Lucene search
+L
KitploitRecent

44506 matches found

Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’4 views

CVE-2024-29269

CVE-2024-29269 Which allows unauthenticated OS command execution on TLR-2005KSH routers. This exploit leverages the vulnerability to execute arbitrary commands on the affected routers. Dork ZoomEye :- title:"Login to TLR-2005KSH" Source:...

8.8CVSS6.9AI score0.06294EPSS
SaveExploits8
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

CVE-2019-17124

Exploit Title: KRAMER VIAware 2.5.0719.1034 - Remote Code Execution Date: 2019-10-02 Author: Andrew Hess Software Link: https://www.kramerav.com/us/product/viaware Version: 2.5.0719.1034 CVE: CVE-2019-17124 History 2019.10.02 - Vulnerability discovered 2019.10.02 - Initial contact with the vendor...

10CVSS8.2AI score0.2254EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

exfil-scan

exfil-scan Scan LLM outputs and AI-generated content for data exfiltration signals before they reach users, logs, or downstream systems. 1 Why exfil-scan exists Modern LLM applications routinely process sensitive prompts, internal documents, API responses, and user data. That creates a new securi...

9.3CVSS8.5AI score0.07421EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

socks5

socks5 Socks5/Socks5h server and client This project is to add protocol support for the Bridge, or it can be used alone Usage API Documentation Example Support for the CONNECT command Support for the BIND command Support for the ASSOCIATE command License Licensed under the MIT License. See LICENS...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

geowifi

πŸ“‘πŸ’˜πŸŒŽ | geowifi Search WiFi geolocation data by BSSID and SSID on different public databases. πŸ’Ύ Databases Wigle| Apple| Google| Milnikov ---|---|---|--- WifiDB| Combain| Freifunk Carte| ❌ DiscontinuedOpenWifi βœ”οΈPrerequisites Python3. In order to display emojis on Windows , it is recommended to...

6AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

snitch

snitch a friendlier ss / netstat for humans. inspect network connections with a clean tui or styled tables. install homebrew root@kitploit: brew install snitch thanks to @bevanjkay for adding snitch to homebrew-core go root@kitploit: go install github.com/karol-broda/snitch@latest nixpkgs...

6AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

follina_cve_2022-30190

follinacve2022-30190 A proof of concept to CVE-2022-30190 follina. root@kitploit: usage: exploit.py -h -u HOSTIP -p PORT -o OFILE -m server, create -s script | scriptfile.ps1 -r HOSTIP:PORT Follina Exploitation Toolkit options: -h, --help show this help message and exit -u HOSTIP, --host HOSTIP...

9.3CVSS7.8AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

cve-2022-22965

Spring4Shell - CVE-2022-22965 Build let's clone the repository, build and run the container root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc check...

9.8CVSS7.6AI score0.99638EPSS
SaveExploits105
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’7 views

CVE-2019-16405.rb

This repository does not have a README...

9CVSS7.3AI score0.27002EPSS
SaveExploits3
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

docker-CVE-2019-11043

Docker image and commands to check CVE-2019-11043 CVE: CVE-2019-11043 Description: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FC...

9.8CVSS7.5AI score0.9978EPSS
SaveExploits57References1
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

dirtyclone-exploit

DirtyClone Exploit Framework CVE-2026-46331 β€” Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption Β· Affected kernels: ≀ 6.12.9 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ β•‘ β•‘ β•‘ | \ | | / | | β•‘ β•‘ | | | | | '| | | | | | | |/ | ' \ ...

