prithvi

Prithvi A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3...

network-attacker

Network-Attacker network-attacker V0.1 is a Wifi Stress Testing Bash Script Program Based on Mdk3 Beacon Flooding & Deauthentication Attack Created To Help Beginners And even Professionals For a beacon Flooding Or Deauthentication Attack On Networks Installation root@kitploit: sudo apt-get instal...

InfoHound

InfoHound - OSINT tool for domain profiling During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later help him to identify possible ways to get in an organization. InfoHound performs passive analysis techniques which do not...

Papers

This repository is intended to host my research papers. Put it on watch if you would like to read more from me. Bypassing XSS Detection Mechanisms Download PDF A Phonetic Approach to Calculate Linguistic Information in Text Download PDF...

CVE-2025-63498

Stored XSS in cookie Alinto/SOGo Researchers: Daniil Khomichenok, Alexander Klimenko Affected Versions var cookieUsername = "[email protected]'123'"; var language = 'English'; var loginHint = '' Code of login remember set-cookie which accepts XSS injections as a paramteter value:...

CVE-2018-8120

This repository does not have a README...

nuclei-CiscoRV320Dump-CVE-2019-1653

Cisco Router Configuration Exposure Vulnerability Vulnerability Description This repository details the exploitation process of a vulnerability in certain Cisco routers that allows exposure of the config.exp configuration file via an accessible public URL. This file may contain sensitive...

CVE-2025-22652

CVE-2025-22652 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name Payment Forms for Paystack Vulnerable version = 4.0.1 Component slug payment-forms-for-paystack Component link https://wordpress.org/plugins/payment-forms-for-paystack/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class...

MS_T120

MST120 CVE-2019-0708 make the poc step by step, day by day https://docs.microsoft.com/en-us/openspecs/windowsprotocols/ms-rdpbcgr/5073f4ed-1e93-45e1-b039-6e30c385867c...

CVE-2023-2640-CVE-2023-32629

CVE-2023-2640-CVE-2023-32629...

MCPDebugger

Fatmike's MCP Debugger Server Introduction This project is a self-made, lightweight MCP Debugger Server developed for learning and experimentation. The MCP Debugger Server exposes debugger functionality as MCP tools, enabling external MCP clients to control execution, inspect memory, and analyze...

CVE-2023-47246-EXP

Vulnerability Details 1. fofa: root@kitploit: body="sysaid-logo-dark-green.png" || title="SysAid Help Desk Software" || body="Help Desk software by SysAid" 2. Affected versions: SysAid Server23.3.36 Vulnerability Recurrence 1. Execute the script: root@kitploit: git clone...

camoufox

Camoufox Camoufox is an open source anti-detect browser built for webscraping & AI agents. 🦊 ⚠️ This project is under development. It may not be suitable for stable production use. ⚠️ !NOTE All of the latest documentation is available atcamoufox.com. !NOTE Browser development is active at...

Digisol-DG-GR1321-s-Password-Storage-in-Plaintext-CVE-2024-4232

Digisol-DG-GR1321-s-Almacenamiento-de-Contraseña-en-Texto-Plano-CVE-2024-4232...

CVE-2023-2591

CVE-2023-2591: Stored HTML Injection in Item Label in Teampass 3.0.6 - M Nadeem Qazi I recently identified a security vulnerability in nilsteampassnet/teampass, a popular password management tool. This vulnerability, identified as CVE-2023-2591, is a stored HTML injection vulnerability in the ite...

CVE-2020-12432

CVE-2020-12432 Collabora CODE = 4.2.2 - XSS almacenado y permisos inseguros en la API WOPI de Vereign secuestro de cuenta - 4.2.2 Versiones afectadas: Collabora CODE = 4.2.2 Requisitos de explotación: La interfaz de la API /wopi/ de Vereign debe ser accesible utilizando el token generado...

gosentry

gosentry gosentry is a security-focused fork of the Go toolchain, integrating numerous features for state-of-the-art fuzzing campaigns on Go codebases. If you were using go test -fuzz before, you should use gosentry as a replacement. It comes with various fuzzing improvements and bug detectors th...

cve-2022-31705

CVE-2022-31705 Intro https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Test on windows vmware workstation 16.2.0, with guest os ubuntu server 22 At leat one usb device is be attached to guest machine change the 'qh-field4' in the ehci.c...

CVE-2026-6271

CVE-2026-6271 — Career Section WordPress Plugin RCE Scanner Plugin: Career Section career-section CVE ID: CVE-2026-6271 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Vulnerability Type: Unauthenticated Arbitrary File Upload → Remote Code Execution Affected...

PiSavar

PiSavar - Detects PineAP module and starts deauthentication attack for fake access points - WiFi Pineapple Activities Detection About Project The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from bein...

http-garden

The HTTP Garden The HTTP Garden is a collection of HTTP servers and proxies configured to be composable, along with scripts to interact with them in a way that makes finding vulnerabilities much much easier. For some cool demos of the vulnerabilities that you can find with the HTTP Garden, check...

CVE-2026-2256-

CVE-2026-2256- CVE-2026-2256 diagram...

