Lucene search
+L
KitploitRecent

44557 matches found

Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’11 views

EternalBlueC

EternalBlueC EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit Contains DoublePulsar EternalBlue/MS17-010 vulnerability detector DoublePulsar detector DoublePulsar Upload DLL Doublepulsar Upload Shellcode DoublePulsar Upload DLL with SMB Structure Doublepulsar Upload Shellcode wi...

5.8AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’190 views

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

6AI score
SaveExploits0References7
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’10 views

windows

Windows...

5.3AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’8 views

gitoops

GitOops! 😱 all paths lead to clouds GitOops is a tool to help attackers and defenders identify lateral movement and privilege escalation paths in GitHub organizations by abusing CI/CD pipelines and GitHub access controls. It works by mapping relationships between a GitHub organization and its CI/...

6AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’9 views

tarian

Tarian We want to maintain this as open-source to fight against the attacks on our favorite Kubernetes ecosystem. We can fight threats together as a community, by continuous contribution. Protect your Applications running on Kubernetes from malicious attacks by pre-registering your source code...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’6 views

CVE-2024-21413-Microsoft-Outlook-RCE-Exploit

CVE-2024-21413-Microsoft-Outlook-RCE-Exploit CVE-2024-21413 Microsoft Outlook RCE Exploit...

9.8CVSS8AI score0.9466EPSS
SaveExploits24
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’7 views

CVE-2024-4040

CVE-2024-4040 Introduction Recently, I came across this vulnerability and found it quite interesting. I read the following articles and wrote a brief exploit. https://y4tacker.github.io/2023/12/10/year/2023/12/CrushFTP-Unauthenticated-Remote-Code-Execution-CVE-2023-43177/...

10CVSS7.9AI score0.99539EPSS
SaveExploits27References3
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’10 views

quantumslop

Shor's Algorithm for ECDLP β€” Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’6 views

Spring4Shell-POC

Spring4Shell PoC Application This is a dockerized application that is vulnerable to the Spring4Shell vulnerability CVE-2022-22965. Full Java source for the war is provided and modifiable, the war will get re-built whenever the docker image is built. The built WAR will then be loaded by Tomcat...

9.8CVSS7.5AI score0.99638EPSS
SaveExploits105References1
Kitploit
Kitploit
β€’added 2026/09/11 4:52 a.m.β€’8 views

DetectionLabELK

DetectionLabELK DetectionLabELK is a fork from Chris Long's DetectionLab with ELK stack instead of Splunk. Description: DetectionLabELK is the perfect lab to use if you would like to build effective detection capabilities. It has been designed with defenders in mind. Its primary purpose is to all...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’7 views

Hack-Captive-Portal

Hack-Captive-Portal This script helps to pass through the captive portals in public Wi-Fi networks. It hijacks IP and MAC from somebody who is already connected and authorized on captive portal. Installation and usage You need sipcalc and nmap for this script. Then download .sh script and run it...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’10 views

avscript

Avast Antivirus JavaScript Interpreter NOTE: On 03/11/2020 Avast announced they had decided to disable this interpreter globally! The main Avast antivirus process is called AvastSvc.exe, which runs as SYSTEM. That service loads the low level antivirus engine, and analyzes untrusted data received...

6AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’4 views

vbull

vBulletin Mass Exploit CVE-2019-16759 Alert! This tool was made for penetration testing CVE-2019-16759. We are not responsible for errors made by users of this tool. Installation and usage: $ pkg install git python2 $ pip2 install requests $ git clone https://github.com/psychoxploit/vbull $ cd...

9.8CVSS8.4AI score0.99728EPSS
SaveExploits28References1
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’5 views

wwwgrep

WWWGrep OWASP Foundation Web Respository Author: Mark Deen & Aditi Mohan Introduction WWWGrep is a rapid search β€œgrepping” mechanism that examines HTML elements by type and permits focused single, multiple file based URLs and recursive with respect to root domain or not searches to be performed...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’5 views

PyCk

PyCk For complete details please take a look at the wiki. Installation git clone https://github.com/Naategh/PyCk.git cd PyCk pip3 install -r requirements.txt Install via docker git clone https://github.com/Naategh/PyCK.git docker build . Requirements Python 3.5 Roadmap This is an educational...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’8 views

CVE-2022-22947_exp

CVE-2022-22947-exp CVE-2022-22947 Exploit script Use root@kitploit: python3 CVE-2022-22947.py Example: python3 CVE-2022-22947.py http://127.0.0.1:8080 "cat /etc/passwd"...

10CVSS7AI score0.98253EPSS
SaveExploits54
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’6 views

https-everywhere

Update on HTTPS Everywhere ⚠️This project is no longer being maintained or updated. Please uninstall and direct users to the advice below to switch to HTTPS by default natively. You no longer need HTTPS Everywhere to set HTTPS by default! Major browsers now offer native support for an HTTPS only...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’6 views

CVE-2025-27636-Apache-Camel-PoC

Apache Camel CVE-2025–27636 & CVE-2025-29891 PoC CVE-2025–27636 and CVE-2025-29891 are vulnerabilities in Apache Camel that affect versions: 4.10.0-4.10.1, 4.8.0-4.8.4, 3.10.0-3.22.3. Exploitation of these vulnerabilities can enable attackers to execute internal Camel methods. The following is a...

