Lucene search
+L

365617 matches found

Kitploit
Kitploit
added 2026/09/08 6:34 p.m.12 views

OSINT-Cheat-sheet

OSINT CHEAT SHEET - Lista de herramientas OSINT Contiene una lista de herramientas OSINT, consejos de OSINT, conjuntos de datos, transformadas de Maltego y otros. Hay herramientas gratuitas y de pago que puedes usar y el propietario no se hace responsable asume tus propios riesgos, solo con fines...

5.8AI score
SaveExploits0References30
Kitploit
Kitploit
added 2026/09/08 4:39 p.m.6 views

bugbounty-cheatsheet

Hoja de referencia de Bug Bounty 📚 Referencia| 🔎 Vulnerabilidades ---|--- Plataformas de Bug Bounty| XSS Libros| SQLi Herramientas Especiales| SSRF Recon| Inyección CRLF Plataformas de Práctica| Inyección CSV Consejos de Bug Bounty| LFI | XXE | RCE | Redirección Abierta | Criptografía | Inyección...

5.9AI score
SaveExploits0References26
Kitploit
Kitploit
added 2026/09/08 2:03 p.m.4 views

Privilege-Escalation

⬆️ Escalada de Privilegios para Pentesters Una guía práctica de referencia y chuleta de Escalada de Privilegios diseñada para jugadores de CTF, testers de penetración y estudiantes de ciberseguridad para comprender cómo los atacantes escalan privilegios en sistemas comprometidos 🌐 Conéctate con...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 1:52 p.m.8 views

JustTryHarder

JustTryHarder JustTryHarder es una chuleta que te ayudará a lo largo del curso PWK y del examen OSCP. Inspirado por PayloadAllTheThings No dudes en enviar un Pull Request y dejar una estrella para mostrar tu aprecio si te ayudó. 💖 ¡Amigable con Hacktoberfest! Sí, estamos abiertos a Pull Requests...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 1:43 p.m.3 views

Nmap-Cheat-Sheet

Nmap-Cheat-Sheet Selección de objetivos en Nmap root@kitploit: Scan a single IP nmap 192.168.1.1 Scan a host nmap www.testhostname.com Scan a range of IPs nmap 192.168.1.1-20 Scan a subnet nmap 192.168.1.0/24 Scan targets from a text file nmap -iL list-of-ips.txt Selección de puertos en Nmap...

6.1AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 1:38 p.m.4 views

CheatSheetSeries

Welcome to the OWASP Cheat Sheet Series Welcome to the official repository for the Open Worldwide Application Security Project® OWASP Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications. In order to read the cheat...

5.8AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/08 12:25 p.m.7 views

Cybersec

Hoja de Referencia Ofensiva de Ciberseguridad Una hoja de referencia HTML altamente dinámica y de un solo archivo, diseñada para Red Teamers, Pentesters y jugadores de CTF. ¿Cansado de escribir los mismos payloads de Reverse Shell y reemplazar constantemente tu IP y puerto local? Esta herramienta...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/08 12:17 p.m.8 views

url-cheatsheet-data

URL validation bypass cheat sheet data This is the data that powers the PortSwigger URL validation bypass cheat sheet. We have put this data on Github so the community can contribute vectors via pull requests. Contributing To contribute, please create a pull request with changes to the JSON data...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 10:01 a.m.11 views

CTFs

CTFs Writeups / Archivos para algunos de los Cyber CTFs que he realizado También he incluido una lista de recursos de CTF así como una chuleta completa que cubre muchísimos desafíos comunes de CTF !NOTE Ahora hay un espejo web de este repositorio en hackback.zip Tabla de Contenidos Recursos Canal...

6.2AI score
SaveExploits0References29
Kitploit
Kitploit
added 2026/09/08 9:51 a.m.4 views

bincrypter

Privacy and copyright protection for your programs A Linux Binary Runtime Crypter - in BASH! Obfuscate & encrypt any ELF binary Obfuscate & encrypt any SHELL-script AV/EDR death: Morphing + different signature every time 100% in-memory. No temporary files Not soiling the filesystem Double or trip...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 7:59 a.m.5 views

DefaultCreds-cheat-sheet

Default Credentials Cheat Sheet One place for all the default credentials to assist pentesters/blue Teamers during engagements, featuring default login/password details for various products sourced from multiple references. P.S : Most of the credentials were extracted from changeme,routersploit a...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/08 1:40 a.m.5 views

Pentest-Cheat-Sheet

Pentest Cheat Sheet There are many cheat sheets out there, but this is mine. It's a work in progress right now, and lives as a rought draft that's updated a lot , at times. I started this while I was studying for my OSCP, but it's now evolving to include more practical things that I need as a red...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/07 9:16 p.m.8 views

CVE-2025-22131-PoC

CVE-2025-22131-PoC PoC para CVE-2025-22131 PhpSpreadsheet es una biblioteca escrita en PHP puro y ofrece un conjunto de clases que te permiten leer y escribir varios formatos de archivos de hoja de cálculo como Excel y LibreOffice Calc. phpspreadsheet versión =2.2.0, =2.0.0, =3.0.0, sheetIndex ==...

6.1CVSS5.8AI score0.00382EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/06 7:50 a.m.4 views

CVE-2024-45427-Exploit

Generador de Exploit CVE-2024-45427 Este script genera un archivo malicioso de Excel .xlsx para explotar CVE-2024-45427 en la librería PhpSpreadsheet v3.7.0. Inyecta una carga útil XSS en el nombre de la hoja manipulando el XML sin procesar, evadiendo las comprobaciones de validación estándar de ...

5.9AI score
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 5:01 a.m.9 views

CVE-2024-47875-PhpSpreadsheet-XSS-PoC

CVE-2025-22131 • PhpSpreadsheet HTML Writer XSS PoC Over View this is a PoC on the CVE-2025-22131 , a Cross-Site Scripting XSS vulnerability in PhpSpreadsheet versions prior to 2.2.2, 2.1.2, and 1.29.4. The vulnerability resides in the generateNavigation function, which fails to sanitize sheet...

10CVSS6.8AI score0.0107EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/05 5:49 a.m.8 views

BurpSuite-For-Pentester

🕷️ BurpSuite for Pentester A practical Burp Suite cheat sheet and learning guide designed for bug bounty hunters and penetration testers to efficiently discover web application vulnerabilities from low severity P4 to critical P1 using Burp Suite. This repository provides a structured reference for...

5.9AI score
SaveExploits0
Cvelist
Cvelist
added 2026/08/09 6:00 a.m.46 views

CVE-2026-17011 Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing...

0.00119EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/09 6:00 a.m.80 views

CVE-2026-17011

The vulnerability affects the Nexter Blocks WordPress plugin, specifically versions prior to 5.0.2. A REST endpoint does not restrict who can save global CSS, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide, enabling defacement, content hiding, ...

3.8CVSS5.4AI score0.00119EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/08/07 5:03 p.m.11 views

SUSE CVE-2026-50159

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibling combinator selectors generated from diagram-supplied class or id names. An attacker who can supply diagram text c...

5.3CVSS5.5AI score0.00609EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/06 10:17 p.m.13 views

DEBIAN-CVE-2026-50159

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vulnerable to CSS injection via sibling combinator selectors generated from diagram-supplied class or id names. An attacker who can supply diagram text c...

5.3CVSS5.5AI score0.00609EPSS
SaveExploits0References1
Rows per page
Query Builder