Lucene search
+L

36282 matches found

Kitploit
Kitploit
added 2026/08/26 5:17 p.m.2 views

ThreadStackSpoofer

Thread Stack Spoofing / Call Stack Spoofing PoC PoC-реализация продвинутой техники внутрипроцессного обхода, которая подделывает стек вызовов потока. Эта техника позволяет обходить правила проверки памяти потока и лучше скрывать шеллкоды при их выполнении в памяти процесса. Введение Это пример...

5.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 5:17 p.m.3 views

transfer.sh

ПРЕДУПРЕЖДЕНИЕ О БЕЗОПАСНОСТИ Обход IP-фильтра и HTTP-аутентификации через подделку неаутентифицированного заголовка X-Forwarded-For transfer.sh...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 5:07 p.m.387 views

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 4:57 p.m.21 views

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

5.5AI score
SaveExploits0References52
Kitploit
Kitploit
added 2026/08/26 4:45 p.m.257 views

evillimiter

Evil Limiter A tool to monitor, analyze and limit the bandwidth upload/download of devices on your local network without physical or administrative access. evillimiter employs ARP spoofing and traffic shaping to throttle the bandwidth of hosts on the network. Searching for a Windows-compatible...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 4:45 p.m.1 views

evillimiter

Evil Limiter Инструмент для мониторинга, анализа и ограничения пропускной способности загрузка/выгрузка устройств в вашей локальной сети без физического или административного доступа. evillimiter использует ARP-спуфинг и управление трафиком для ограничения пропускной способности хостов в сети...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 4:45 p.m.2 views

dnschef

root@kitploit: | | version 0.4 | | / | | | | | | | / | ' / |/| ' \ / \ | | | | | | \ | | | | / | ,|| | |/ || ||| | root@kitploit: Д О К У М Е Н Т А Ц И Я DNSChef — это высоконастраиваемый DNS-прокси для специалистов по тестированию на проникновение и аналитиков вредоносного ПО. DNS-прокси также...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 4:42 p.m.2 views

feroxbuster

!WARNING Уведомление о безопасности – Имитация домена Домен feroxbuster.com НЕ имеет отношения к этому проекту, его сопровождающим или официальным релизам feroxbuster. Официальные дистрибутивы feroxbuster распространяются ТОЛЬКО через: https://github.com/epi052/feroxbuster открытый исходный код...

5.4AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/08/26 4:32 p.m.2 views

nanodump

NanoDump LSASS 프로세스의 미니덤프를 생성하는 유연한 도구입니다. 목차 1. 사용법 2. 기능 3. 기법 조합 4. 예제 5. HTTPS 리디렉터 1. 사용법 root@kitploit: usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate --elevate-handle --duplicate-elevate --seclogon-leak-local --seclogon-leak-remote C:\Windows\notepad.exe...

5.7AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/26 4:28 p.m.2 views

fireprox

FireProx Обзор Преимущества Отказ от ответственности Мейнтейнер Благодарности Базовое использование Установка Скриншоты Участие в разработке Обзор Возможность скрывать или постоянно менять исходный IP-адрес при выполнении веб-запросов может быть сложной или дорогостоящей. Некоторое время...

5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/26 2:23 p.m.1 views

CVE-2026-79180

A flaw was found in Google Chrome. This vulnerability, located in the CustomTabs feature, allows a remote attacker to leverage social engineering. By using a specially crafted HTML page, the attacker can spoof user interface UI elements. This misrepresentation could deceive users, potentially...

SaveExploits0References2
Kitploit
Kitploit
added 2026/08/26 1:22 p.m.2 views

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601, o comunemente chiamata CurveBall, è una vulnerabilità in cui la firma dei certificati che utilizzano la crittografia a curva ellittica ECC non viene verificata correttamente. ECC si basa su diversi parametri. Questi parametri sono standardizzati per...

8.1CVSS7.2AI score0.89436EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/08/26 11:52 a.m.1 views

CVE-2023-38831-KQL

CVE-2023-38831 - Vulnerabilità di spoofing dell'estensione file in WinRAR Descrizione I cybercriminali hanno sfruttato una vulnerabilità che consente loro di falsificare le estensioni dei file. Ciò significa che possono nascondere l'avvio di script dannosi all'interno di archivi che fingono di...

7.8CVSS6.8AI score0.97845EPSS
SaveExploits49References1
NVD
NVD
added 2026/08/26 10:16 a.m.3 views

CVE-2026-80349

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

9.8CVSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/26 10:09 a.m.4 views

CVE-2026-80349 TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter

TarsWeb decides whether a request comes from a trusted local caller using a client-controlled header. app.js sets Koa's proxy option to true without naming which upstream proxies may be trusted and without limiting the number of forwarded hops, so the request address Koa reports is taken from the...

9.8CVSS
SaveExploits0References5
CVE
CVE
added 2026/08/26 10:09 a.m.8 views

CVE-2026-80349

TarsWeb through 3.0.14 contains a critical authentication bypass (CVSS 9.8). The root cause is a combination of two misconfigurations: Koa's proxy option is set to true without restricting trusted upstream proxies, so the source address is taken from the caller-controlled X-Forwarded-For header; ...

9.8CVSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

DNSSpoof

DNSSpoof Ein DNS-Spoofer-Tool, geschrieben in Python3. Wie benutzt man es? root@kitploit: usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default:...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2024-0044

CVE-2024-0044- CVE-2024-0044: eine "run-as any app" Hochrisiko-Sicherheitslücke, die Android-Versionen 12 und 13 betrifft CVE-2024-0044 Exploit-Skript Dieses Bash-Skript zeigt, wie man CVE-2024-0044 ausnutzt. Nur für Bildungs- und Testzwecke. Voraussetzungen ADB Android Debug Bridge installiert u...

7.8CVSS7.9AI score0.0146EPSS
SaveExploits17
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.1 views

CVE-2020-25265-25266

CVE-2020-25265 / CVE-2020-25266 CVE-2020-25265 CVE-2020-25266 Questo è un exploit PoC di libappimage e appimaged. Utilizzando una combinazione delle due CVE, si può creare un file che non sembra essere un appimage che viene sia individuato implicitamente da appimaged sia installato, sovrascrivend...

6.5CVSS5.8AI score0.01919EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

CVE-2025-24071

Sicherheitslücken-Bericht: CVE-2025-24071 - Spoofing-Sicherheitslücke in Windows-Datei-Explorer Übersicht NSFOCUS CERT hat festgestellt, dass Microsoft kürzlich ein Sicherheitsupdate veröffentlicht hat, um eine kritische Spoofing-Sicherheitslücke im Windows-Datei-Explorer zu beheben, die als...

6.5CVSS7.3AI score0.24638EPSS
SaveExploits22
Rows per page
Query Builder