7.8CVSS6.7AI score0.00583EPSS
SaveExploits13References3
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’6 views

phishcollector

PhishCollector PhishCollector is a research framework for collecting, analysing, and tracking phishing sites. It is intentionally designed as a starting point β€” the detection rules, technology signatures, wordlists, and plugins are all plain data structures that researchers are expected to read,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’106 views

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’14 views

ghidra-evm

MΓ³dulo Ghidra EVM En los ΓΊltimos aΓ±os, los ataques a contratos inteligentes desplegados en la cadena de bloques de Ethereum han resultado en una cantidad significativa de fondos robados debido a errores de programaciΓ³n. Dado que los contratos inteligentes, una vez compilados y desplegados, son...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/10 2:11 a.m.β€’5 views

nodriver

NODRIVER nodriver provides next level async webscraping and browser automation library for python with an easy interface which Just Makes Sense β„’ This is the official successor of the Undetected-Chromedriver python package. No more webdriver, no more selenium for docs click here Direct...

6AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’6 views

CVE-2018-16763

CVE-2018-16763 Exploit Title: fuel CMS 1.4.1 - Remote Code Execution Python3 script - πŸ’» This script was developed by h3x0v3rl0rd...

9.8CVSS8.1AI score0.82937EPSS
SaveExploits19
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’9 views

CVE-2024-53704

nxbender nxbender is a Proof-of-Concept PoC for establishing a VPN connection via NetExtender. This project is intended solely for educational and research purposes. Please only use the code in environments where you are explicitly authorized. Prerequisites Python 3.6+ recommended: Python 3.8 or...

9.8CVSS8.4AI score0.95132EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’3 views

CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - RCE Remote Code Execution Vulnerability in Out-of-Date Versions of Confluence Data Center and Server Advisory Release Date Tue, Jan 16 2024 01:00 EST Products: Confluence Data Center Confluence Server Affected Versions: 8.0.x 8.1.x 8.2.x 8.3.x 8.4.x 8.5.0-8.5.3...

10CVSS8.4AI score0.99984EPSS
SaveExploits34
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’40 views

gtfocli

GTFOcli GTFOcli it's a Command Line Interface for easy binaries search commands that can be used to bypass local security restrictions in misconfigured systems. Table of Contents Table of Contents Installation Usage Search for Unix binaries Search for Windows binaries Search using dockerized...

5.7AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’5 views

Dependency Scanning

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

6AI score
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’11 views

exploit-CVE-2016-6515

OpenSSH remote DOS Before 7.3 OpenSSH does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. This bug resides in auth-passwd.c in authpassword function. Attackers can exploit this issue to...

7.8CVSS7.2AI score0.58568EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’10 views

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler Use After Free 1. PDF Format Background 2. Encryption Dictionaries 3. Vulnerability Details 4. ASLR and DEP Bypass 5. Environment Details 6. Trigger 7. Author PDF Format Background PDF is a file format used to represent documents. A pdf is made of multiple...

9.8CVSS7.9AI score0.04739EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’6 views

fastfinder

FastFinder Una herramienta ligera de respuesta a incidentes para la caza de amenazas y el triage forense ✨ Descripción general FastFinder es una herramienta de respuesta a incidentes potente y ligera diseñada para profesionales de la ciberseguridad que realizan caza de amenazas, anÑlisis forense ...

5.8AI score
SaveExploits0References11
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’44 views

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

5.5AI score
SaveExploits0References11
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’5 views

jadx-ai-mcp

JADX-AI-MCP Part of Zin MCP Suite ⚑ Fully automated MCP server + JADX plugin built to communicate with LLM through MCP to analyze Android APKs using LLMs like Claude β€” uncover vulnerabilities, analyze APK, and reverse engineer effortlessly. ⭐ Contributors Thanks to these wonderful people for thei...

6.2AI score
SaveExploits0References21
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’6 views

CVE-2023-33669

CVE-2023-33669 Exploit Exploit for a stack overflow vulnerability in the Tenda AC8 router, specifically targeting firmware version USAC8V4.0siV16.03.34.06. Official product page. Emulation You can put 'prepare.sh' file in root directory of firmware and execute it. Also for RCE you have to setup...

9.8CVSS8.2AI score0.02089EPSS
SaveExploits2References1
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’4 views

CVE-2023-36163

Exploit Title: BuildaGate5library - Reflected Cross-Site Scripting XSS Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: None Version: 5 Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: An attacker needs to find the vulnerable parameter mc= and inject the JS code like: 'di...

