YellowKey-Bitlocker-CVE-2026-45585

🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...

PIL-CVE-2017-8291

Vulnerabilidad de ejecución remota de comandos en Python PIL GhostButt El módulo PIL Pillow para procesar imágenes en Python se ve afectado por la vulnerabilidad GhostButt CVE-2017-8291 porque llama internamente a GhostScript, lo que resulta en una vulnerabilidad de ejecución remota de comandos...

Root-My-Galaxy-S938B

Root My Galaxy — S938B Root My Galaxy is a firmware-profiled installer for temporary KernelSU root on supported Samsung builds. This fork is maintained for the Galaxy S25 Ultra SM-S938B running: root@kitploit: Build: BP4A.251205.006.S938BXXSBCZG3 Kernel:...

frameless-bitb

Frameless BITB A new approach to Browser In The Browser BITB without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft. This POC code is built for using this new BITB with Evilginx, and a Microsoft Enterprise phishlet. Before diving deep...

naive-hashcat

Naive Hashcat Crack password hashes without the fuss. Naive hashcat is a plug-and-play script that is pre-configured with naive, emperically-tested, "good enough" parameters/attack types. Run hashcat attacks using ./naive-hashcat.sh without having to know what is going on "under the hood"...

CVE-2021-45901

CVE-2021-45901 ServiceNow - Enumeración de Usuarios Código PoC enumSNOWUsers.py - Enumerador de Usuarios SNOW Título Vulnerabilidad de Enumeración de Usuarios encontrada en la Aplicación ServiceNow Publicado: Versión: 1.0 Vendor: ServiceNow Producto: ServiceNow https://www.servicenow.com/ Versión...

satellite

satellite Satellite is an web payload hosting service which filters requests to ensure the correct target is getting a payload. This can also be a useful service for hosting files that should be only accessed in very specific circumstances. Quickstart Guide 1. Install satellite on Ubuntu using th...

Adobe-ColdFusion-8-RCE-CVE-2009-2265

Adobe ColdFusion 8 - Exploit de Ejecución Remota de Comandos RCE Resumen Este exploit apunta a una vulnerabilidad conocida en Adobe ColdFusion 8 CVE-2009-2265. Permite la ejecución remota de comandos RCE mediante la subida de un payload JSP malicioso que establece una conexión de shell inversa...

CVE-2018-14699

CVE-2018-14699 UnAuth Command injection in the enableuser function of DroboAccess v2.1 Usage: To use First startup a listener ncat -nvlp 1337 Next run the exploit example: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='host for exploitation, ex...

CVE-2021-24884

CVE-2021-24884 XSS2RCE en Formidable 4.09.04 Formidable 4.09.04 permitía inyectar ciertas etiquetas HTML como ,,, y . Esto podría permitir a un atacante remoto no autenticado explotar una inyección de HTML mediante la inyección de un enlace malicioso. La inyección de HTML podría engañar a usuario...

beagle

Beagle 1. About Beagle 2. Installation 1. Docker 2. Python Package 3. Configuration 3. Web Interface 1. Uploading Data 2. Browsing Existing Graphs 3. Graph Interface 1. Inspecting Nodes and Edges 2. Expanding Neighbours 3. Hiding Nodes 4. Running Mutators 5. Toggling Node and Edge Types 6...

CVE-2021-30862

CVE-2021-30862 In 2021, CodeColorist released his writeups on the Mistuned vulnerabilities, a series of vulnerabilities affecting the iTunes Store allowing for one-click remote code execution. Notably, he demonstrated popping calc with no memory corruption at all, but with just a logic bug. Durin...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Script de Wker para la lectura arbitraria de archivos en Jellyfin, admite ejecución por lotes. La lógica es muy sencilla: mediante una petición GET comprueba si existe win.ini: root@kitploit: define payload =...

CVE-2021-1675

Explanation of the vulnerability The Printer Spooler is a Windows service that manages print queues. It receives jobs submitted by the user, converts them to a format the printer understands, and sends them when the printer is available. It runs as a system service spoolsv.exe with high privilege...

CVE-2025-57529

CPAS-bug El sistema de información de gestión de auditoría CPAS tiene una vulnerabilidad de inyección SQL. Beijing YouDataSum Technology Co., Ltd. dominio: http://youdatasum.com información root@kitploit: CVE-ID: CVE-2025-57529 versión afectada: findArchiveReportByDah@RequestParamvalue = "pageNum...

Prestashop-CVE-2024-34716

Exploit Script for CSRF and Reverse Shell Attack This script automates a CSRF Cross-Site Request Forgery exploit to upload a PHP reverse shell on a target's web server and execute it. The reverse shell is delivered as a ZIP file via a crafted CSRF payload, which is triggered when a privileged use...

ARTIF

ARTIF ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data. It also performs automatic enrichment and threat scoring by collectin...

sitrep

SitRep Triaje de host extensible y configurable. Propósito SitRep pretende proporcionar una alternativa ligera y extensible para el triaje de hosts. Las comprobaciones se cargan dinámicamente en tiempo de ejecución desde archivos independientes. Esto permite a los operadores modificar rápidamente...

airbash

airba.sh Airbash is a POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing. It is compatible with Bash and Android Shell tested on Kali Linux and Cyanogenmod 10.2 and uses aircrack-ng to scan for clients that are currently connected to access...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...