Lucene search
+L
KitploitRecent

44557 matches found

Kitploit
Kitploit
added 2026/09/11 4:10 a.m.6 views

RansomwareSim

RansomwareSim Overview RansomwareSim is a simulated ransomware application developed for educational and training purposes. It is designed to demonstrate how ransomware encrypts files on a system and communicates with a command-and-control server. This tool is strictly for educational use and...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.34 views

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.7 views

nemesis

N E M E S I S - Crafting & Injection The Nemesis Project is designed to be a command line based, portable human IP stack for UNIX-like and Windows systems. The suite is broken down by protocol, and should allow for useful scripting of injected packets from simple shell scripts. The latest release...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.6 views

HatSploit

HatSploit Framework Modular penetration testing platform that enables you to write, test, and execute exploit code. About HatSploit | Installation |...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.57 views

keeweb

Password Manager KeeWeb Password Manager🔑 KeeWeb is a browser and desktop password manager which is capable of opening up existing KeePass database kdbx files, or creating new vaults to store your important credentials in...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.6 views

MITMf

MITMf Framework for Man-In-The-Middle attacks This project is no longer being updated. MITMf was written to address the need, at the time, of a modern tool for performing Man-In-The-Middle attacks. Since then many other tools have been created to fill this space, you should probably be...

5.8AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.6 views

CVE-2023-3897

CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

5.3CVSS6.1AI score0.03064EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.4 views

hacker-roadmap

This repository is an overview of what you need to learn penetration testing and a collection of hacking tools, resources and references to practice ethical hacking. Most of the tools are UNIX compatible, free and open source. Status This project has been terminated and archived. Content might be...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.7 views

CVE-2017-1000251_Exploit

This repository does not have a README...

8CVSS6.8AI score0.16181EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.4 views

SocialPwned

SocialPwned SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks like Instagram, Linkedin and Twitter to find the possible credential leaks in PwnDB or Dehashed and obtain Google account information via GHunt. The purpose of this tool is to...

6AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.4 views

CVE-2019-0708-Check-Device-Patch-Status

CVE-2019-0708-Vulnerability-Scanner Powershell script to run and determine if a specific device has been patched for CVE-2019-0708. This checks to see if the termdd.sys file has been updated appropriate and is at a version level at or greater than the versions released in the 5/14/19 patches. All...

10CVSS7.4AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.5 views

CVE-2026-42978-PoC-Research

CVE-2026-42978 PoC & Research — Windows Push Notifications Use-After-Free Race condition in Windows Push Notifications service WpnService that runs as NT AUTHORITY\SYSTEM. An attacker with local access can trigger a use-after-free during platform shutdown and potentially elevate privileges. CVE:...

7.8CVSS7.6AI score0.00246EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.11 views

CVE-2024-24919-Bulk-Scanner

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Security Gateway Information Disclosure Script based on and the credit goes to: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ This Python script scans lisy of URLs for CVE-2024-24919 vulnerability by sending specifi...

8.6CVSS7.8AI score0.99978EPSS
SaveExploits53References1
Kitploit
Kitploit
added 2026/09/11 4:10 a.m.19 views

awesome-wazuh

awesome-wazuh Curated list of Wazuh resources, tools, and integrations Wazuh is a free, open-source security monitoring platform for threat prevention, detection, and response. Contents Official Documentation Getting Started Setup Guides Deployment Docker Kubernetes Terraform / OpenTofu Ansible...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.5 views

CVE-2018-12598

CVE-2018-12598 CVE-2018-12598 Timeline ================ 2018-06-08: Discovered 2018-06-11: Retest staging environment 2018-06-12: Retest live environment 2018-06-19: Internal communication 2018-06-21: Vendor notification 2018-06-XX: Vendor feedback 2018-06-XX: Vendor feedback product will be...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.6 views

CVE-2022-24124

POC for CVE-2022-24124 Exploit Code for CVE-2022-24124 aka Casdoor SQL Injection Exploit Links: ExploitDB-50792 PacketStormSecurity Expected outcome: Dump SQL database version on host running Casdoor 1.13.1 Intended only for educational and testing in corporate environments. Exploit Usage...

7.5CVSS7.5AI score0.55295EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.5 views

CVE-2022-34265

CVE-2022-34265 PoC for CVE-2022-34265 Description An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and...

9.8CVSS6.8AI score0.73274EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.9 views

amt_auth_bypass_poc

Intel AMT authentication bypass example This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5689 vulnerability. It is essentialy a mitmproxy script that simply blanks an Authorization header "response" field. Example usage: root@kitploit: mitmdump -p 8080 -dd...

