CVE-2023-44487

Ten en cuenta que el código anterior usa la biblioteca libcurl para realizar solicitudes HTTP. Necesitas instalar libcurl y enlazarlo al compilar el código. El código es una versión simplificada, y es posible que debas ajustarlo según tus requisitos exactos y el comportamiento específico del ataq...

log4j-rce-CVE-2021-44228

Resumen Este es un proyecto para probar la vulnerabilidad de ejecución remota de código de log4j2 CVE-2021-44228. Iniciar los contenedores root@kitploit: docker-compose up El contenedor log4j tarda un poco en estar listo después de iniciarse. Verifique el progreso con el siguiente comando:...

tomcat_CVE-2018-1304_testing

This repository does not have a README...

Struts2-045-Exp

Struts2-045-Exp Script de explotación Struts2-045 Solo para uso de pruebas usage:python3 struts2-045-exp.py url cmd...

CVE-2022-44875-Test

CVE-2022-44875-Prueba Probando CVE-2022-44875. Actualmente redirigido. Recuerda desactivar la redirección para usarlo. https://aesirsec.io/CVE-2022-44875.html...

chusa

chusa: 注射 Chusa - 注射 is an open source penetration testing tool based on SQLmap that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a...

CVE-2026-28956

CVE-2026-28956 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

sonicwall-audit-toolkit

SonicWall Security Audit Toolkit Automated security assessment framework for SonicWall appliances. For authorized penetration testing engagements only. Quick Start root@kitploit: Install dependencies pip install -r requirements.txt Run all modules against a target python3 sonicwallaudit.py --targ...

CVE-2026-44963

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

PowerSploit

Forked to add a few features to PowerView.ps1 that I commonly perform manually This project is no longer supported PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment. PowerSploit is comprised of the following...

awesome-exploit-development

awesome-exploit-development A curated list of resources books, tutorials, courses, tools and vulnerable applications for learning about Exploit Development A project by Fabio Baroni. Read the full article here!...

OAUTHScan

OAUTHScan Description OAUTHScan is a Burp Suite Extension written in Java with the aim to provide some automatic security checks, which could be useful during penetration testing on applications implementing OAUTHv2 and OpenID standards. The plugin looks for various OAUTHv2/OpenID vulnerabilities...

BurpSuite-Team-Extension

BurpSuite-Team-Extension This Burpsuite plugin allows for multiple testers to share live/historical proxy requests, scope and repeater/intruder payloads with each other in real time allowing for truly collaborative web app testing. When connected to the Team Sever and in a Team Room all requests...

Checklists

Introduction Even though, a penetration test is a creative process most people maintain private checklists to ensure that they will not forget to test networks, systems and applications against various scenarios and maintain the overall quality of the assessment. Purpose The aim of the project is...

fuzzing-templates

Fuzzing Templates Community curated list of fuzzing templates for the nuclei engine to find unknown security vulnerabilities. Documentation • Contributions • Discussion • Community !Caution This repository is archived and merged into nuclei-templates project under /dast directory. Fuzzing templat...

SecurityExplained

Security Explained SecurityExplained is a new series after the previous learning challenge series Learn365. The aim of SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning. Below are the various...

Mind-Maps

MindMaps 🗺️ This repository stores and houses various Mindmaps for bug bounty Hunters🧑‍🦰, pentesters🧑‍🦰 and offensive🔴/defensive🔵 security Professionals🫂 provided by me as well as contributed by the community🧑🏻‍🤝‍🧑🏽. Your contributions and suggestions are welcomed. Name| Link| Type| Description|...

CVE-2026-42055

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

pentestcode

PentestCode AI penetration testing agent in your terminal. Multi-agent architecture • Engagement state tracking • 20+ LLM providers PentestCode is an autonomous pentesting agent for your terminal. Point it at a target and it runs the tools, reads the output, updates its picture of the network, an...

ansible_CVE-2016-5195_check

Description Playbook for testing the dirty cow vulnerability CVE-2016-5195. Dependencies local user on the system with sudo priveleges Run root@kitploit: ansible-playbook -i host, check.yml -u jondoe -k -K Links http://dirtycow.ninja...