓝牙安全评估方法论） 的目的，由 Tarlogic 发布，可在此处获取。 此概念验证利用的是在 BSAM 方法论中未遵守 BSAM-PA-05 控制项...

MemProcFS

MemProcFS: MemProcFS is an easy and convenient way of viewing physical memory as files in a virtual file system. Easy trivial point and click memory analysis without the need for complicated commandline arguments! Access memory content and artifacts via files in a mounted virtual file system or v...

android_kernel_xiaomi_sunny

Linux 内核 本文件已移至 Documentation/admin-guide/README.rst 请注意，内核开发者和用户有多份指南可供参考。 这些指南可以渲染为多种格式，例如 HTML 和 PDF。 要构建文档，请使用 make htmldocs 或 make pdfdocs。 Documentation/ 子目录中包含各种文本文件， 其中一部分使用了 Restructured Text 标记语法。 请参阅 Documentation/00-INDEX 了解每个文件中包含的内容。 请阅读 Documentation/process/changes.rst 文件，该文件包含...

virustotalx

virustotalx 用于端点 virustotalx 用于 IP（V2） 安装 root@kitploit: git clone https://github.com/orwagodfather/virustotalx.git root@kitploit: cd virustotalx 创建 3 个账户 https://www.virustotal.com/gui/join-us 并复制 3 个 API 密钥 === root@kitploit: nano orwa.sh & root@kitploit: nano orwaV2.sh 在此处粘贴 3 个 API 密钥...

DataPrivacy-CVE-2025-23211

CVE-2025-23211: Server-Side Template Injection in Tandoor Recipes A self-contained, reproducible environment demonstrating CVE-2025-23211, a server-side template injection SSTI vulnerability in Tandoor Recipes that leads to remote code execution. The repository stands up the vulnerable version,...

CobaltBus

CobaltBus Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus Setup 1. Create an Azure Service Bus 2. Create a Shared access policy Connection string that can only Send and Listen 3. Edit the static connectionString variable in Beacon C projects to match t...

pbscan

摘要 polarbearscan 旨在实现更快、更高效的横幅抓取和端口扫描。它结合了两个不同的理念，希望使其值得您关注和投入时间。 第一个理念是使用无状态 SYN 扫描，通过加密保护的 cookie 来解析传入的确认包。据作者所知，这项技术最早由 Dan Kaminsky 在 scanrand 中开创。Scanrand 本身是 Paketto Keiretsu（一组扫描工具）的一部分，于 2001-2002 年左右发布。该代码的镜像可在 Packet Storm 1 找到。 第二个理念是使用修补过的用户态 TCP/IP 栈，以便扫描器在收到同时设置了 SYN 和 ACK...

pbscan

SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...

chainoffools

CryptoAPI CVE-2020-0601: Windows CryptoAPI Spoofing Vulnerability exploitation. More information in our blog post. Install requirements root@kitploit: pip install -U -r requirements.txt The certificate generation works with OpenSSL verion up to 1.0.2u. CA certificate We used the USERTrust ECC...

chainoffools

CryptoAPI CVE-2020-0601: Explotación de la vulnerabilidad de suplantación de CryptoAPI de Windows. Más información en nuestro artículo de blog. Requisitos de instalación root@kitploit: pip install -U -r requirements.txt La generación de certificados funciona con OpenSSL versión hasta 1.0.2u...

OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ This repo is being wound down. Future work should be via www-project-vulnerable-web-applications-directory The OWASP Vulnerable Web Applications Directory Project VWAD, https://owasp.org/www-project-vulnerable-web-applications-directory/ is a comprehensive and well...