Lucene search
+L

59407 matches found

Kitploit
Kitploit
•added 2026/09/29 6:20 a.m.•3561 views

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/29 5:36 a.m.•158 views

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/29 5:03 a.m.•19 views

cowrie

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 4:49 a.m.•15 views

moodle-cve

Challenge creation Inspiration moodle CVE-2025-26529: posoning admin logs to full admin account takeover @ref: https://www.youtube.com/watch?v=dhVF6hQUzWU @ref: https://github.com/NightBloodz/moodleTestingEnv @ref: https://medium.com/@Nightbloodz/admin-account-takeover-in-moodle-093708a0f749...

8.3CVSS6.5AI score0.00518EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2026/09/29 4:47 a.m.•12 views

cua-kit

CUA-Kit A toolkit for enumerating and interacting with computer use agents on Windows and macOS systems. Tools Tool| Description| Outputs ---|---|--- cua-enum| Enumerate computer use agent configurations Claude Code, Codex CLI, Cursor, Gemini CLI| .exe, .x64.o cua-exec| Execute computer use agent...

6.4AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 4:46 a.m.•14 views

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

10CVSS8.8AI score0.99927EPSS
SaveExploits51
Kitploit
Kitploit
•added 2026/09/29 4:37 a.m.•12 views

pocket_disasm

Pocket Disasm One MCP endpoint. Many isolated IDALib sessions. A lightweight, agent-first control layer for headless binary analysis with the IDA Pro MCP toolset. !IMPORTANT Pocket Disasm is an independent open-source project. It is not affiliated with, endorsed by, sponsored by, or an official...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/29 4:31 a.m.•13 views

CVE-2021-40906

CVE-2021-40906 - Reflected XSS in an unauthenticated zone Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Author: Edgar Augusto Loyola Torres. Attack type: Reflected XSS Solution: Update to Software Revision 1.6.0p26 or later Summary: CheckMK Raw Edition...

6.1CVSS6.5AI score0.00989EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/29 4:26 a.m.•92 views

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/29 4:23 a.m.•22 views

teleport

Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...

6.1AI score
SaveExploits0References14
Kitploit
Kitploit
•added 2026/09/29 4:14 a.m.•13 views

CVE-2022-23131

CVE-2022-23131 Zabbix - SAML SSO Authentication Bypass Description In the case of instances where the SAML SSO authentication is enabled non-default, session data can be modified by a malicious actor, because a user login stored in the session was not verified. Dork: root@kitploit: shodan-query:...

9.8CVSS8.6AI score0.95683EPSS
SaveExploits9References1
Kitploit
Kitploit
•added 2026/09/29 4:09 a.m.•16 views

CVE-2020-25399

CVE-2020-25399 Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat. Information Description: Attacker can send malicious file to any user using chat functional. File may contain js payload, which executes in...

7.8CVSS7.5AI score0.01023EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/29 4:07 a.m.•13 views

fortinet-cve-2024-50562

Fortinet SSL-VPN Session Reuse Vulnerability CVE-2024-50562 Professional, permission-only scanner that proves whether a FortiGate invalidates session cookies after logout. A positive finding confirms CVE-2024-50562 — an Insufficient Session Expiration flaw CWE-613 that lets an attacker replay a...

4.8CVSS5.8AI score0.0115EPSS
SaveExploits3
Kitploit
Kitploit
•added 2026/09/29 4:05 a.m.•15 views

CVE-2024-33231

Ferozo Webmail XSS Vulnerability via File Upload CVE-2024-33231 Description Ferozo Webmail version 1.1 is vulnerable to Cross-Site Scripting XSS through the file upload functionality. An attacker can exploit this vulnerability by uploading a specially crafted file containing malicious JavaScript...

5.4CVSS6.1AI score0.00433EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 4:04 a.m.•11 views

SFPolDevChk

Salesforce Policy Deviation Checker Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Jerome Smith @exploresecurity With thanks to Stephen Tomkinson @neonbunny9 https://www.github.com/nccgroup/SFPolDevChk Released under AGPL - refer to LICENSE for more information...

6AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/29 4:01 a.m.•16 views

EtwSessionHijacking

EtwSessionHijacking: A Poc on blocking Procmon from monitoring network events Demo: https://user-images.githubusercontent.com/111295429/186082150-32ed304b-ba45-42a4-8baa-37dd75246c68.mp4 Based On : Design Issues Of Modern EDRs: Bypassing ETW-Based Solutions...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/29 3:35 a.m.•16 views

CVE-2023-34845

CVE-2023-34845 Vulnerability POC for CVE-2023-34845 Vulnerability I found a cross-site scripting attack on the new content creating page http://localhost:800/admin/new-content it will execute the script in user context allowing the attacker to access any cookies or sessions tokens retained by the...

5.4CVSS6AI score0.00804EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/09/29 3:33 a.m.•10 views

CVE-2025-5777

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure CitrixBleed 2 T1606 Disclaimer Intented for authorized use only. It is your responsibility to verify authorization before use. I am not responsible for any legal or criminal proceedings filed against you for using this. Description...

9.3CVSS8.1AI score0.99972EPSS
SaveExploits20
Kitploit
Kitploit
•added 2026/09/29 3:27 a.m.•16 views

SessionView

SessionView A lightweight C console application for enumerating and displaying all user sessions on Windows Server, including session GUIDs. Features Complete Session Enumeration : Lists all active sessions on the Windows server Detailed Session Information : Displays Session ID, Station Name,...

6.2AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 3:25 a.m.•11 views

CVE-2025-55668

CVE-2025-55668 Apache Tomcat - Session fixation via rewrite valve...

7AI score0.0086EPSS
SaveExploits0
Rows per page
Query Builder