Lucene search
+L

27575 matches found

Kitploit
Kitploit
added 2026/08/28 7:30 a.m.3 views

LsassReflectDumping

LsassReflectDumping This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone is created, it utilizes MINIDUMPCALLBACKINFORMATION callbacks to generate a memory dump of the cloned process. Steps Getting the handle of...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 7:24 a.m.3 views

ChromeKatz

ChromeKatz ChromeKatz is a solution for dumping sensitive information from memory of Chromium based browsers. As for now, ChromeKatz consists of three projects: 1. CookieKatz - The cookie dumper 2. CredentialKatz - Deprecated.. for now 3. ElevationKatz - Get the decryption key from the elevation...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/28 7:14 a.m.3 views

CVE-2026-11102-OAuth2-Implicit-Grant-Fragment-Hijacking

CVE-2026-11102 – OAuth2 Implicit Grant Fragment Hijacking Program Code Node.js + Exploit root@kitploit: // oauthserver.js - OAuth2 provider issuing tokens in fragment const express = require'express'; const app = express; app.get'/authorize', req, res = const redirectUri = req.query.redirecturi;...

8.8CVSS7.3AI score0.00371EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/28 7:04 a.m.2 views

Moniker-Link-Lab-Setup

Moniker Link Lab Setup - CVE-2024-21413 🎯 Project Overview Hands-on penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft. This project documents the complete attack chain from setup to credential compromise, including real-world challenges and...

9.8CVSS7.2AI score0.9466EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/08/28 6:29 a.m.2 views

CVE-2024-42009-PoC

CVE-2024-42009 PoC: Email Capture Listener & XSS Exploit in Roundcube Webmail Overview This repository contains a proof-of-concept PoC exploit for CVE-2024-42009 a stored Cross-Site Scripting XSS vulnerability in Roundcube Webmail version 1.6.7 and other several versions. The exploit demonstrates...

9.3CVSS7.4AI score0.81537EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/08/28 6:19 a.m.2 views

CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-21413 – Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...

9.8CVSS7.5AI score0.9466EPSS
SaveExploits24References1
Kitploit
Kitploit
added 2026/08/28 5:55 a.m.2 views

Ustealer

Ustealer Robo para Ubuntu, roba información de Ubuntu en la PC local ideal con llave USB Requisitos G++ sudo apt-get install g++ libsqlite3 sudo apt-get install libsqlite3-dev Compilación Ve a la carpeta Ustealer/ y ejecuta el makefile make Uso ./ustealer...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 5:18 a.m.2 views

e013

e013 A little VBScript that steal Wifi passwords from Windows Into the file WifiName.txt you can see the password of every saved wifi available on every windows computer that support VBscript ⚠️ Don't modify the script with notepad, use text editor like GNU Emacs, Vim, Atom, Vscode, Sublime text...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 5:14 a.m.5 views

BlackNET

BlackNET 😈 Free advanced and modern Windows botnet with a nice and secure PHP panel developed using VB.NET. About BlackNET 🤓 Free advanced and modern Windows botnet with a nice and secure PHP panel built using VB.NET. this botnet controller comes with a lot of features and the most secure panel f...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/08/28 4:59 a.m.3 views

CVE-2025-22381

CVE-2025-22381: Host Header Injection in Aggie Detailed analysis and Proof-of-Concept for CVE-2025-22381, a Host Header Injection vulnerability discovered in the Aggie Open-Source Project. Vulnerability Overview+ CVE ID: CVE-2025-22381 Published: October 2025 MITRE assignment Disclosed publicly:...

8.2CVSS5.8AI score0.00603EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/28 4:59 a.m.3 views

CVE-2023-24055

Disclaimer This script is for educational and demonstration purposes only. The author does not endorse or condone the use of this script for any criminal or malicious activities and it should only be used where explicitly allowed with proper permission. This script should be used with caution, as...

5.5CVSS6.1AI score0.03691EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/08/28 4:34 a.m.5 views

gethspoit

Gethsploit gethsploit es un conjunto de scripts en python para enumerar pares de ethereum que tengan puertos RPC habilitados. Requisitos previos Asegúrate de tener geth instalado, preferiblemente la última versión, que incluye algunas correcciones relacionadas con la conexión a otras instancias...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 3:58 a.m.8 views

REALITY_SMASHER

REALITYSMASHER vRealize RCE + Privesc CVE-2021-21975, CVE-2021-21983, CVE-0DAY-????? "As easy to stop as it is to comprehend." What is it? "Reality Smasher" is an exploit for vRealize leveraging the security issues addressed in VMSA-2021-0004 CVE-2021-21975, CVE-2021-21983 in addition to a...

8.5CVSS7.1AI score0.7829EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/08/28 3:54 a.m.6 views

siemframework

SIEMS FRAMEWORK Framework de ataque modular MultiSIEM en Python3 Por ElevenPaths https://www.elevenpaths.com/ Uso: python3 ./siemsframework.py INTRODUCCIÓN Los SIEM son herramientas defensivas cada vez más utilizadas en el ámbito de la ciberseguridad, especialmente por grandes empresas y compañía...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 3:52 a.m.3 views

VindicateTool

Vindicate -brightgreen Un kit de detección de suplantación LLMNR/NBNS/mDNS para administradores de redes ¿Qué es Vindicate? Vindicate es una herramienta que detecta la suplantación de servicios de nombres, utilizada a menudo por atacantes de redes informáticas para robar credenciales por ejemplo,...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/28 3:48 a.m.2 views

sshLooter

NO UTILICES ESTO Hay una versión en C que es mucho mejor sshLooterC sshLooter Script para robar contraseñas de ssh. Instalación root@kitploit: git clone https://github.com/mthbernardes/sshLooter.git cd sshLooter Configuración root@kitploit: Edita el script en install.sh, y añade tu api de bot de...

5.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/28 3:23 a.m.2 views

CVE-2023-23397

A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...

9.8CVSS8.7AI score0.97408EPSS
SaveExploits19
Kitploit
Kitploit
added 2026/08/28 3:21 a.m.2 views

lockphish

Lockphish v2.0 Lockphish es la primera herramienta 07/04/2020 para ataques de phishing en la pantalla de bloqueo, diseñada para obtener credenciales de Windows, PIN de Android y Passcode de iPhone utilizando un enlace https. Tutorial de LockPhish: https://www.kalilinux.in/2020/05/lockphish.html...

5.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 3:21 a.m.2 views

thingsboard

Open-source IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Getti...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/28 3:07 a.m.5 views

langflow-cors-scanner

CVE-2025-34291 — Langflow: проверка источника / CORS Обзор Чрезмерно разрешающая конфигурация CORS в сочетании с конфигурацией cookie для refresh-токена позволяет похищать учётные данные...

9.4CVSS9AI score0.83844EPSS
SaveExploits3
Rows per page
Query Builder