WifiPassword-Stealer

WifiPassword-Stealer Get All Registered Wifi Passwords from Target Computer. INSTALLATION if you are using a python file root@kitploit: pip install smtplib pip install subprocess pip install glob USAGE •Create an account on "https://mailtrap.io/" using a temp mail. •Set your own SMTP USERNAME and...

CVE-2023-51764-POC

basado en https://github.com/duy-31/CVE-2023-51764 y https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text es solo un poc port a python 3.x...

CVE-2023-51764

PoC for CVE-2023-51764 SMTP SMUGGLING Postfix CVE-2023-5176525.py Descripción Este script permite enviar mensajes utilizando el puerto 25 del servidor de correo. Uso Antes de ejecutar, es necesario modificar las variables: smtpserver - dirección del servidor de correo fromaddress - remitente del...

CVE-2019-11395

Exploit CVE-2019-11395 🛡️ Acerca de CVE-2019-11395 🕵️ La vulnerabilidad CVE-2019-11395 describe una vulnerabilidad de desbordamiento de búfer en la aplicación de correo electrónico MailCarrier 2.51, que permite la ejecución remota de código. La vulnerabilidad ocurre en los procesos SMTP RCPT TO,...

CVE-2026-37073

CVE-2026-37073 Control de acceso incorrecto en /vfm-admin/ajax/sendfiles.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado enviar correos electrónicos desde el servidor SMPT configurado en la aplicación mediante una solicitud POST al endpoint con los parámetros y...

zimbra-cve-2026-73570-ir

Zimbra CVE-2026-73570 Community IR Toolkit Detection-first, evidence-preserving incident-response helpers for Zimbra administrators investigating suspected exploitation of CVE-2026-73570. !CAUTION This is an independent community project, not a vendor compromise oracle. The checker is read-only a...

SharpGmailC2

SharpGmailC2 Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 Gmail via imap protocol DISCLAIMER: This Project doesn't work against Windows Defender after 29th of November, 2022. This tool is now signatured by MS Windows as virtool:msi...

CVE-2026-11113-SMTP-Header-Injection-in-Contact-Form

CVE-2026-11113 – SMTP Header Injection in Contact Form Program Code Python root@kitploit: contactformserver.py - Mails feedback without sanitizing headers from flask import Flask, request import smtplib app = Flaskname @app.route'/contact', methods='POST' def contact: sender = request.form'email'...

smtp_userenum

smtpuserenum Help: root@kitploit: python3 smtpuserenum.py -h Usage: root@kitploit: python3 smtpuserenum.py Puedes cambiar la lista de nombres de usuario:...

SimpleEmailSpoofer

SimpleEmailSpoofer A few Python programs designed to help penetration testers with email spoofing. This Project is Retired Due to improvements in email protections and anti-spam techniques, it is no longer effective to attempt to spoof emails simply because they do not have a proper DMARC record ...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

CVE-2003-0264

🐞 CVE-2003-0264: SLMail 5.5 - Desbordamiento de búfer basado en pila Desbordamiento de búfer basado en pila clásico en SLMail 5.5 que muestra cómo los primeros servidores de correo podían ser comprometidos mediante comandos SMTP y POP3 sobredimensionados. 📑 Tabla de contenidos Por qué existe este...

ssl-heartbleed.nse

ssl-heartbleed.nse Script NSE de Nmap para descubrir/explotar Heartbleed/CVE-2014-0160. Este script es ahora básicamente el que escribió Patrik Karlsson con algunos cambios menores portados desde mi propio script. Características Incluye soporte para FTP,SMTP,XMPP...

CVE-2025-24000-exploit

CVE-2025-24000 — Exploit de escalada de privilegios en Post SMTP Resumen Este script explota la CVE-2025-24000 , una vulnerabilidad de control de acceso roto de alta gravedad en el plugin Post SMTP para WordPress versiones ≤ 3.2.0. Permite que cualquier usuario autenticado con una cuenta de bajos...

CVE-2026-73570

CVE-2026-73570 PoC - SMTP Command Injection Tester A custom, low-level Python proof-of-concept PoC script for testing SMTP command injection vulnerabilities CVE-2026-73570. This tool sends a malformed RCPT TO address containing shell-style command substitution e.g., $command to determine if the...

-CVE-2026-23829-CTT-Mailpit-phase-reconstruction-

SimoesCTT-mailpit-phase-reconstructor It's a CRLF injection in Mailpit's SMTP server — a classic data corruption vulnerability. But under CTT, it's not just a bug. It's a phase reconstruction opportunity. CVE-2026-23829 root@kitploit: CTT-Mailpit-Phase-Reconstructor CVE-2026-23829 — Proof of Nove...

CVE-2023-51764

CVE-2023-51764 CVE-2023-51764 poc Link: https://github.com/duy-31/CVE-2023-51764 1. Add SMTP authentication 2. The script has only been tested on Kali 3. Please do not use the script for illegal purposes...

CTT-Mailpit-RCE-v1.0---Temporal-Resonance-Mail-Server-Takeover

🎯 CTT-Mailpit-Exploit: Perfect 11/10 Score Zero-Click Worm Transform a basic SMTP header injection CVE-2026-23829 into a perfect-scoring, self-propagating RCE worm using Convergent Time Theory. 📊 Score Transformation: 6.1 → 11.0/10 ⭐ Metric Original CVE-2026-23829 CTT-Enhanced Improvement CVSS...

CVE-2026-33715

CVE-2026-33715 — Unauthenticated SSRF + Open Email Relay in Chamilo LMS via install.ajax.php Severity : High CVSS 7.2 CWE : CWE-918 SSRF + CWE-306 Missing Authentication Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-mxc9-9335-45mc NVD :...

CVE-2019-11395

CVE-2019-11395 Descripción general Esta prueba de concepto PoC demuestra una vulnerabilidad de desbordamiento de búfer en MailCarrier 2.51, que permite a atacantes remotos ejecutar código arbitrario mediante una cadena larga. La vulnerabilidad puede explotarse utilizando los siguientes procesos:...