secator

The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...

CVE-2026-42897

CVE-2026-42897 - Exchange Health Checker Outbound Rewrite Rule Blind Spot Severity: Medium CVSS 5.3 Component: Microsoft CSS-Exchange - HealthChecker diagnostic tool Affected Files: Diagnostics/HealthChecker/Analyzer/Get-URLRewriteRule.ps1 L49, L72, L97...

CVE-2016-5699-poc

CVE-2016-5699-poc PoC code of CVE-2016-5699 Vulnerability poc.py file is url sender to receiver.py receiver.py is Flask http receive headers testing Video : https://youtu.be/ugUt5iKpcV4 bunseokbot@UpRoot...

ProxyShell

ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

CVE-2022-22978

CVE-2022-22978 Spring Security Pass Spring Security 成功 http://localhost:9090/login%0a Pass Spring Security with SayMyName 失敗 http://localhost:9090/name%0d Bypass Spring Security with Custom RBAC 失敗 http://localhost:9090/admin/admin%0d Bypass Spring Security with Annotation RBAC 失敗...

CVE-2021-22941

Use python3 exploit -u url --shell http://127.0.0.1/shell --ping 127.0.0.1 Reference https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html...

CVE-2021-26084

CVE-2021-26084 Affected Versions Versions 6.13.23 6.14.0 ≤ Version 7.4.11 7.5.0 ≤ Version 7.11.6 7.12.0 ≤ Version 7.12.5 Cause and Exploitation Method Confluence uses a framework to map URLs to Java classes, creating what is known as an "action". Action URLs end with ".action" and are defined in...

fav-up

Fav-up Lookups for real IP starting from the favicon icon and using Shodan. Installation pip3 install -r requirements.txt Shodan API key not the free one Usage CLI First define how you pass the API key: -k or --key to pass the key to the stdin -kf or --key-file to pass the filename which get the...

RTF-Cleaner

RTF-Cleaner RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759...

CVE-2015-57115

CVE-2015-57115 Mass Checker For CVE-2015-57115 Description The CVE-2015-57115 Checker Script is a Python tool for detecting vulnerabilities related to CVE-2015-57115, which is a path traversal vulnerability in certain PHP applications. The script checks multiple URLs for the presence of this...

CVE-2023-38545

usage root@kitploit: git clone https://github.com/imfht/CVE-2023-38545 cd CVE-2023-38545/curl-7.74.0 && ./configure --with-openssl make -j 4 python3 socks.py & export ALLPROXY=socks5h://127.0.0.1:9050 ./curl-7.74.0/src/curl $python3 -c "print'A'10000, end=''" -vvvv proof for details please see:...

EUVD-2026-86534

The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'jfbxss' URL Query Variable Parameter via Calculated Field in all versions up to, and including, 3.6.5.3 due to insufficient input sanitization and output escaping. This makes...

HouseProxy

HouseProxy Protect your parents from phishing, HTTP proxy focused on block phishing URL's Install root@kitploit: git clone https://github.com/mthbernardes/HouseProxy.git cd HouseProxy/ pip3 install -r requeriments.txt Config root@kitploit: Edit etc/HouseProxy.conf to change de default user and...

Sooty

Overview Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty is to perform as many of the routine checks as possible, allowing the analyst more time to spend on deeper analysis within the same time-frame. Details for man...

exploit-CVE-2016-8016-25

McAfee Virus Scan for Linux multiple remote flaws THIS EXPLOIT AND ALL THE CODE IN THIS REPO WERE REMOVED TO AVOID ANY PROBLEMS REGARDING VIOLATING ANY MCAFEE LICENSE McAfee VirusScan Enterprise for Linux is a enterprise antivirus solution by Mcafee. Its unique, Linux-based on- access scanner...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

Oralyzer

Introduction Oralyzer, a simple python script that probes for Open Redirection vulnerability in a website. It does that by fuzzing the URL that is provided in the input. Features Oralyzer can identify following types of Open Redirect Vulnerabilities: Header Based Javascript Based Meta Tag Based...

CVE-2018-25031

CVE-2018-25031 Description: Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Screenshot before attack: PoC: root@kitploit:...

CVE-2023-49438

CVE-2023-49438 Proof of Concept Description An open redirect vulnerability in the python package Flask-Security-Too =version 5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes. Background...