CVE-2025-6218-POC

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...

port-scan-automation

LazyMap - Script de Escaneo Automático con NMAP Automatiza escaneos de NMAP y políticas personalizadas de Nessus. Desarrollado por Daniel Compton https://github.com/commonexploits/port-scan-automation.git Publicado bajo AGPL, consulta LICENSE para más información Instalación root@kitploit: git...

CVE-2024-13184

CVE-2024-13184 El Ultimate WordPress Toolkit – WP Extended = 3.0.12 - Inyección SQL No Autenticada a través del Módulo de Intentos de Inicio de Sesión Descripción El plugin The Ultimate WordPress Toolkit – WP Extended para WordPress es vulnerable a una inyección SQL basada en tiempo a través del...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC Primero que todo, debes instalar sqlmap. Necesitas configurar: dominio o IP objetivo tu cookie Luego ejecuta el shell: root@kitploit: sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

CVE-2025-14269

CVE-2025-14269 A security issue was discovered in the in-cluster version of Headlamp where unauthenticated users may be able to reuse cached credentials to access Helm functionality through the Headlamp UI. Kubernetes clusters are only affected if Headlamp is installed, is configured with...

CnC-Botnet-in-Python

CnC-Botnet-in-Python Botnet C&C escrita en Python Descripción Botnet simple escrita en Python usando fabric. El autor no es responsable del uso de este código. Hosts Es posible cargar hosts desde un archivo hosts.txt incluido en el directorio principal del proyecto. El formato predeterminado de...

katana

A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...

ghostlock-emerald

GhostLock for POCO M6 Pro emerald GhostLock CVE-2026-43499 is a 15-year-old Linux kernel use-after-free in the futex priority-inheritance code that lets any local user gain root. This project uses it to root the POCO M6 Pro MediaTek Helio G99 Ultra / MT6789 and install KernelSU on a locked...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...

solarflare

solarflare Herramienta de volcado de credenciales para SolarWinds Orion Publicación en blog: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Créditos a @asolino, @gentilkiwi y @skelsec por ayudarme a descifrar DPAPI. root@kitploit:...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

trufflehog

TruffleHog Encuentra credenciales filtradas. 🔎 Escaneando ahora ...y más Para obtener más información sobre TruffleHog y sus características y capacidades, visita nuestra página de producto. 🌐 TruffleHog Enterprise ¿Estás interesado en monitorear continuamente Git, Jira, Slack, Confluence,...

CVE-2026-41089

CVE-2026-41089 — Exploit de Desbordamiento de Búfer en la Pila de Windows Netlogon CLDAP RCE CVE-ID: CVE-2026-41089 CVSS: 9.8 Crítico CWE: CWE-121 Desbordamiento de Búfer basado en la Pila Vector de ataque: UDP/389 CLDAP SearchRequest Impacto: Ejecución remota de código RCE / Denegación de servic...

pict

PICT - Post-Infection Collection Toolkit This set of scripts is designed to collect a variety of data from an endpoint thought to be infected, to facilitate the incident response process. This data should not be considered to be a full forensic data collection, but does capture a lot of useful...

claude-bug-bounty

BugHunter AI-powered bug bounty hunting — recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · FAQ Powered byAwareXone.com — Your AI Agent Against Scams & Fraud 💜 Open for Sponsorship BugHunter is open for sponsorship. Your support funds new features...

claude-bug-bounty

BugHunter Caza de bug bounty impulsada por IA — del reconocimiento al informe, en tu terminal. Configuración gratuita · Inicio rápido · Comandos · Qué encuentra · Instalación · FAQ Con tecnología deAwareXone.com — Tu agente de IA contra estafas y fraudes 💜 Abierto a patrocinios BugHunter está...

CVE-2021-38619

CVE-2021-38619 openBaraza HCM HR Payroll v.3.1.6 Unauthenticated Stored XSS Vulnerability openBaraza HCM v.3.1.6 does not properly neutralize user-controllable input, this could allow an unauthenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative...

CVE-2021-20717

CVE-2021-20717-EC-CUBE-XSS NVD Description Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script...

CVE-2015-3224

Ruby on Rails Web Console Exploit CVE-2015-3224 This repository contains a Python script to exploit an IP whitelist bypass vulnerability in the developer web console of Ruby on Rails 4.0.x and 4.1.x. The script allows for remote code execution on vulnerable servers. ⚠️ Disclaimer This script is...