Telewreck

Telewreck A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248. This extension is based on the original exploit tool written by Paul Taylor @bao7uo which is available at https://github.com/bao7uo/dpcrypto. Credits and big thanks to him. A related blog post...

RedbloodC2

Versión pública de Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims instalación root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Uso root@kitploit: Después de instalar...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 is a critical vulnerability in the Cisco IOS XE software Web UI feature that allows unauthenticated remote attackers to create accounts with privilege level 15 on affected systems, thereby gaining full control of the device. The vulnerability primarily stems from...

xpfarm

XPFarm An open-source vulnerability scanner that wraps well-known open-source security tools behind a single web UI. Index Section| Description ---|--- Why| Motivation and philosophy behind XPFarm Wrapped Tools| The 10 open-source tools orchestrated by XPFarm Architecture Map| Full system...

http-breakout-proxy

HTTP Breakout Proxy A lightweight HTTP/HTTPS intercepting proxy and traffic analysis tool written in Go, with a web-based UI for inspecting, filtering, coloring, and annotating captured traffic in real time. Overview HTTP Breakout Proxy functions as both an HTTP and HTTPS MITM proxy and a live...

Exihibitor-RCE

Exhibitor-RCE Exhibitor Web Ui 1.7.1 RCE, CVE-2019-5029 Step 1: $ git clone https://github.com/thehunt1s0n/Exihibitor-RCE/ Step 2: $ cd Exihibitor-RCE/ Step 3 optional: You might need to edit json data payload in the script. To do that simply capture the request using burpsuite when comiting the...

evtx

EVTX A cross-platform parser for the Windows XML EventLog format Features 🔒 Implemented using 100% safe rust - and works on all platforms supported by rust that have stdlib. ⚡ Fast - see benchmarks below. It's faster than any other implementation by orders of magnitude! 🚀 Multi-threaded. ✨ Suppor...

SnitchDNS

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/SnitchDNS for the latest version. SnitchDNS SnitchDNS is a database driven DNS Server with a Web UI, written in Python and Twisted, that makes DNS administration easier with all configuration changed applied instantly without...

CVE-2017-6640-POC

CVE-2017-6640-POC Proof of concept for CVE-2017-6640 as burp extension Cisco Prime Data Center Network Manager DCNM implements a static credentials. See also: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 More specifically, the Web UI requires users...

jaeles-signatures

This project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine This repo only contain Default Signatures for Jaeles project. Pull requests or any ideas are welcome. Please read the Official Documentation here for writing your own signature. Installation root@kitploit...

CVE-2026-63766_exploit

CVE-2026-63766 — GPT-SoVITS Unauthenticated OS Command Injection Unauthenticated remote code execution in GPT-SoVITS's Gradio web UI webui.py. The audio-processing helpers openasr, openslice, opendenoise, openuvr5 interpolate unsanitised Gradio textbox path values straight into shell commands run...

scoringengine

Scoring Engine Scoring Engine is an open-source platform for running Red/White/Blue team cybersecurity competitions. It automates service checks each round and provides a web-based scoreboard and configuration interface. Features Automated scheduling and execution of service checks Distributed...

vulnerablecode

VulnerableCode VulnerableCode es una base de datos de vulnerabilidades de paquetes de software con interfaz web y API. ¿Por qué usar VulnerableCode? VulnerableCode proporciona una interfaz web y una API para acceder a una base de datos de vulnerabilidades conocidas de paquetes de software, con...

xpfarm

XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

CVE-2026-1025

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2026-1029

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

CVE-2026-1031

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2026-1037

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2026-1037 Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...