6.1CVSS6.4AI score0.04126EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’4 views

CVE-2022-26134

CVE-2022-26134 -u URL, --url URL Target URL -c COMMAND, --command COMMAND Command -i LHOST, --lhost LHOST Reverse shell host address -p LPORT, --lport LPORT Reverse shell host port -f FILE, --file FILE Batch scan...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’11 views

vulnrepro-benchmark

VulnRepro A benchmark that checks if an AI model can actually review vulnerable code, or if it just sounds confident. Most security benchmarks ask one question: can the model find the bug? That is only half the job. The other half, the part that actually wears you down in real review work, is not...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’6 views

asus-bsitf-0-day-poc

POC - ASUS bsitf.sys Kernel Memory Mapping to Usermode CVE-2026-13585 Summary The ASUS bsitf.sys also distributed as AsusBSItf.sys kernel driver exposes IOCTL 0x222808 which allocates physically contiguous kernel memory of attacker-controlled size, maps it into the calling process's address space...

8.2CVSS8.1AI score0.00163EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:10 a.m.β€’7 views

CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING This PoC is entirely generated by AI. Usage: root@kitploit: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi An unpatched version of ffmpeg will crash when processing baseline.avi...

8.8CVSS7.1AI score0.01572EPSS
SaveExploits3
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’5 views

Hunting-Queries-Detection-Rules

KQL Sentinel & Defender queries KQL for Defender XDR, Microsoft Sentinel & other Microsoft Solutions The purpose of this repository is to share KQL queries that can be used by anyone and are understandable. These queries are intended to increase detection coverage through the logs of Microsoft...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’7 views

bluebox

Bluebox work in progress A collection of exploits for different VoIP products. Thanks to the Go Exploit Framework. If you ended up here looking for a VoIP pentesting solution, check out Sippts sippts-gui in Kali or SIPVicious. This project is more focused on the exploitation phase. Install...

8.6CVSS7.1AI score0.03636EPSS
SaveExploits8References4
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’6 views

CVE-2020-1472

CVE-2020-1472 Checker & Exploit Code for CVE-2020-1472 aka Zerologon Tests whether a domain controller is vulnerable to the Zerologon attack, if vulnerable, it will resets the Domain Controller's account password to an empty string. NOTE: It will likely break things in production environments eg...

10CVSS7.4AI score0.99389EPSS
SaveExploits76References3
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’4 views

CVE-2015-5119

CVE-2015-5119 A COOP like exploit...

10CVSS6.2AI score0.99344EPSS
SaveExploits7
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’4 views

CVE-2014-7911poc

CVE-2014-7911 POC for CVE-2014-7911 for Nexus5 Android 4.4.4r1 based on retme7 and auo, use different rop chain Info Usage launch this poc, click the β€œCVE-2014-7911” button, you will see a pwn.txt created by system user in /data:...

7.2CVSS7.4AI score0.24534EPSS
SaveExploits6
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’13 views

ShunyaNet-Sentinel

ShunyaNet Sentinel UPDATED: 03/02/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds e.g., breaking news, social media, sends them to an LLM for analysis, and delivers alerts and summary reports directly to the GUI and Slack at regular intervals. The project...

5.7AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’5 views

git-fsmonitor

This is a documented known issue, but I found this during my research & its pretty useful for RT/PT. Summary: The FSMonitor helper is executed by git on every command like git status, git diff, etc., hence git will blindly launch whatever path we specfic there. Our IDEs runs git status...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’8 views

AttackSurfaceManagement

ABOUT: Discover the attack surface and prioritize risks with our continuous Attack Surface Management ASM platform - Sn1per Professional. For more information, go to https://sn1persecurity.com. FEATURES: Attack Surface Discovery Easily discover the attack surface IPs, domain names, open ports, HT...