5.6CVSS6.9AI score0.81126EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’8 views

Satellian-CVE-2020-7980

Satellian-CVE-2020-7980 Satellian is a PoC script that shows RCE vulnerability over Intellian Satellite controller Intellian Aptus Web. The following script will try to list all the binaries in the system and afterwards will allow the tester to interact directly with the server usually as root. P...

10CVSS8.2AI score0.82544EPSS
SaveExploits7
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’10 views

Boucle-framework

Boucle Claude Code hooks that actually enforce your rules. 7 standalone hooks, plus enforce-hooks for CLAUDE.md policy, audit tooling, 1,900+ tests, and a searchable Claude Code gaps corpus with severity ratings and workarounds. Quick links: Check your setup Β· Install hooks Β· Known limitations Β·...

6.1AI score
SaveExploits0References74
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’22 views

scapy

Scapy Scapy is a powerful Python-based interactive packet manipulation program and library. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/11 4:51 a.m.β€’10 views

CVE-2023-27372-POC

CVE-2023-27372-POC Overview This code is a Python POC Proof of Concept for detecting whether a target website has the CVE-2023-27372 vulnerability. You can run this code by providing a single URL or a text file containing multiple URLs. Affected version: SPIP "; Features Check whether the target...

9.8CVSS8.2AI score0.99682EPSS
SaveExploits23
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’4 views

DakshSCRA

Daksh SCRA Source Code Review Assist root@kitploit: Author: - Debasis Mohanty [email protected] - Twitter / X: @coffeensecurity - www.coffeeandsecurity.com About Daksh SCRA Daksh SCRA Source Code Review Assist is built to enhance the efficiency of the source code review process, providing a...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’7 views

cve-2019-6453-poc

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument list, an attacker is...

8.1CVSS7.6AI score0.54292EPSS
SaveExploits8
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’7 views

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all firmware versions prior to 1.1.16 Build 211209 Rel. 37726N due to insufficient checks on user input in uhttpd, which is one of the main binaries of...

10CVSS8.3AI score0.72376EPSS
SaveExploits11References2
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’4 views

CVE-2025-56605

CVE-2025-56605 XSS Cross-Site Scripting Vulnerability CVE-2025-56605 β€” Reflected XSS in Event Management System 1.0 Description: A reflected Cross-Site Scripting XSS vulnerability exists in register.php of PuneethReddyHC/event-management 1.0. The mobile POST parameter is improperly validated and...

5.4CVSS5.9AI score0.00189EPSS
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’7 views

below-log-race-poc

below-log-race-poc CVE-2025-27591 Exploit Below privilege escalation Description This repository contains a proof-of-concept exploit for CVE-2025-27591 , a privilege escalation vulnerability in the below utility. The issue arises because below mishandles log files under /var/log/below/, allowing...

6.8CVSS7.2AI score0.00364EPSS
SaveExploits23
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’35 views

gokart

GoKart - Go Security Static Analysis GoKart is a static analysis tool for Go that finds vulnerabilities using the SSA single static assignment form of Go source code. It is capable of tracing the source of variables and function arguments to determine whether input sources are safe, which reduces...

6.3AI score
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’8 views

CVE-2020-13885

Exploit Title: Citrix Workspace app before 1912 for Windows - Privilege Escalation 1 Date: 2020-06-07 Author: Andrew Hess Software Link: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bulletin:...

7.8CVSS7.4AI score0.0058EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’5 views

CVE-2022-1077

CVE-2022-1077 Description A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely an...

7.5CVSS7AI score0.0251EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’6 views

sentinel-cve

πŸ›‘οΈ Sentinel β€” CVE Explainer CLI "Does this CVE even affect me?" β€” answered in seconds, not hours. Sentinel takes a CVE ID, fetches data from NVD, OSV.dev, and MITRE, then uses Claude to produce a clear, actionable 5-section vulnerability briefing. Install root@kitploit: cd sentinel/ pip install -e...

10CVSS8.4AI score0.85974EPSS
SaveExploits41
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’4 views

CVE-2026-29923

CVE-2026-29923 - Local Privilege Escalation Attack via pstrip64.sys Disclaimer: This code is provided for educational and defensive research purposes only. It was written to further the understanding of kernel exploitation and help defenders protect against similar vulnerabilities. Any...

7.8CVSS7.4AI score0.00135EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’10 views

GeoServer-Tools-CVE-2024-36401

GeoServer-Tools-CVE-2024-36401 CVE-2024-36401 Graphical Exploitation Tool, supports exploitation across various JDK versions, as well as echo and memory shell implementation. Affected versions: GeoServer 2.23.6 2.24.0 = GeoServer 2.24.4 2.25.0 = GeoServer 2.25.2 Recently during HW Red/Blue team...