10CVSS7.5AI score0.92189EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.8 views

themida-devirt

Themida/CodeVirtualizer Devirtualizer Example This project demonstrates the effect of devirtualizing code protected by Themida or CodeVirtualizer. Below, you can see a simple example showing the code before virtualization and the code after devirtualization side by side. Before Virtualization|...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.76 views

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.5 views

Enigma

Enigma Multiplatform payload dropper. VIDEO DEMO CLONE root@kitploit: git clone https://github.com/UndeadSec/Enigma.git RUNNING root@kitploit: cd Enigma root@kitploit: python enigma.py or python3 enigma3.py DISCLAIMER TO BE USED FOR EDUCATIONAL PURPOSES ONLY The use of the Enigma is COMPLETE...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.8 views

luckystrike

luckystrike A PowerShell based utility for the creation of malicious Office macro documents. To be used for pentesting or educational purposes only. Getting Started 1. Read this: http://www.shellntel.com/blog/2016/9/13/luckystrike-a-database-backed-evil-macro-generator. 2. Read the wiki! 3. Make...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.35 views

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.8 views

next-cve-2025-66478

NextJS CVE-2025-66478 Scans all projects vulnerable to CVE-2025-66478 projects in the current working directory and reports them. Learn more about CVE-2025-66478 Warning This script doesn't fix any vulnerabilities. This is just for locating them. Please refer to this article to learn more about t...

7.4AI score
SaveExploits112
Kitploit
Kitploit
added 2026/09/11 4:09 a.m.10 views

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler Use After Free 1. PDF Format Background 2. Encryption Dictionaries 3. Vulnerability Details 4. ASLR and DEP Bypass 5. Environment Details 6. Trigger 7. Author PDF Format Background PDF is a file format used to represent documents. A pdf is made of multiple...

9.8CVSS7.9AI score0.04739EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.8 views

TrickDump

TrickDump TrickDump dumps the lsass process without creating a Minidump file, generating instead 3 JSON and 1 ZIP file with the memory region dumps. In three steps: Lock : Get OS information using RtlGetVersion. Shock : Get SeDebugPrivilege privilege with NtOpenProcessToken and...

6.4AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.8 views

AutoLocalPrivilegeEscalation

AutoLocalPrivilegeEscalation An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically This script is created due to Hackademics, there are so much possible exploit for that version of kernel, as a rookie OSCP student, I am not able to fin...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.8 views

CVE-2023-39711

This repository does not have a README...

6.1CVSS6.3AI score0.0064EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.5 views

text4shell-exploit

text4shell-exploit A custom Python-based proof-of-concept PoC exploit targeting Text4Shell CVE-2022-42889, a critical remote code execution vulnerability in Apache Commons Text versions 1.10. This exploit targets vulnerable Java applications that use the StringSubstitutor class with interpolation...

9.8CVSS7.5AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.6 views

c-sentinel

C-Sentinel Semantic Observability for UNIX Systems A lightweight, portable system prober written in C that captures "system fingerprints" for AI-assisted analysis of non-obvious risks. Features auditd integration, explainable risk scoring, and a live web dashboard with enterprise-grade multi-user...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.6 views

vss-fr2system

vss-fr2system Two small tools that turn an arbitrary file read bug on Windows into a SYSTEM shell. vssfreeze/ — creates a Volume Shadow Copy as a standard user , then holds it open so you have time to read the SAM/SECURITY/SYSTEM hives out of it fr2system/ — takes the hives you copied out, decryp...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.4 views

CVE-2020-7471

CVE-2020-7471 This repository provides the environment and POC for CVE-2020-7471 Potential SQL injection via StringAggdelimiter vulnerability. Affected Django versions 1.11 to 1.11.28 exclusive 2.2 to 2.2.10 exclusive 3.0 to 3.0.3 exclusive Before downloading and using, the following operations a...

9.8CVSS6.6AI score0.65575EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.9 views

probequest

========== ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Toolkit allowing to sniff and display the Wi-Fi probe requests passing nearby your wireless interface. Probe requests are sent by a station to elicit...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.6 views

MacroShop

MacroShop Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details. 1. macrosafe.py Generates safe for VB inclusion into an excel spreadsheet. Requires a batch file generated by Veil-Evasion powershell payloads. To...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.6 views

cve-2022-31749

CVE-2022-31749 by 1vere$k Simple PoC-checker for CVE-2022-31749 by 1vere$k. It exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there...

