Lucene search
+L

68107 matches found

Kitploit
Kitploit
added 2026/08/25 6:53 p.m.62 views

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

7.1AI score
SaveExploits0
EUVD
EUVD
added 2026/08/25 6:31 p.m.4 views

EUVD-2026-65595

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/25 6:18 p.m.86 views

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

7.2AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 6:15 p.m.53 views

webshell-analyzer

Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...

7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 6:00 p.m.1 views

bento

This software is exprimental but we accept suggestions and contributions Bento Toolkit for PT and CTF A bento 弁当, bentō is a single-portion take-out or home-packed meal of Japanese origin. Bento Toolkit is a simple and minimal docker container for penetration testers and CTF players. It has the...

5.6AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/25 5:54 p.m.49 views

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

7.1AI score
SaveExploits0References1
NVD
NVD
added 2026/08/25 4:17 p.m.3 views

CVE-2026-79785

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/25 4:03 p.m.7 views

CVE-2026-79785 X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads

X-AnyLabeling's model downloader disabled TLS certificate verification. downloadwithretry in anylabeling/services/autolabeling/model.py built a context with ssl.createunverifiedcontext and passed it to urllib.request.urlopen, so neither the certificate chain nor the hostname was checked on any...

8.2CVSS
SaveExploits0References6
CVE
CVE
added 2026/08/25 4:03 p.m.6 views

CVE-2026-79785

X-AnyLabeling's model downloader disabled TLS certificate verification by calling ssl._create_unverified_context() in download_with_retry (within anylabeling/services/auto_labeling/model.py), so neither the certificate chain nor hostname was validated when fetching models over HTTPS. An attacker ...

8.2CVSS5.4AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/25 3:36 p.m.2952 views

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

5.7AI score
SaveExploits0References29
Kitploit
Kitploit
added 2026/08/25 12:34 p.m.267 views

aircrack-ng

Aircrack-ng Badges GitHub CI...

5.3AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/25 12:05 p.m.74 views

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

7.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 9:43 a.m.37 views

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

5.6AI score
SaveExploits0References1
NVD
NVD
added 2026/08/25 9:17 a.m.3 views

CVE-2026-77146

The extension's invitation controller fails to stop processing after redirecting on invalid input missing hash, non-existent, disabled, or deleted users, allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is...

8.3CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 9:00 a.m.5 views

EUVD-2026-65330

The extension's invitation controller fails to stop processing after redirecting on invalid input missing hash, non-existent, disabled, or deleted users, allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is...

8.3CVSS5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 7:38 a.m.110 views

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 7:06 a.m.22 views

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

5.7AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/25 6:21 a.m.242 views

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

5.4AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.34 views

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

7.5CVSS5.6AI score0.14847EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.63 views

Limit Login Attempts WordPress - Stored Cross-site Scripting

Limit Login Attempts WordPress plugin 4.0.50 contains a stored cross-site scripting caused by not escaping IP addresses controlled via headers like X-Forwarded-For before outputting them in reports, letting unauthenticated attackers execute scripts in admin context. id: CVE-2021-24657 info: name:...

6.1CVSS5.8AI score0.01582EPSS
SaveExploits2References2
Rows per page
Query Builder