Lucene search
+L

6854 matches found

Kitploit
Kitploit
β€’added 2026/09/08 4:27 p.m.β€’6 views

resterm

Resterm A terminal API client for REST, GraphQL, gRPC, WebSocket and SSE. Resterm stores API requests in plain .http and .rest files that you can diff, review and track in version control. Edit and send requests in the terminal, or run them from scripts and CI. Request files support workflows,...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/08 1:47 p.m.β€’7 views

openclaw-security-monitor

OpenClaw Security Monitor Proactive security monitoring, threat scanning, and real-time visibility for OpenClaw deployments. Detects threats from the ClawHavoc campaign 824+ malicious skills, AMOS stealer , Vidar infostealer , GhostSocks proxy malware, ClawJacked WebSocket brute-force, workspace...

6AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/08 12:36 p.m.β€’6 views

mitm-proxy

Go MITM Proxy A lightweight, developer-friendly Man‑in‑the‑Middle MITM HTTP/HTTPS proxy written in Go. It supports HTTP/1.1 and HTTP/2, CONNECT tunneling, WebSocket tunneling ws/wss, on‑disk response caching with flexible filters, and live config reloading. Badges Admin Dashboard Preview Overview...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/08 12:06 p.m.β€’5 views

chisel-ng

root@kitploit: | | | | / | ' | / |/ \ || ' \ / | | | | | | \ \ / || | | | | | || |||/|| || ||, | |/ chisel-ng A Rust implementation of chisel for penetration testing and red team operations. Establishes reverse tunnels over SSH-over-WebSocket-over-TLS, allowing operators to pivot through...

6AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/08 12:04 p.m.β€’4 views

CVE-2026-39636-vulnerability-exp

1. Burp Suite must be opened before running here !! And the default Burp Suite port must be 8080. If it is different, you can change it yourself. 2. Download the required libraries root@kitploit: pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Just run it directly...

8.2CVSS5.8AI score0.03396EPSS
SaveExploits4
Kitploit
Kitploit
β€’added 2026/09/08 11:26 a.m.β€’9 views

grdpwasm

grdpwasm A web-based RDP client built with Go WebAssembly and grdp. Connect to a Windows Remote Desktop server directly from your browser β€” no plugins required. Architecture root@kitploit: Browser WASM ──WebSocket──► proxy Go ──TCP──► RDP Server Because browsers cannot open raw TCP sockets, a...

6AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/08 10:35 a.m.β€’4 views

CVE-2026-39987-marimo-rce

CVE-2026-39987 - Marimo Pre-Auth RCE Unauthenticated Remote Code Execution in Marimo via WebSocket Terminal πŸ“Œ Overview CVE-2026-39987 is a critical Pre-Authentication Remote Code Execution vulnerability affecting Marimo versions prior to 0.23.0. The /terminal/ws WebSocket endpoint completely...

9.8CVSS8AI score0.98945EPSS
SaveExploits23
Kitploit
Kitploit
β€’added 2026/09/08 9:43 a.m.β€’7 views

CVE-2024-55591-POC

--port 443 --ssl Then use the prompt: root@kitploit: FortiOS get system status FortiOS exit...

9.8CVSS8.4AI score0.98259EPSS
SaveExploits10
Kitploit
Kitploit
β€’added 2026/09/08 9:36 a.m.β€’9 views

CVE-2020-14368

CSWSH-THEIA-CVE-2020-14368 Report target: Eclipse CHE deployment available on che.openshift.io Vulnerability type: Cross-site websocket hijack Discovery date: 2020-04-08 Author: Robin Duda codingchili@github Summary The /services websocket endpoint in Eclipse CHE adn Theia is vulnerable to...

7.1CVSS7.1AI score0.00507EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/08 9:04 a.m.β€’7 views

CVE-2026-44578

CVE-2026-44578 β€” Next.js WebSocket Upgrade SSRF Pre-authentication Server-Side Request Forgery in Next.js self-hosted deployments. A single crafted HTTP request extracts AWS credentials, secrets, and internal service data from localhost:80...

8.6CVSS7.7AI score0.38872EPSS
SaveExploits11
Kitploit
Kitploit
β€’added 2026/09/08 8:36 a.m.β€’6 views

cve-2018-1002105

This was modified from https://gravitational.com/blog/kubernetes-websocket-upgrade-security-vulnerability/. All credit goes to the kind folks at Gravitational. The original PoC code was modified to go a bit beyond checking for vulnerability and to actually run a command inside the first container...

9.8CVSS8.1AI score0.86978EPSS
SaveExploits10
Kitploit
Kitploit
β€’added 2026/09/08 8:33 a.m.β€’7 views

TERM1B1TB0T

TERMIβ‚ΏITβ‚ΏOT πŸ€– A basic tool that tracks Bitcoin transactions in real time above or below a particular price target using a websocket API on your terminal. STEP-BY-STEP: WINDOWS -Step 1: Install Python if not already installed Download from python.org During install β†’ make sure to check βœ… β€œAdd Pyth...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/08 7:30 a.m.β€’9 views

atlantis-android

Atlantis Android Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging. Overview Atlantis Android is a companion library to Proxyman that allows you to capture and inspect network traffic from your Android applications without configuring a proxy or installing...

6AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/08 6:20 a.m.β€’9 views

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/08 5:46 a.m.β€’5 views

CVE-2025-46811

SUSE Manager Exploit Toolkit CVE-CVE-2025-46811 Scanner & Exploiter πŸš€ Features Multi-threaded vulnerability scanning Interactive root shell via WebSocket Single command execution mode Colored debug output Batch processing of targets πŸ“¦ Installation root@kitploit: git clone...

9.8CVSS8.4AI score0.10711EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/08 5:14 a.m.β€’5 views

CVE-2022-43704

CVE-2022-43704 - Channel Accessible by Non-Endpoint/Authentication Bypass by Capture-replay Sinilink XY-WFTX Wifi Remote Thermostat Module Temperature Controller Title Product Documentation Application User Manual Hardware Datasheets ESP8285 Buck Converter Firmware Product Description...

5.9CVSS6.3AI score0.01868EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/08 4:02 a.m.β€’5 views

CVE2_Jenkins_RCE

Jenkins CLI Websocket Hijacking - PoC A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 β€” a vulnerability affecting Jenkins versions 2.217-2.441. This exploits targets the Jenkins CLI that can be used to remotely access and issue commands to a Jenkins control server...

8.8CVSS7.7AI score0.67151EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/08 4:02 a.m.β€’6 views

CVE-2024-55591-POC

ScaryByte R&D PoC for CVE-2024-55591 A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability CVE-2024-55591 in certain Fortinet devices. This script: 1. Installs Missing Dependencies automatically 2. Optionally Scans a...

9.8CVSS8.4AI score0.98259EPSS
SaveExploits10
Kitploit
Kitploit
β€’added 2026/09/08 2:57 a.m.β€’11 views

STEWS

STEWS: Security Testing and Enumeration of WebSockets STEWS is a tool suite for security testing of WebSockets This research was first presented at OWASP Global AppSec US 2021 Features STEWS provides the ability to: Discover : find WebSockets endpoints on the web by testing a list of domains...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/09/08 2:42 a.m.β€’5 views

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF with RCE | Automated Reverse Shell Exploit via WebSocket This project provides a Python-based proof-of-concept PoC script to exploit a vulnerable WebSocket-based service. The script automates agent registration, WebSocket payload delivery, and remote command executi...

9.8CVSS5.9AI score0.02909EPSS
SaveExploits6
Rows per page
Query Builder