Lucene search
+L

59407 matches found

Kitploit
Kitploit
•added 2026/09/29 6:48 a.m.•18 views

CVE-2025-68461

CVE-2025-68461 Scanner A C++ security scanner tool to detect Cross-Site Scripting XSS vulnerabilities in Roundcube Webmail installations. Impact Unauthorized access to user accounts Session hijacking Data exposure Unauthorized actions on behalf of users Affected Versions The scanner checks for th...

7.2CVSS7.6AI score0.26842EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/29 6:47 a.m.•16 views

bucky

Bucky Una herramienta de enumeración de ID de cuenta S3 y descubrimiento de buckets Dado un único bucket S3 accesible, bucky extrae el ID de cuenta AWS de 12 dígitos que lo posee, luego descubre buckets adicionales pertenecientes a la misma cuenta probando nombres de buckets contra una lista de...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/29 6:20 a.m.•16 views

evilginx2

Evilginx 3.0 Evilginx es un framework de ataque de intermediario man-in-the-middle utilizado para el phishing de credenciales de inicio de sesión junto con cookies de sesión, lo que permite eludir la protección de autenticación de dos factores. Esta herramienta es la sucesora de Evilginx, lanzada...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/29 6:20 a.m.•3561 views

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/29 6:20 a.m.•9 views

CVE-2026-57829

Helix Ultimate Framework — Unauthenticated Stored XSS comajax → Admin Session-Riding → Full Account Takeover This is the strongest finding in this research folder — CRITICAL, fully confirmed end-to-end. Unlike the delete-only bug in helixultimatedeletepoc.md, this one has a real, working path to...

8.7CVSS5.9AI score0.00253EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/29 6:10 a.m.•15 views

CVE-2018-10933

CVE-2018-10933 to test this code: get vulnerable version of libssh at homepage: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz uncompress and build, then go to example directory, there's a simple sshd server using libssh name: samplesshd-cb run this simple sshd by command: $ samplesshd-cb...

9.1CVSS7.7AI score0.91789EPSS
SaveExploits13
Kitploit
Kitploit
•added 2026/09/29 6:06 a.m.•20 views

penelope

Penelope es un moderno manejador de shells para pentesters y jugadores de CTF. Proporciona una alternativa más capaz a los oyentes básicos de netcat, añadiendo actualización automática de PTY, gestión de sesiones, registro, transferencias de archivos y módulos auxiliares. Tabla de contenidos 📥...

6.1AI score
SaveExploits0References28
Kitploit
Kitploit
•added 2026/09/29 6:03 a.m.•15 views

burp_global_match_replace

Global Match & Replace GMR Burp Suite Extension Global Match & Replace GMR extends Burp Suite with match/replace rules to apply globally or across multiple tools of your choice Repeater, Intruder, Proxy, etc.. It provides per-request and response diffs so you can see exactly what changed. This...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 5:40 a.m.•12 views

cve-2020-13777

Zeek test script for CVE-2020-13777 This script performs a simple test to check if a server is potentially vulnerable to CVE-2020-13777. CVE-2020-13777 causes GnuTLS to create unencrypted session tickets. This seems to be detectable by checking gnutls sets the keyname to zero - for which it uses...

7.4CVSS7.7AI score0.22284EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/29 5:36 a.m.•160 views

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/29 5:16 a.m.•27 views

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 5:09 a.m.•12 views

CVE-2020-29667

CVE-2020-29667 Insufficient Session Expiration | Predefined Cookie Value Suggested description In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system and operate remote ATM...

10CVSS8.3AI score0.0323EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 5:07 a.m.•27 views

warpgate

Warpgate is a smart & fully transparent SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC bastion host that doesn't require a client app or an SSH wrapper. Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network. Warpgate will record ever...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/29 5:03 a.m.•19 views

cowrie

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie Qué es Cowrie Cowrie es un honeypot SSH y Telnet de interacción media a alta diseñado para registrar...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 5:00 a.m.•15 views

DeadDialect

DeadDialect Every boot speaks a different language. Yesterday's binary is today's dead code. A session-unique RISC-V ISA remapping system. Every time the system boots, it generates a fresh cryptographic permutation of the instruction set. Binaries compiled for one session are cryptographically...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 4:49 a.m.•15 views

moodle-cve

Challenge creation Inspiration moodle CVE-2025-26529: posoning admin logs to full admin account takeover @ref: https://www.youtube.com/watch?v=dhVF6hQUzWU @ref: https://github.com/NightBloodz/moodleTestingEnv @ref: https://medium.com/@Nightbloodz/admin-account-takeover-in-moodle-093708a0f749...

8.3CVSS6.5AI score0.00518EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/29 4:47 a.m.•12 views

flask-session-cookie-manager

Decodificador/Codificador de Cookies de Sesión de Flask Autor original : Wilson Sumanang Autor de correcciones y mejoras : Alexandre ZANNI Importado desde saruberoz.github.io Dependencias Python 2 o Python 3 itsdangerous Flask Instalación Paquete BlackArch Linux root@kitploit: pacman -S...

6.1AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/29 4:47 a.m.•12 views

cua-kit

CUA-Kit A toolkit for enumerating and interacting with computer use agents on Windows and macOS systems. Tools Tool| Description| Outputs ---|---|--- cua-enum| Enumerate computer use agent configurations Claude Code, Codex CLI, Cursor, Gemini CLI| .exe, .x64.o cua-exec| Execute computer use agent...

6.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 4:46 a.m.•14 views

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

10CVSS8.8AI score0.99927EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/09/29 4:46 a.m.•7 views

CVE-2025-24813

CVE-2025-24813 Apache Tomcat - Remote Code Execution via Session Deserialization Unauthenticated partial PUT + path traversal + gadget-driven deserialization Description Apache Tomcat instances with the default servlet PUT enabled readonly=false allow writing files via HTTP PUT requests. By...

10CVSS8.2AI score0.99927EPSS
SaveExploits51
Rows per page
Query Builder