9.8CVSS8AI score0.99813EPSS
SaveExploits26References1
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’7 views

RawHive

RawHive RawHive is a Cobalt Strike BOF for pulling selected Windows registry hives directly from a raw NTFS volume. It skips the normal file APIs, walks NTFS metadata to find the target file records, and copies the bytes straight from disk. It currently looks for: C:\Windows\System32\config\SAM...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’30 views

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

5.9AI score
SaveExploits0References11
Kitploit
Kitploit
β€’added 2026/09/11 4:50 a.m.β€’6 views

cve-2023-31070

This repository does not have a README...

7.2AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’9 views

nextjs-middleware-bypass-demo

CVE-2025-29927 Demo Original writeup: https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware Setup First, run the development server: root@kitploit: npm i npm run dev Open http://localhost:3000 with your browser to see the result. Trying out the bypass curl -I...

9.1CVSS7.5AI score0.99225EPSS
SaveExploits59References1
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’4 views

mitmengine

MITMEngine DEPRECATION NOTICE: This software is no longer maintained. The goal of this project is to allow for accurate detection of HTTPS interception and robust TLS fingerprinting. This project is based off of The Security Impact of HTTPS Interception, and started as a port to Go of their...

6.1AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’7 views

Umay

IoT Malware Similarity Analysis Platform View Demo Table of contents About The Project Current features Getting Started Prerequisites Installation Create your own dataset Contributing License About The Project This project provides IoT malware similarity analysis based on shared codes. It helps t...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’6 views

CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This is a proof of concept for a Server Side Template Injection SSTI & Local File Inclusion LFI vulnerability in CrushFTP. Features Taking leverage of Critical Severity Vulnerabilities in CrushFTP servers through Server Side Template Injectio...

10CVSS7.5AI score0.99539EPSS
SaveExploits22
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’4 views

IronPE

IronPE - Minimal Windows PE manual loader written in Rust. Rust PE Loader / Manual Mapping Implementation IronPE is a minimal Windows PE manual loader written in Rust for both x86 and x64 PE files. This project is a Rust reimplementation of my previous project dotNetPELoader , which implemented a...

6AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’4 views

Horn3t

Horn3t 🐝 - Better Subdomain Reconnaissance Recon your targets at blazing speed Enhance your productivity by focusing on interesting looking sites Enumerate critical sites immediately Sting your target Horn3t is your Nr 1 tool for exploring subdomains visually. Building on the great Sublist3r...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’9 views

domain-locker

Domain Locker The Central Hub for all your Domain Names 🌐domain-locker.com Contents About Screenshot Features Live Demo Get Started Domain-Locker.com Self-Hosting Developing App Setup Architecture Contributing Attributions License About The aim of Domain Locker, is to give you complete visibility...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’4 views

Cowrie and Grafana Honeypot using Terraform on DigitalOcean

Cowrie & Grafana Honeypot using Terraform on DigitalOcean Demo Video Table of Contents Table of Contents System Overview Technologies Project Directory Structure Hardware Requirements Installation & Setup Terraform State Management CI/CD Pipeline System Architecture Observations Usage Project...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’9 views

Bugs-feed

Bug's feed Bug's feed is a local hosted portal where you can search for the latest news, videos, CVEs, vulnerabilities... It's implemented as a PWA application so you can get rid of the explorer and use it as a desktop application. Navigate through different tabs and take a look to the latest bug...

6AI score
SaveExploits0References8
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’7 views

CVE-2025-65318-and-CVE-2025-65319

PoC for CVE-2025-65318 and CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of bo...

9.1CVSS7.3AI score0.00555EPSS
SaveExploits3References1
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’6 views

WinRAR-CVE-2025-8088-PoC-RAR

WinRAR-CVE-2025-8088-PoC-RAR WinRAR 0day CVE-2025-8088 PoC RAR Archive Place the MyResumefinal.rar in the Downloads Directory and extract using "Extract to MyResumefinal" or from the UI using the Vulnerable WinRAR for now to run the exploit! : you'll see a VBScript named:...

8.8CVSS7.6AI score0.94551EPSS
SaveExploits35
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’7 views

CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 & CVE-2023-2640 : Privilege escalation Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640. TOTALLY STOLE IT FROM https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 PLEASE RETWEET THE ORIGINAL SOURCE I just wanted to...

7.8CVSS7.2AI score0.15199EPSS
SaveExploits14
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’7 views

SharpExchangePriv

SharpExchangePriv Description A C implementation of PrivExchange by @dirkjan. Kudos to @g0ldenGunSec, as I relied on his code. It was tested against Exchange 2016. Compile Instructions SharpExchangePriv has been built against .NET 3.5 and is compatible with Visual Studio 2017. Simply open the...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 4:49 a.m.β€’132 views

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

5.8AI score
SaveExploits0References1
Total number of security vulnerabilities44557