46582 matches found
mimikatz
mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...
InstagramMutualFollowerChecker
Instagram Mutual Followers Checker A Node.js/Express web application that checks for mutual followers between 2 or more Instagram accounts by scraping their followers data. Features β Check mutual followers between multiple Instagram accounts β Works with public Instagram accounts and private...
Sync_Breeze_Enterprise_10_6_24_-DOS
SyncBreezeEnterprise10624-DOS root@kitploit: Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege BalcΔ± Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version...
snowpick
snowpick is a ServiceNow exposure scanner that finds misconfigured widget ACLs, REST API access controls, and unauthenticated data exposure. ServiceNow exposes data through two common public surfaces: Service Portal widgets and the Table REST API. When access controls on either surface are...
SOARCA
Automate threat and incident response workflows with CACAO security playbooks Context and backgound Organisations are increasingly automating threat and incident response through playbook driven security workflow orchestration. The essence of this concept is that specific security events trigger ...
amt_auth_bypass_poc
Intel AMT authentication bypass example This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5689 vulnerability. It is essentialy a mitmproxy script that simply blanks an Authorization header "response" field. Example usage: root@kitploit: mitmdump -p 8080 -dd...
CVE-2026-21012-Rust-serde-Deserialization-of-Untrusted-Enum-Variant-Injection-
CVE-2026-21012 β Rust serde Deserialization of Untrusted Enum Variant Injection Program Code Rust root@kitploit: // serdevuln.rs - Deserializes an enum from user JSON without validation use serde::Deserialize, Serialize; use serdejson; deriveDeserialize, Debug enum AdminAction ReadLogs,...
CVE-2022-28672
CVE-2022-28672 Discord Server This bug was Use after Free caused by improper handling of javascript object memory references. Blog Foxit PDF Reader - UaF - RCE - JIT Spraying Advisory CVE-2022-28672 Demo...
CVE-2023-34835
CVE-2023-34835 β eScan Management Console: Reflected Cross-Site Scripting XSS Table of Contents Overview Vulnerability Details Affected Product Technical Analysis Proof of Concept Steps to Reproduce Impact Mitigation & Remediation References Disclaimer Overview A Reflected Cross-Site Scripting XS...
tracy
Tracy Una herramienta de pentesting diseΓ±ada para ayudar a encontrar todos los sinks y sources de una aplicaciΓ³n web y mostrar estos resultados de manera digerible. tracy debe usarse durante la fase de mapeo de la aplicaciΓ³n en el pentest para identificar fuentes de entrada y sus correspondientes...
Flask-Unsign
Flask Unsign Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys. For the standalone wordlist component, please visit the flask-unsign-wordlist repository. Requirements Python 3.6+ Installation To install the application, simply...
CVE-2019-2725-POC
CVE-2019-2725-POC CVE-2019-2725-POC Modify the webshell address in the txt file to your own webshell address, then use Burp Suite to send a POST request to the target server, with the request packet content being the content from the txt file...
CyberPanel-RCE
CyberPanel-RCE Exploit for CyberPanel RCE found on v2.3.6 More information availabe on my blog: https://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce...
CVE-2022-38766
CVE-2022-38766 PoC for vulnerability in Renault ZOE Keyless System CVE-2022-38766 Introduce Companylogo AUTOCRYPT MalHyuk Overview This vulnerability raised the question of whether ZOE electric vehicles are safe form RF hacking. For this reason, the actual ZOE vehicle released this year was...
GLPwn
GLPwn A GLPI hack tool, using Apache directory listing and / or CVE-2020-15175 to dump files and valid sessions. Who is vulnerable? Any GLPI instance that has Apache directory listing already enabled on the /files folder All GLPI instances prior to 9.5.1 running on a default Apache2 server. What...
CVE-2021-43798
CVE-2021-43798: Grafana Arbitrary File Read Vulnerability Added nuclei template for full-version detection on Windows+Linux List of 52 plugins: root@kitploit: live icon loki text logs news stat mssql mixed mysql tempo graph gauge table debug zipkin jaeger geomap canvas grafana welcome xychart...
F5-Big-IP-CVE-2020-5902-mass-exploiter
F5-Big-IP-CVE-2020-5902-mass-exploiter F5 Big-IP CVE-2020-5902 mass exploiter/fuzzer. usage: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...
ClawGuard
ClawGuard π‘οΈ δΈζη Our Project:https://github.com/SafeAgent-Beihang/clawguard ClawGuard is a security toolkit designed to mitigate risks associated with autonomous agents, such as OpenClaw and other LLM-driven entities. As agents gain more autonomy to execute code, access APIs, and manage files,...
EXPLOIT-CVE-2026-8832
EXPLOIT CVE-2026-8832 An exploitation tool to test for Remote Code Execution RCE vulnerabilities in the WordPress plugin WPCode Lite Insert Headers and Footers v2.3.5. This vulnerability stems from registering the Custom Post Type CPT wpcode without defining a custom capabilitytype. This oversigh...
secrets-manager-rs
secs-man secs-man is a tool for managing backups of secrets with tool-independence in mind: if you encrypt your secrets with this software, you should be able to decrypt and restore them without this software. Even if secs-man disappears from the face of the Earth, your data is still accessible...