Lucene search
+L

15201 matches found

Kitploit
Kitploit
added 2026/09/22 1:10 p.m.15 views

kraken

警告 我一直在审查Kraken-Client代码,由于这是我第一个React应用,它陈旧、笨重且需要重大改进(服务器也需要一些工作)。在接下来的几周/几个月内,我将尽力用更新的React或其他框架重写它。请随意继续使用当前版本,如果遇到任何问题,请继续提交issue并提供反馈!谢谢! Kraken:一个多平台分布式暴力破解密码系统 什么是Kraken...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/22 12:07 p.m.19 views

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 11:36 a.m.8 views

CVE-2015-1397

POC for CVE-2015-1397 Magento SQL Injection. Read more at : https://blog.checkpoint.com/security/analyzing-magento-vulnerability/...

6.5CVSS5.8AI score0.52284EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/22 11:06 a.m.108 views

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

5.5AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/22 10:39 a.m.9 views

CVE-2025-30208

CVE-2025-30208 !IMPORTANT Disclaimer This exploit is for educational and ethical security testing purposes only. The use of this exploit against targets without prior mutual consent is illegal, and the developer disclaims any liability for misuse or damage caused by this exploit. Installation...

7.5CVSS7AI score0.74969EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/22 10:30 a.m.14 views

Resources-for-Application-Security

Updated post at https://ishaqmohammed.me/posts/resources-for-application-security/ Resources for Application Security Some good resources for getting started with application security Note: The resources which i have put are those which i will be using in my application security learnings, feel...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/22 10:02 a.m.9 views

CVE-2020-8193

CVE-2020-8193...

6.5CVSS6.8AI score0.88411EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/22 9:53 a.m.16 views

bfac

BFAC 针对Web应用的高级备份文件工件测试 BFAC(备份文件工件检查器)是一种自动化工具,用于检查可能泄露Web应用源代码的备份工件。这些工件还可能导致敏感信息泄露,例如密码、目录结构等。 BFAC的目标是成为备份文件工件黑盒测试的 一体化工具 。 特性 多线程扫描。 包含请求速率限制。 HTTP代理支持。 使用多种算法自动检测有效和无效页面。 HTTP代理支持。 用户代理随机化。 批量处理。 既可作命令行工具,也可作Python模块。 支持Windows、macOS和Linux操作系统。 报告:简单、详细、CSV、JSON。 用法 描述| 命令 ---|--- 帮助| bfac...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/22 9:43 a.m.13 views

CVE-2019-12744

CVE-2019-12744 Information Exploit Title: Remote Command Execution through Unvalidated File Upload in SeedDMS versions 5.1.11 CVE: CVE-2019-12744 Vendor Homepage: https://www.seeddms.org/index.php?id=2 Exploit Author: NobodyAtall Tested version: Seeddms 5.1.10, 5.0.11 Tested OS: Windows 7 x64...

7.5CVSS7.8AI score0.11696EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/22 8:53 a.m.19 views

Juiceshopgl

Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/22 7:51 a.m.10 views

Vuln_Exploitation_MegaQuagga_Pentest

Vulnerability Exploitation — MegaQuagga Penetration Test Report Analyst: Samuel Weiss Organization: 0x2A Security Date: April 20, 2026 Client: MegaQuagga Publishing Target: www.megaquagga.local Classification: CONFIDENTIAL Overview This project documents a structured penetration test conducted...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/22 7:23 a.m.14 views

web

I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. 🚧 ⚠️ Work in progress; Not ready for use,yet ⚠️ 🚧 Introducing OSINTBuddy Welcome to the OSINTBuddy project where you can connect,...

6AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/22 6:20 a.m.9 views

decider

Decider 本作品采用知识共享署名 4.0 国际许可协议进行许可。 本项目使用了 MITRE ATT&CK® — ATT&CK 使用条款。 📰 3.0.0 — Kiosk 版本来了 Decider 现在无需登录即可使用,并且已适配响应式设计。 内容更新简化为复制文件并重启 Docker。 Docker 配置变化较大,没有从 2 到 3 的明确升级路径,建议直接全新安装 3。 但数据库结构保持不变,因此可利用 Decider 2.x.y 来编辑内容。 这是 Firefox 浏览器——但在移动设备上也能正常工作! 🤔 这是什么? ⏩ 简明说明...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/22 3:39 a.m.8 views

adapt

概述 ADAPT 是一款对 Web 应用执行自动化动态应用渗透测试的工具。它旨在提升渗透测试工作的准确性、速度和信心。ADAPT 自动检测多种行业标准 OWASP Top 10 漏洞,并根据这些潜在漏洞输出分类结果。ADAPT 还利用 OWASP ZAP 的功能执行自动化的主动与被动扫描以及自动爬取。由于 ADAPT 工具的灵活性,所有这些功能和测试都可以通过配置文件启用或禁用。有关测试和配置的更多信息,请访问 ADAPT wiki。 工作原理 ADAPT 使用 Python 构建自动化框架,利用行业标准工具(如 OWASP ZAP 和...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/22 3:09 a.m.10 views

CVE-2021-33558.

CVE : CVE-2021-33558. Exploit code of CVE-2021-33558 Summary In Boa/0.94.13 there is various misconfiguration.it expose various senstive information. Proof of Concept https://target.com/backup.html https://target.com/preview.html https://target.com/js/log.js https://target.com/log.html...

7.5CVSS7.6AI score0.12307EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/22 2:49 a.m.16 views

CVE-2022-23861

CVE-2022-23861: Multiple Stored Cross-Site Scripting in YSoft SafeQ Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be leveraged to perform XSS...

6.1CVSS6.1AI score0.00491EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/22 2:20 a.m.8 views

CVE-2023-23752-Python

CVE-2023-23752-Python root@kitploit: usage: CVE-2023-23752.py -h url Joomla! 4.2.8 - Unauthenticated information disclosure positional arguments: url Root URL base path including HTTP scheme, port, and root folder options: -h, --help show this help message and exit...

5.3CVSS5.4AI score0.99827EPSS
SaveExploits43
Nuclei
Nuclei
added 2026/09/22 2:05 a.m.146 views

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2020.1.11 12.1.11, 2021.0.9 13.0.9, 2021.1.7 13.1.7, 2022.0.7 14.0.7, 2022.1.8 14.1.8, and 2023.0.4 15.0.4, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized...

9.1CVSS8.1AI score0.95184EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/21 11:33 p.m.9 views

CVE-2024-5961

CVE-2024-5961 Reflected XSS in 2ClickPortal Version: from 7.2.31 through 7.6.4. intext:"Powered by 2ClickPortal" PoC root@kitploit: https://domain/szukaj/?searchlang=pl&search=all&string=" onfocus=alert1 autofocus="...

5.3CVSS6AI score0.01281EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/21 11:31 p.m.8 views

CVE-2024-7124

CVE-2024-7124 Reflected XSS in DInGO dLibra from 6.0 = 6.3.20 Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody in...

5.3CVSS5.9AI score0.01091EPSS
SaveExploits0
Rows per page
Query Builder