6.5CVSS7.3AI score0.01264EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/11 4:08 a.m.11 views

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 nuclei template Joomla CVE-2023-23752 - a request parameter breaks through the Rest API Affected version ​ Joomla roughly has three routing entries, which are 1. index.php in the root directory users access articles 2. administrator/index.php in the root directory...

5.3CVSS6.9AI score0.99827EPSS
SaveExploits43
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.11 views

SkyProfile

SkyProfile SkyProfile is a PyQt5 desktop app for querying ADSBexchange globe history for single or multiple aircraft, detecting multi-leg flights, and exporting KML/CSV/JSON/Excel with rich analytics airports, routes, time buckets, callsigns, FAA metadata. Key Features Date-range query by ICAO he...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.3 views

CVE-2023-38646

Metabase Pre-Auth RCE CVE-2023-38646 POC This is a python script which exploits the remote code execution vulnerability of Metabase's login software. It allows us to execute arbitrary commands on the server before authentication. Vulnerable versions are Metabase open source before 0.46.6.1 and...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.7 views

Veto

Veto An open source VirusTotal client for Android Free and open source. Bring your own VirusTotal API key to scan files, links, and installed applications against over 70 engines, built with a Material 3 interface. No accounts, no tracking, no ads. What is Veto? Veto is an Android client for...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.58 views

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

5.4AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.10 views

Wordpresscan

Wordpresscan A simple Wordpress scanner written in python based on the work of WPScan Ruby version, some features are inspired by WPSeku. Disclaimer root@kitploit: The authors of this github are not responsible for misuse or for any damage that you may cause! You agree that you use this software ...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.3 views

Salamandra

Salamandra Spy Microphone Detection Tool Salamandra is a tool to detect and locate spy microphones in closed environments. It find microphones based on the strength of the signal sent by the microphone and the amount of noise and overlapped frequencies. Based on the generated noise it can estimat...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.407 views

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIM generates GPS baseband signal data streams, which can be converted to RF using software-defined radio SDR platforms, such as ADALM-Pluto, bladeRF, HackRF, and USRP. Windows build instructions 1. Start Visual Studio. 2. Create an empty project for a console application. 3. ...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.7 views

CVE-2021-21974_vuln_dectection

CVE-2021-21974 Vulnerability Detector A Python-based security tool for detecting CVE-2021-21974 vulnerability in SLP Service Location Protocol implementations, specifically targeting VMware ESXi systems. This tool performs safe, non-exploitative detection by analyzing SLP service responses and...

8.8CVSS8.2AI score0.45063EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.5 views

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

2.3CVSS5.7AI score0.00597EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.5 views

CVE-2025-28346

Vulnerability Type SQL Injection Description A Time-Based Blind SQL Injection vulnerability was discovered in Ticket-Booking-App - 1.0 that allows an attacker to execute arbitrary SQL queries on the underlying database. The vulnerable parameter does not properly sanitize user-supplied input,...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.17 views

CVE-2025-3464-AsIO3-LPE

CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Unprivileged LPE exploit for ASUS AsIO3.sys - TOCTOU auth bypass + PreviousMode decrement CVE-2025-3464: AsIO3.sys Local Privilege Escalation This exploit will only work on Windows 11 22H2 or earlier. Microsoft fixed PreviousMode hijinks. Local privilege...

8.4CVSS8.3AI score0.00584EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.7 views

apxutil

A tool to manipulate Schneider Electric PLC archive files This tool can extract and reassemble PLC "archive" files, used by several Schneider Electric PLC:s, including at least M580, M340 and Quantum. The archive files with an extension of .sta are really a zip archive containing a few files...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.4 views

CVE-2023-35636

CVE-2023-35636 Microsoft Outlook Information Disclosure Vulnerability leak password hash - Expect Script POC CVE-2023-35636 an exploit of the calendar sharing function in Microsoft Outlook, whereby adding two headers to an email directs Outlook to share content and contact a designated machine...

6.5CVSS7.5AI score0.17697EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/11 4:07 a.m.7 views

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 Follina POC Host exploit.html on localhost, port 80. Open the docx to pop calc. To change the remote address the doc points to, open in 7Z and edit word\rels\document.xml.rels to point to a new location. YOU MUST keep the exclamation mark. It will literally not run i...

9.3CVSS7.7AI score0.99234EPSS
SaveExploits63
Total number of security vulnerabilities44557