frp

frp README | 中文文档 Sponsors frp is an open source project with its ongoing development made possible entirely by the support of our awesome sponsors. If you'd like to join them, please consider sponsoring frp's development. Gold Sponsors The complete IDE crafted for professional Go developers The...

CVE-2024-7399-POC

CVE-2024-7399 Exploit for CVE-2024-7399. More details can be found here: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Usage: root@kitploit: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3 CVE-2024-7399.py...

Nanobrok

Nanobrok Web Service Web Service write in Python for control and protect your android device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webservice for control and protect your android device, written in...

cve-2017-10271-poc

CVE-2017-10271 POC Introduction This is an autotest poc for CVE-2017-10271. Having been tested on CentOS 7 and Windows 7/10. Building This project is written in rust language. You need to install rust environment from https://www.rust-lang.org/ first and then build the project with the following...

CVE-2021-40906

CVE-2021-40906 - XSS Reflejado en una zona no autenticada Aplicación: Consola de Administración Web de CheckMK Revisión de Software: De 1.5.0 a 1.5.0p25 Autor: Edgar Augusto Loyola Torres. Tipo de ataque: XSS Reflejado Solución: Actualizar a la Revisión de Software 1.6.0p26 o posterior Resumen: E...

CVE-2023-23752

CVE-2023-23752 Descripción Este repositorio contiene scripts en Python y Bash que sirven como portaciones del Prueba de Concepto PoC original escrita en Ruby para la vulnerabilidad CVE-2023-23752 en Joomla! CMS versiones 4.0.0 hasta 4.2.7 realizada por 'noraj' Alexandre ZANNI. Se identificó una...

satellite

satellite satellite 是一个 Web 载荷托管服务，它能够过滤请求，确保只有正确的目标才能获取到载荷。此工具也可用于托管那些仅在非常特定情况下才能被访问的文件。 快速入门指南 1. 在 Ubuntu 上安装 satellite，使用 .deb 文件 dpkg -i satelliteX.X.Xlinuxamd64.tar.gz 2. 创建要提供的文件 echo 'It worked!' /var/www/html/index.html 3. 为 index.html 创建过滤文件 echo -e "authorizeduseragents:\n- ayyylmao"...

VeilTransfer

VeilTransfer 2.0 VeilTransfer es una utilidad de exfiltración de datos diseñada para probar y mejorar las capacidades de detección. Esta herramienta simula técnicas reales de exfiltración de datos utilizadas por actores de amenazas avanzados, lo que permite a las organizaciones evaluar y mejorar ...

rematch

|Read The Docs| |Gitter Chat| |Build Status| |Codacy Badge| |idaplugin PyPI| |server PyPI| rematch REmatch, yet another binary comparison tool. Rematch is still a work in progress and is not as feature-rich as we'd like it to be. Basic functionality is available at this point and more advanced...

CVE-2018-2636

Install root@kitploit: $ pip install --user requests argparse unicodedata Info POC for CVE-2018-2636. Usage example root@kitploit: python eGw.py -H 127.0.0.1 -P 8080 -i ... Let's get info about server ! Your instance is vulnerable to CVE-2018-2636 ... Links Oracle Critical Patch Update Advisory...

CVE-2023-23752-EXPLOIT

CVE-2023-23752 - Joomla: Verificación de Acceso Incorrecta Se ha identificado un problema en las versiones 4.0.0 a 4.2.7 de Joomla. Esta vulnerabilidad está relacionada con una verificación de acceso incorrecta dentro de la aplicación, lo que permite el acceso no autorizado a endpoints críticos d...

CVE-2021-40438

CVE-2021-40438 build root@kitploit: docker build -t cve-2021-40438:1.0 . run root@kitploit: docker run --rm -d -p 4444:80 cve-2021-40438:1.0 check CVE-2021-40438 root@kitploit: ./main.sh...

cve-2023-34960

cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...

CVE-2022-0332

CVE-2022-0332 Moodle 3.11 a 3.11.4 - Inyección SQL POC root@kitploit: GET...

CVE-2023-34924

CVE-2023-34924 Una vulnerabilidad de desbordamiento de búfer del router H3CMagicB1STV100R012 Información de CVE: root@kitploit: • the name of an affected Product: H3C Magic B1STW B1STV100R012 router • the affected or fixed versions: affected version: H3C-Magic-B1STW - H3CMagicB1STV100R012. Fixed...

CVE-2026-83319

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...

CVE-2026-83314

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...

EUVD-2026-79671

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI Publisher. While the...

CVE-2026-83319

Oracle BI Publisher (component: Web Service API ) in Oracle Analytics version 12.2.1.4.0 is vulnerable to an easily exploitable flaw allowing a low-privileged attacker with network access via SOAP to compromise the product. Due to a scope change , attacks originating in BI Publisher may significa...

EUVD-2026-79666

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to compromise Oracle BI...