268946 matches found
CVE-2025-61319
CVE-2025-61319: XSS Almacenado en ReNgine 2. Después de completar el escaneo, abre la pestaña de Vulnerabilidades en ReNgine y visualiza los resultados. 3. El payload se ejecuta en el contexto del navegador del administrador. Versiones afectadas ReNgine = 2.2.0...
dotdotslash
dotdotslash An tool to help you search for Directory Traversal Vulnerabilities Benchmarks Platforms that I tested to validate tool efficiency: DVWA low/medium/high bWAPP low/medium/high Screenshots Instalation You can download the last version cloning this repository root@kitploit: git clone...
Browser-Exploits
Browser-Exploits Algunos exploits genéricos de navegador Solo con fines educativos...
exploits
exploits Scripts de prueba de concepto para varias vulnerabilidades de seguridad diferentes...
CVE-Reverse
Reverse N Days!!! Solo para llevar un registro de todos los CVE que encontramos y revertimos, debería haberlo hecho mucho antes xD...
pysqli
PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...
msploitego
msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...
posta
Posta Posta is a tool for researching Cross-document Messaging communication. It allows you to track, explore and exploit postMessage vulnerabilities, and includes features such as replaying messages sent between windows within any attached browser. Prerequisites Google Chrome / Chromium Node.js...
tsunami-security-scanner
Tsunami Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence. To learn more about Tsunami, visit our documentation. Tsunami relies heavily on its plugin system to provide basic scanning capabilities...
brakeman
Brakeman Brakeman 是一款静态分析工具，用于检查 Ruby on Rails 应用程序中的安全漏洞。 安装 使用 RubyGems： root@kitploit: gem install brakeman 使用 Bundler： root@kitploit: group :development do gem 'brakeman', require: false end 使用 Docker： root@kitploit: docker pull presidentbeef/brakeman 使用 Docker 从源码构建： root@kitploit: git clone...
GHSA-PH9C-7HW9-VHHW vulnerabilities
Vulnerabilities for packages: zookeeper, zookeeper-fips...
GHSA-5Q95-HRPC-M3W3 vulnerabilities
Vulnerabilities for packages: zookeeper, zookeeper-fips, elasticsearch-fips...
tplmap
Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...
safety
!NOTE Come and join us at SafetyCLI. We are hiring for various roles. Table of Contents Table of Contents Introduction Key Features Getting Started GitHub Action Command Line Interface 1. Installation 2. Log In or Register...
CVE-2021-34527-CVE-2023-38831-and-CVE-2023-32784
Este repositorio no tiene un README...
vulnx
VulnX Vulnx 🕷️ is An Intelligent Bot Auto Shell Injector that detects vulnerabilities in multiple types of Cms...
qark
Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...
Weblogic_Vuln
Prefacio root@kitploit: El artículo analiza en detalle las vulnerabilidades históricas de Weblogic desde CVE-2015 hasta CVE-2019, y organiza los POC relacionados en WeblogicVuln. Registra notas de aprendizaje sobre vulnerabilidades de deserialización de Java. Bienvenidos los start e issues...
slither
Slither, the smart contract static analyzer Join the Empire Hacking Slack - Discussions and Support Slither is a Solidity & Vyper static analysis framework written in Python3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to...