CVE-2026-58231

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

Full-Attack-Lifecycle-Simulation-on-Metasploitable

This repository does not have a README...

apache-cve-2021-42013-rce

apache-cve-2021-42013-rce Docker-based penetration testing lab simulating CVE-2021-42013 vulnerability Path Traversal & RCE on Apache HTTP Server 2.4.49. This project is prepared to simulate and exploit the CVE-2021-42013 vulnerability found in Apache HTTP Server 2.4.49 in an isolated environment...

LFI-Destruction

🔥 LFI-Destruction – Framework de Pruebas de Penetración Autorizadas LFI-Destroyer es un framework completo y modular de explotación de Inclusión Local de Archivos LFI diseñado para profesionales de seguridad autorizados. Combina múltiples técnicas de ataque en una sola herramienta fácil de usar:...

CVE-2026-39813

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2025-61882-POC

CVE-2025-61882 Security Testing Tool 🚨 CRITICAL LEGAL WARNING See our blog post for technical details THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 UNAUTHORIZED ACCESS TO COMPUTER SYSTEMS IS ILLEGAL 🚨 ║ ║ ...

testing_cve-2019-20149

This repository does not have a README...

SSRF-Testing

I'm grateful for the support received by Tuta SSRF Server Side Request Forgery testing resources Quick URL based bypasses: http://google.com:80+&@127.88.23.245:22/[email protected]:80/ http://127.88.23.245:22/+&@google.com:[email protected]:80/...

zk-xml-probe

zk-xml-probe Static XML fixtures for authorized bug bounty testing of XML parser behaviour CVE-2026-45071...

testng-team__testng_CVE-2022-4065_7-5

Documentation available at TestNG's main web site. Release Notes 7.4.0 7.3.0 7.1.0 7.0.0 Need help? Before opening a new issue, did you ask your question on Google group...

xsshunter-express

XSS Hunter Express Se configura en 5 minutos y no requiere mantenimiento La forma más rápida de configurar XSS Hunter para probar y encontrar vulnerabilidades de cross-site scripting ciego. Configuración Cinco minutos, intenta no saltarte demasiado Requisitos docker y docker-compose instalados Ho...

Simple Pentesting

Simple Pentesting Toolkit A lightweight, educational Python toolkit that automates common reconnaissance and enumeration tasks used in authorized penetration testing. Built as a learning project for cybersecurity / ethical-hacking practice. ⚠️ Legal & Ethical Use This toolkit performs active...

dig

dig macOS 上的本地 dig 包装器。真正发查询的还是系统自带的 /usr/bin/dig。这个项目只在你自己的终端输出后面追加一条本地 TXT，方便本地测试。 它不改 DNS，不写 zone file（区域文件），也不碰任何云厂商。 行为 给某个域名钉死一条 TXT，之后每次查都返回 root@kitploit: dig +txt= TXT dig +txt= +ttl=600 TXT name：域名，比如 app.local value：这条 TXT 的内容，写在 +txt= 后面。有空格就加引号 +ttl=：展示用的 TTL，默认 600 root@kitploit: di...

CVE-2025-54782

Basic Usage: 1.use root@kitploit: python posttest.py urls.txt 2. Custom Command: 2.command root@kitploit: python posttest.py urls.txt -c "whoami" python posttest.py urls.txt -c "ls -la /tmp" python posttest.py urls.txt -c "cat /etc/passwd" 3. Specify Thread Count: root@kitploit: python...

ModSec-log4j2

Testing the ModSec rule Prerequisites Have docker installed Have Java installed on your machine Running the test Perform a git clone of the repository Execute the command below to start the WAF ModSec and the vulnerable application root@kitploit: docker stack deploy -c docker-compose.yml WAF...

apche-struts-vuln-demo-cve-2018-11776

Apache Struts Vulnerability Demo CVE-2018-11776 Description Spins up an isolated test environment for experimentation with Apache Struts vulnerability CVE-2018-11776. Getting Started To bring up the test environment, run the following command: root@kitploit: aws cloudformation create-stack ...

CVE-2014-6271

CVE-2014-6271 Bash Shellshock and Aftershock Tester for Ansible 1. Install Ansible http://docs.ansible.com/introinstallation.html 2. Add servers to inventory file example: root@kitploit: username@ip 3. Copy your public key to remote servers' .ssh/authorizedkeys 4. execute test $ ansible-playbook ...

CVE-2026-53365

CVE-2026-53365 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

CVE-2018-1235

CVE-2018-1235 Un script de Python que prueba una instancia explotable de CVE-2018-1235. NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235 Uso: ./CVE-2018-1235.py -t Host Objetivo -r Tu IP Este código puede ser modificado para explotar activamente la vulnerabilidad. El soporte para alcances de...

ghosttester

Testing Script for the Glibc GHOST Vulnerability CVE-2015-0235 A little script I found to test the Glibc GHOST Vulnerability CVE-2015-0235. The usage is quite simple. Just clone or download the script to your server/desktop and start it like this: Debian/Ubuntu root@kitploit: gcc ghosttest.c -o...