CVE-2023-4596-OpenSSH-Multi-Checker

CVE-2024-6387-OpenSSH-Multi-Checker El script CVE-2024-6387-checker.sh es una herramienta diseñada para verificar múltiples objetivos IPs o nombres de host a la vez para la vulnerabilidad CVE-2024-6387. Este script realiza una verificación local de la versión de OpenSSH, escanea servidores remoto...

CVE-2018-4407

CVE-2018-4407 Código de explotación para CVE-2018-4407 escrito en Python usando la API de Scapy. Uso: 2018-4407.py targetip...

CVE-2023-50564

CVE-2023-50564 Solo con fines educativos. Este script abusa de CVE-2023-50564 para subir una shell reverse-php al servidor objetivo. Puedes usar una shell como esta. Solo comprime el archivo php y pasa el zip a este script. Ejemplo root@kitploit: python3 cve-2023-50564.py -u http://idonot.exist -...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

https-nj.gov---CVE-2018-14041

https-nj.gov---CVE-2018-14041 Informe de Vulnerabilidad del sitio oficial de Nueva Jersey El atributo data-target es vulnerable a ataques de Cross-Site Scripting. Test RECOMENDACIÓN La solución para este problema específico podría ser cambiar la función getTargetFromTrigger. return $target a:...

cve2025-20265

cve2025-20265 Script Python seguro para detectar instancias Cisco FMC potencialmente vulnerables a CVE-2025-20265. Usa la API oficial de FMC para verificar la versión, admite escaneo de objetivo único/múltiple e incluye un marcador PoC local inofensivo. Cisco FMC CVE-2025-20265 Vulnerability...

CVE-2022-23773-repro-target

CVE-2022-23773-重现目标...

CVE-2021-23017-PoC

CVE-2021-23017-PoC root@kitploit: pip install -r requirements.txt python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 Este software ha sido creado únicamente con fines de investigación académica y para el desarrollo de técnicas defensivas efectivas, y no está destinado a ser utilizado par...

Shellcode-Encryptor

ShellcodeEncryptor 一个简单的 shell 代码加密/解密/执行器，用于绕过反病毒。 注意： 我已完全重做了绕过的工作流程，我发现使用 PowerShell 将二进制文件注入内存是最有效的方法。 目的 生成一个包含 base64 编码、AES 加密的 shellcode 的 .Net 二进制文件，使其能在 Windows 目标上执行，绕过反病毒。 说明 使用 meterpreterencryptor.py 创建加密的 base64 shellcode： root@kitploit: root@kali: ./meterpreterencryptor.py -p...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

SpeculativeExecutionAssessment

SpeculativeExecutionAssessment Evalúa un sistema para las vulnerabilidades de "ejecución especulativa" descritas en: CVE-2017-5715 branch target injection CVE-2017-5753 bounds check bypass CVE-2017-5754 rogue data cache load ADVERTENCIA: Asegúrese de que "Prefer 32-bit" no esté marcado en las...

CVE-2023-20198

CVE-2023-20198 Comprueba una IP objetivo para CVE-2023-20198 python main.py TARGETIP...

vulnx

VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms...

meltdown-exploit

MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

CVE-2022-25845-In-Spring

CVE-2022-25845-In-Spring !IMPORTANT 仅供学习交流，请勿用于非法用途 exploit by python 如有帮助，点个star 参考： https://github.com/luelueking/CVE-2022-25845-In-Spring Usage 根据需要自行修改传参逻辑，这里是默认POST的请求体传参 root@kitploit: git clone https://github.com/ph0ebus/CVE-2022-25845-In-Spring.git cd CVE-2022-25845-In-Spring python3 exp....

longtongue

Generate customized Password/Passphrase wordlist based on target information Coded with 💙 by edoardottt Share on Twitter! Installation ⬇️ pipx root@kitploit: pipx install longtongue Source root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r...

longtongue

基于目标信息生成自定义密码/密码短语单词列表 由 edoardottt 用 💙 编写 在 Twitter 上分享！ 安装 ⬇️ pipx root@kitploit: pipx install longtongue 源码 root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue pip install -r requirements.txt python3 longtongue.py 使用方法 💻 root@kitploit: usage: longtongue -h -p | -...

AtlasC2

AtlasC2 C C2 框架，专注于第一阶段操作 Atlas 旨在在环境中建立据点，并进一步利用它，通过基于 HTTP 的植入程序将 C（目前严格限于 C）武器偷运进来。目前，它的 OPSEC 安全性并不高……完全不。当前仅针对 Windows 环境。 注意：植入程序的默认连接设置是连接到 localhost 的 8080 端口，可以在 此处 更改。 使用方法 启动团队服务器 生成客户端、团队服务器和植入程序的 exe 后，只需执行 Teamserver.exe 即可启动团队服务器。 启动/管理监听器 要启动新的监听器，请使用 StartListener...