Lucene search
+L
KitploitRecent

44506 matches found

Kitploit
Kitploit
added 2026/09/10 1:36 a.m.6 views

hawk

Hawk Hawk is a network and pentest utility that I developed so that I could perform different kinds of tasks using the same suite, instead of jumping from one tool to another. Currently, this script can perform a variety of tasks such as ifconfig , ping , traceroute , port scans including SYN, TC...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.11 views

CVE-2026-39376

CVE-2026-39376 CVE-2026-39376Infinite redirect loop DoS via meta-refresh chain Summary When parse fetches a URL that returns an HTML page containing a tag, it recursively calls itself with the redirect URL — with no depth limit, no visited-URL deduplication, and no redirect count cap. An...

7.5CVSS5.9AI score0.00328EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.178 views

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like and . It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the network through...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.6 views

cve-2024-21683-rce

cve-2024-21683-rce CVE-2024-21683 is a critical remote code execution RCE vulnerability affecting Atlassian's Confluence Server and Data Center. This vulnerability has a CVSS score of 8.3, placing it in the high-severity category. Attackers can exploit this vulnerability to execute remote code by...

8.8CVSS7.7AI score0.88267EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.5 views

exploit_playground

About This is where I will post analysis of Public Exploits, or some of my 1day exploits. Public exploit analysis Personally I think the best way to learn a public exploit is by understanding it line-by-line until I can understand the exploit to the fullest. I will post some of these...

9.3CVSS7.2AI score0.53337EPSS
SaveExploits28References7
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.5 views

react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

10CVSS7.6AI score0.99802EPSS
SaveExploits404
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.8 views

CVE-2026-34444

CVE-2026-34444 CVE-2026-34444Sandbox escape and RCE due to incomplete attributefilter enforcement in getattr/setattr...

10CVSS5.9AI score0.00613EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.17 views

CVE-2025-11391

Unauthenticated Blind SQL Injection in PPOM for WooCommerce = 33.0.15 This repository contains a Proof of Concept PoC for an unauthenticated time-based blind SQL Injection vulnerability in the "PPOM for WooCommerce" WordPress plugin, affecting versions up to and including 33.0.15. Vulnerability...

9.8CVSS5.9AI score0.00928EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.7 views

netgear-telenetenable

telnetenable.py Paul Gebheim Translated from the C source available from http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole Running: python telnetenable.py IP - The IP of your Netgear device, usually 192.168.1.1 MAC - The mac address should be the MAC address of the LAN po...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.9 views

CVE-2026-33752

CVE-2026-33752 CVE-2026-33752Redirect-based SSRF leading to internal network access in curlcffi Summary curlcffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to...

8.6CVSS5.9AI score0.00463EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.15 views

CVE-2025-32463

CVE-2025-32463 — Sudo 1.9.14 → 1.9.17 Local Privilege Escalation via chroot Exploit script demonstrating a local privilege escalation affecting certain Sudo 1.9.x releases CVE-2025-32463. Exploit reference: https://www.exploit-db.com/exploits/52352 Tested on: Ubuntu 24.04.2 LTS with sudo 1.9.16p2...

9.3CVSS7.5AI score0.59417EPSS
SaveExploits71
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.7 views

tomcat-cve-2026-34486

This repository does not have a README...

7.5CVSS7.5AI score0.98616EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.7 views

CVE-2026-29780

Path Traversal in Official Example Script Leading to Arbitrary File Write Summary The official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted fr...

5.5CVSS5.9AI score0.00237EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.8 views

CVE-2021-1732

CVE-2021-1732 Win32k Elevation Of Privileges Techniques inspired from: https://github.com/L4ys/CVE-2022-21882 https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732...

7.8CVSS7.7AI score0.78376EPSS
SaveExploits22References2
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.8 views

telnetd-cve-2026-24061

Youtube Thanks for the python exploit...

9.8CVSS8AI score0.97993EPSS
SaveExploits68References1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.4 views

OverThruster

OverThruster "I've been ionized, but I'm okay now." -Buckaroo Banzai. General Info OverThruster is a tool to generate sketches for Arduinos when used as an HID Attack. It was designed around devices with the ATMEGA32U4 chip, like the CJMCU-BEETLE, or the new LilyGo "BadUSB" devices popping up on...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.9 views

ExploiteameEsta

ExploiteameEsta CVE-2021-30937 vulnerability checking app What is this? This project is an application for iOS devices dedicated to iOS 15.0-15.1.1. You will be able to test whether the vulnerability mentioned above is compatible with your device or not. You will be shown several alerts and pop-u...

9.3CVSS7.6AI score0.17294EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.16 views

Apache-struts-cve-2024-53677

Apache Struts Remote Code Execution Vulnerability CVE ID: CVE-2024-53677 Youtube : Video PoC Credit : CVE-2024-53677-S2-067...

