Lucene search
+L

68775 matches found

Kitploit
Kitploit
added 2026/09/13 6:18 p.m.10 views

CVE-2023-32315-POC

CVE-2023-32315-POC CVE-2023-32315-Openfire-Bypass-Py Overview This code is a Python version POC for CVE-2023-32315. It performs a series of operations to verify whether the target website is affected by the CVE-2023-32315 vulnerability and attempts to execute certain operations on the affected...

8.6CVSS8AI score0.99999EPSS
SaveExploits15References1
Kitploit
Kitploit
added 2026/09/13 6:02 p.m.8 views

OSXAuditor

OS X Auditor OS X Auditor is a free Mac OS X computer forensics tool. OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 5:44 p.m.5 views

CVE-2022-46169

Cacti remoteagent.php Remote Command Execution Vulnerability CVE-2022-46169 Vulnerability Description Cacti is a server monitoring and management platform. A command injection vulnerability exists in versions 1.2.17 to 1.2.22. An attacker can bypass server-side validation via the X-Forwarded-For...

9.8CVSS8.4AI score0.99826EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/13 5:44 p.m.10 views

darwis-taxii

DARWIS TAXII A high-performance TAXII Trusted Automated eXchange of Indicator Information server written in Rust. Rust port of EclecticIQ OpenTAXII with full database compatibility. Features TAXII 1.x - Discovery, Poll, Inbox, Collection Management, Subscriptions TAXII 2.1 - Full REST API with...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 5:18 p.m.8 views

X-Recon

A utility for identifying web page inputs and conducting XSS scanning. Features: Subdomain Discovery: Retrieves relevant subdomains for the target website and consolidates them into a whitelist. These subdomains can be utilized during the scraping process. Site-wide Link Discovery: Collects all...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:16 p.m.53 views

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:08 p.m.8 views

CVE-2025-29927

CVE-2025-29927: Next.js Middleware Bypass Vulnerability This repository demonstrates the CVE-2025-29927 vulnerability in Next.js where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Vulnerability Details Next.js uses an internal header...

9.1CVSS7.3AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
added 2026/09/13 5:00 p.m.32 views

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install root@kitploit: $ pip install hsecscan Usage root@kitploit: $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:55 p.m.9 views

CVE-2022-24181

CVE-2022-24181 and CVE-2022-26616. both are probably same Open-journal-system-Vulnerability XSS via Host Header injection and Steal Password Reset Token of another user Step to reproduce: 1. Go to this site: https://who's-using-ojs-software.com 2. And capture this request in burp , and send to...

6.1CVSS6.3AI score0.0608EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 4:51 p.m.4 views

CVE-2014-1266-poc

OS X/iOS SSL Flaw POC Overview This repository contains some Go code that demonstrates the recently discovered SSL verification vulnerability in iOS and OS X. Apple Update Announcement Adam Langley's writeup Usage root@kitploit: $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd...

7.4CVSS7.7AI score0.05715EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/13 4:49 p.m.6 views

linux-4.1.15_CVE-2023-4128

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

6.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:36 p.m.7 views

CVE-2023-4549

CVE ID : CVE-2023-4549 Vulnerability Type : Cross-Site Scripting Description : The DoLogin Security plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 3.6 due to insufficient input sanitization and output escaping...

6.1CVSS7AI score0.00692EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 4:35 p.m.34 views

js-x-ray

!slsa...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 4:34 p.m.8 views

CVE-2023-51764-POC

based on https://github.com/duy-31/CVE-2023-51764 and https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text its just some poc port to python 3.x...

5.3CVSS5.9AI score0.02635EPSS
SaveExploits4References1
Kitploit
Kitploit
added 2026/09/13 4:30 p.m.8 views

transfer.sh

SECURITY WARNING IP filter and HTTP auth bypass via unauthenticated X-Forwarded-For header spoofing transfer.sh...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/13 4:24 p.m.6 views

monitor

BetterDB Monitor...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 3:23 p.m.7 views

X-force

IBM X-Force Exchange library | IBM Security X-FORCE Exchange library in Python 3. Search: threatactivities, threatgroups, malwareanalysis, collector and industries. For others applications. See ---|--- Install root@kitploit: pip3 install XForce Use Using you APIKEY make a basic authentication. Se...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:22 p.m.271 views

aircrack-ng

Aircrack-ng Badges GitHub CI...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 3:22 p.m.6 views

CVE-2025-29927

Next.js CVE-2025-29927 This repository contains a proof of concept for CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be exploited to bypass middleware checks such as authentication. Affected Versions Next.js 15.x 🧪 This project was tested with...

9.1CVSS7.3AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
added 2026/09/13 3:20 p.m.127 views

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

5.8AI score
SaveExploits0
Rows per page
Query Builder