5.9AI score
SaveExploits0References17
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’5 views

sudo_inject

Linux Privilege Escalation by injecting process possessing sudo tokens Inject process that have valid sudo token and activate our own sudo token Introduction We all noticed that sometimes sudo doesn't ask us for a password because he remembers us. How does he remember us and how does he identifie...

6AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’8 views

poc-cve-2025-29927

Next.js Middleware Bypass CVE-2025-29927 Proof of Concept This repository contains a proof of concept POC for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware. πŸ“‹ Table of Contents 1. Running the POC Application 2...

9.1CVSS7.4AI score0.99225EPSS
SaveExploits59
Kitploit
Kitploit
β€’added 2026/09/10 2:09 a.m.β€’4 views

RayHunter-Web-Flasher

β—ˆ RayHunter Install Wizard Interactive step-by-step guide to flashEFF's Rayhunter IMSI catcher detector on an Orbic RC400L hotspot. Auto-detects your OS. πŸš€ Launch the Wizard πŸ‘‰Open the Install Wizard What is Rayhunter? Rayhunter is the Electronic Frontier Foundation's open-source tool for detectin...

6AI score
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/10 2:08 a.m.β€’8 views

cloudspy

CloudSpy This is a proof-of-concept web app built on top of Frida. To get started: root@kitploit: npm install node rel/server.js Then point your web browser at http://127.0.0.1:8000/...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:08 a.m.β€’7 views

mongoBuster

mongoBuster Hunt Open MongoDB instances! Features Worlds fastest and most efficient scanner Uses Masscan . Scans entire internet by default, So fire the tool and chill. Hyper efficient - Uses Go-routines which are even lighter than threads. Pre-Requisites - Go language sudo apt install golang...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:08 a.m.β€’4 views

RogueSliver

RogueSliver A suite of tools to disrupt campaigns using the Sliver C2 framework. This tool, its uses, and how it was created will be covered in depth on ACEResponder.com This tool is for educational purposes only...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/10 2:08 a.m.β€’14 views

airecon

AI-Powered Autonomous Penetration Testing Agent -orange.svg AIRecon is an autonomous penetration testing agent that combines a self-hosted Ollama LLM with a Kali Linux Docker sandbox , native Caido proxy integration , a structured RECON β†’ ANALYSIS β†’ EXPLOIT β†’ REPORT pipeline , and a real-time...

6.1AI score
SaveExploits0References8
Kitploit
Kitploit
β€’added 2026/09/10 2:08 a.m.β€’8 views

GhidraMCP

ghidraMCP ghidraMCP is an Model Context Protocol server for allowing LLMs to autonomously reverse engineer applications. It exposes numerous tools from core Ghidra functionality to MCP clients. https://github.com/user-attachments/assets/36080514-f227-44bd-af84-78e29ee1d7f9 Features MCP Server +...

5.8AI score
SaveExploits0References8
Kitploit
Kitploit
β€’added 2026/09/10 2:08 a.m.β€’5 views

system_prompts_leaks

As seen in The Washington Post: See the hidden rules behind AI. Then use them to rewrite this article. May 11, 2026 System Prompts Leaks The purpose of this repo is to document the System Prompt instructions for all the AI chatbots out there - Claude, ChatGPT, Gemini etc. Recently Updated What|...

5.8AI score
SaveExploits0References20
Kitploit
Kitploit
β€’added 2026/09/10 2:08 a.m.β€’8 views

CVE-2022-40881

CVE-2022-40881 fofa root@kitploit: body="SolarView Compact" && title=="Top" Disclaimer This tool is intended only for legally authorized enterprise security building activities. If you need to test the usability of this tool, please set up your own target environment. When using this tool for...

9.8CVSS8.2AI score0.29722EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/10 2:08 a.m.β€’12 views

easywall

easywall Your firewall. Your rules. No surprises. Live demo Β· Documentation Β· Changelog nftables through a web interface that cannot lock you out: every apply reverts itself unless you confirm it. !The easywall dashboard: firewall status with acceptance state, pending changes and last apply; tile...

5.9AI score
SaveExploits0References10
Total number of security vulnerabilities44506