9.8CVSS8.3AI score0.78198EPSS
SaveExploits15References1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.7 views

CVE-2023-5043

CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution 1. Create Ingress can be created without Service and Pod root@kitploit: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: ingress-exploit annotations: kubernetes.io/ingress.class: "nginx"...

8.8CVSS7.9AI score0.02234EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.26 views

rpef

Router Post-Exploitation Framework Currently, the framework includes a number of firmware image modules: root@kitploit: 'Verified' - This module is confirmed to work and is stable. 'Unverified' - This module is believed to work or should work with little additional effort, but awaits being tested...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.8 views

CVE-2026-41940-Exploit-PoC

CVE-2026-41940 Exploit POC 1. Run the exploit script and specify the target root@kitploit: python3 exploit.py --target https://example.com:2087/ 2. Capture session and replay in Burp Suite Copy the whostmgrsession value generated by the script Open the target URL in Burp Suite’s browser Replace...

9.8CVSS8.5AI score0.98527EPSS
SaveExploits75
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.7 views

WebDavC2

WebDAVC2 LAST/CURRENT VERSION: 0.3 Author: Arno0x0x - @Arno0x0x WebDavC2 is a PoC of using the WebDAV protocol with PROPFIND only requests to serve as a C2 communication channel between an agent, running on the target system, and a controller acting as the actuel C2 server. The tool is distribute...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.8 views

CVE-2021-41773

CVE-2021-41773 Path Traversal for Apache 2.4.49 https://ubuntu.com/security/CVE-2021-41773 Affected base time: 22:49 06/10/2021 Usage root@kitploit: IP python3 CVE-2021-41773.py -i 10.10.10.10 -s List of ips python3 CVE-2021-41773.py -l /home/ac1d/Documents/code/python/CVE-2021-41773/ips.txt -s...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits164
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.6 views

CVE-2026-24061

CVE-2026-24061 Reproduction Steps Build the image root@kitploit: docker build -t telnetd-bypass . Start the container root@kitploit: docker run -it --rm \ --name telnetd-vuln \ --privileged \ -p 23:23 \ telnetd-bypass Send the payload root@kitploit: USER='-f root' telnet -a 127.0.0.1 23 Output...

9.8CVSS8.1AI score0.97993EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.10 views

Converto

Converto V2 Automated Kali Linux or Parrot OS Installer for VPS root@kitploit: Installing Kali linux or Parrot OS on VPS Server. Tested on Ubuntu. Tested on Debian. It also installs VNC Graphical / Non-Graphical VNC. Steps For Installing :- Video :- How to install IMAGE ALT TEXT HERE...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.8 views

CVE-2026-27636

Passive reconnaissance and fingerprinting tool for detecting FreeScout deployments and analyzing exposure related to CVE-2026-28289. This script focuses on safe infrastructure intelligence gathering rather than exploitation. It helps researchers and defenders understand how FreeScout instances ar...

10CVSS8.3AI score0.3112EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.9 views

CVE-2021-3156

CVE-2021-3156 Sudo Baron Samedit This repository is CVE-2021-3156 exploit targeting Linux x64. For writeup, please visit https://datafarm-cybersecurity.medium.com/exploit-writeup-for-cve-2021-3156-sudo-baron-samedit-7a9a4282cb31 Credit to Braon Samedit of Qualys for the original advisory. Files...

7.8CVSS7.3AI score0.99969EPSS
SaveExploits83
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.6 views

CVE-2025-58789

Sink: The getOrderParameters function leads to SQL Injection vulnerability in the $orderBy and $order variables. PoC...

7.6CVSS5.8AI score0.00355EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.6 views

awesome-password-cracking

Awesome Password Cracking In cryptanalysis and computer security, password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system in scrambled form. A common approach brute-force attack is to repeatedly try guesses for the password an...

5.9AI score
SaveExploits0References108
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.10 views

CVE-2026-30081

CVE-2026-30081 CVE-2026-30081 has been officially published by MITRE. Vulnerability Overview...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.5 views

CVE-2026-24061

CVE-2026-24061 - telnetd auth bypass What it's about Argument injection in telnetd from GNU InetUtils. Versions 1.9.3 to 2.7. CVSS 9.8. On the CISA KEV list since 26.01.2026, meaning it's actively exploited in the wild. The whole trick is that telnetd takes the value of the USER environment...

9.8CVSS8.2AI score0.97993EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.127 views

Adalanche

Adalanche Open Source Attack Graph Visualizer and Explorer Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.10 views

CVE-2025-58788

SINK: The searchProducts function does not validate input, leading to a SQL Injection vulnerability in the $term variable. The dropdownDataSearch function with $type= 'product' allows to control the $term variable while calling the searchProducts function. POC:...

7.6CVSS5.8AI score0.00371EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.14 views

CVE-2021-3279

CVE-2021-3279 https://www.cvedetails.com/cve/CVE-2021-3279/...

6.1CVSS6.1AI score0.00839EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.14 views

penelope

Penelope es un moderno manejador de shells para pentesters y jugadores de CTF. Proporciona una alternativa más capaz a los oyentes básicos de netcat, añadiendo actualización automática de PTY, gestión de sesiones, registro, transferencias de archivos y módulos auxiliares. Tabla de contenidos 📥...

6AI score
SaveExploits0References28
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.5 views

Keycloak_CVE-2026-18963_PoC

CVE-2026-18963 Keycloak reset-credentials bypass → unauthenticated account takeover CVSS 9.1 | Affected: Keycloak 26.0.0 – 26.7.1 Layout root@kitploit: CVE-2026-18963/ ├── cve202618963poc.py - PoC script Python 3.9+, stdlib only ├── README.md ├── docker-compose.yml - Lab environment └──...

9.1CVSS7.4AI score0.03177EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.10 views

CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909: MRCMS V3.1.2 - Unauthenticated Directory Enumeration CVE ID CVE-2026-29909 Description MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module. The /admin/file/list.do endpoint lacks authentication controls and proper input...

5.3CVSS6AI score0.00434EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.271 views

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

7.6AI score
SaveExploits0References11
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.18 views

CVE-2026-24516-DigitalOcean-RCE

CVE-2026-24516-DigitalOcean-RCE Critical Pre-Auth Root RCE CVSS 10.0 in DigitalOcean Droplet Agent up to v1.3.2 via Command Injection. CVE-2026-24516: Pre-Auth Root RCE in DigitalOcean Droplet Agent Overview A critical command injection vulnerability was discovered in the DigitalOcean Droplet Age...

8.8CVSS7.1AI score0.02502EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.6 views

tool-29489

Tool-29489 Overview 🔍: This tool is used to identify URLs with CVE-2023-29489 vulnerability. The tool uses payloads to identify the bug. Help menu of tool-29489: python main.py help URL inputfile outputfile -h or --help : To display help options. -u or --url : To input URL to check. -i or --input...

6.1CVSS6.7AI score0.65533EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.9 views

Log4jHorizon

Log4jHorizon Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more. Crossing the Log4j Horizon - A Vulnerability With No Return Code and README.md this time around are a little scatered. Updates coming! Why? Proof of concepts for this vulnerability are scattered and have ...

10CVSS7.5AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.5 views

CVE-2021-4034

CVE-2021-4034 Polkit's Pkexec CVE-2021-4034 Proof Of Concept and Patching Confirmed on fully patched Ubuntu 21.10 PoC Patching https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 Confirmed on...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.17 views

CVE-2026-2763-POC

Vulnerability The vulnerability arises from the implementation of the for-in syntax. The scope of a for-in loop is represented by a pair of bytecodes: JSOP::Iter and JSOP::EndIter. root@kitploit: CASEIter MOZASSERTREGS.stackDepth = 1; HandleValue val = REGS.stackHandleAt-1; JSObject iter =...

9.8CVSS7.8AI score0.00469EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.8 views

system_bt_A10_r33_CVE-2021-0474

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

10CVSS8.2AI score0.03357EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.8 views

copyfail

Overview Copy Fail CVE-2026-31431 is a logical vulnerability in the Linux kernel that allows a local unprivileged user to escalate privileges to superuser root. The vulnerability belongs to the Local Privilege Escalation LPE class, does not require complex exploitation conditions such as race...

7.8CVSS6.7AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/10 1:35 a.m.15 views

CVE-2026-31431.c

CVE-2026-31431.c This content is provided for educational purposes only. The author assumes no responsibility or liability for any errors or omissions in the content. All information is provided "as is" with no guarantees of completeness, accuracy, usefulness, or timeliness. Any action you take...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits242
Kitploit
Kitploit
added 2026/09/10 1:34 a.m.13 views

reconness

ReconNess Web App Why ReconNess? Well, we have seen a lot of bugbounty hackers organizing his recon using txt and doing a lot of bash scripts to filter the output to keep everything organized with the intention to focus only on the potentially vulnerable targets. But realistically this demands a...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:34 a.m.12 views

MCPwnfluence

MCPwnfluence — CVE-2026-27825 & CVE-2026-27826 Two critical vulnerabilities in mcp-atlassian, one of the most popular MCP servers in the ecosystem 4.4K+ GitHub stars, 4M+ downloads. Discovered by the team at Pluto Security. The Vulnerabilities...

9CVSS6.2AI score0.13632EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/10 1:34 a.m.10 views

KillChain

KillChain ?? Disclaimer: This project is intended strictly for educational and security research purposes. The author is not responsible for any misuse, damage, or illegal activity caused by this tool. Use only in isolated lab environments with explicit permission. Overview KillChain is a user-mo...

7.5CVSS6.2AI score0.00409EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/10 1:34 a.m.134 views

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

9.8CVSS6.5AI score0.07266EPSS
SaveExploits0References12
Total number of security vulnerabilities44506