TagTinker

TagTinker V2.1 Infrared ESL Research Toolkit for Flipper Zero Protocol study • Signal analysis • Digital Art → Launch the TagTinker Image Prep web app ← Overview TagTinker is a Flipper Zero app for exploring infrared electronic shelf-label ESL protocols. It allows you to transmit custom images an...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html What is WebVM? WebVM is a server-less virtual environment running fully client-side in...

mailenable-cve-2022-36934

MailEnable CVE-2022-36934 Exploit Module Metasploit module for MailEnable's authentication bypass vulnerability CVE-2022-36934, leading to remote code execution. 📌 Features Exploits MailEnable's improper input sanitization in SMTP/POP3 Supports both x86 and x64 Windows targets No user interaction...

CVE-2025-49844

CVE-2025-49844 - RediShell Use-after-free in Redis Lua scripting leading to remote code execution. Summary of the CVE Redis is an open source, in-memory database. CVE-2025-49844 is a use-after-free vulnerability in Redis's embedded Lua scripting engine. An authenticated user with access to Lua...

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...

CVE-2022-37706

CVE-2022-37706 Overview CVE-2022-37706 is a Local Privilege Escalation LPE vulnerability found in the enlightenmentsys component of the Enlightenment desktop environment for Linux. This vulnerability allows a local low-privileged user to escalate privileges to root on vulnerable systems. CVE ID:...

url-cheatsheet-data

URL validation bypass cheat sheet data This is the data that powers the PortSwigger URL validation bypass cheat sheet. We have put this data on Github so the community can contribute vectors via pull requests. Contributing To contribute, please create a pull request with changes to the JSON data...

IRTriage

Incident Response Triage: Scripted collection of system information valuable to a Forensic Analyst. IRTriage will automatically "Run As ADMINISTRATOR" in all Windows versions except WinXP. The original source was Triage-ir v0.851 an Autoit script written by Michael Ahrendt. Unfortunately Michael'...

CVE-2025-66802

CVE-2025-66802 Sourcecodester Covid-19 Contact Tracing System 1.0 – Unrestricted File Upload Leading to Remote Code Execution Description Sourcecodester Covid-19 Contact Tracing System version 1.0 contains a vulnerability classified as Unrestricted Upload of File with Dangerous Type CWE-434. The...

Venom-JWT

Venom-JWT Penetration Tool - JWT Vulnerability and Secret Cracking Service Penetration Testing Solemn Statement: The techniques, ideas, and tools mentioned in this document are for learning and communication purposes only for security. No one shall use them for illegal purposes or for profit,...

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...

ghidra-evm

Módulo Ghidra EVM En los últimos años, los ataques a contratos inteligentes desplegados en la cadena de bloques de Ethereum han resultado en una cantidad significativa de fondos robados debido a errores de programación. Dado que los contratos inteligentes, una vez compilados y desplegados, son...

DBC2

DBC2 LAST/CURRENT VERSION: 0.2.6 Author: Arno0x0x - @Arno0x0x DBC2 DropboxC2 is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication. This project was...

CVE-2019-16920-MassPwn3r

0day exploit for Multiple D-Link Routers Vulnerability was found in latest firmware of the following D-Link products: DIR-655 DIR-866L DIR-652 DHP-1565 Current Description Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue...

CVE-2024-38063-scanner

Overview This project is a Python script designed to identify and exploit vulnerable Windows systems using Shodan for reconnaissance and Scapy for crafting and sending malicious IPv6 packets targeting CVE-2024-38063. The tool automates the process of searching for vulnerable hosts, verifying thei...

Docker-Escape-Miner

Using a published Docker exploit to gain root access and run a bitcoin mining script This uses two open source libraries: nightminer by @ricmoo for python bitcoin mining RunC-CVE-2019-5736 by @twistlock for the docker escape System Requirements This was tested on Kali Linux, with Docker version...

CVE-2011-2523

vsftpd 2.3.4 Backdoor Exploit FTP Server: vsftpd Vulnerable version: 2.3.4 CVE: CVE-2011-2523 Vulnerability: Backdoor on port 6200 opened when user entered strings appending : in ftp USER param Notes: The RCE doesn't need to be authenticated...

CVE-2021-40444_EXP_JS

This repository does not have a README...

CVE-2026-14856-TastyIgniter

CVE-2026-14856: Stored XSS to Account Takeover in TastyIgniter v4.3.0 📌 Summary A Stored Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the Media Manager in TastyIgniter v4.3.0. Due to insufficient validation and sanitization of uploaded .svg files, an...

libpeconv

libPeConv A library to load and manipulate PE files. Objectives The goal of libPEConv was to create a "swiss army knife" for custom loading of PE files. It gathers various helper functions that you can quickly integrate in your own loader. For example: remapping sections, applying relocations,...

Bastillion

Bastillion A modern, web-based SSH console and SSH key management tool. Bastillion gives you a clean, browser-based way to manage SSH access across all your systems — like a bastion host with a friendly dashboard. It does two things: 1. Web-based SSH terminal — once a host is registered, authoriz...

CVE-2022-39197

CVE-2022-39197 RCE POC Reference Links https://mp.weixin.qq.com/s/Eb0pQ-1ebLSKPUFC7zS6dg — There’s a great in depth analysis of this vulnerability https://www.agarri.fr/blog/archives/2012/05/11/svgfilesandjavacodeexecution/index.html...

cve-2009-3555-test-server

What is this? This is a TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled, which will trigger CVE-2009-3555 mitigations in OpenSSL 3.0+. Note that it isn't truly vulnerable to CVE-2009-3555 because the Go TLS stack doesn't allow...

fim-ebpf

FIM-eBPF: File Integrity Monitoring with eBPF A lightweight eBPF program to monitor file creation and modification events on Linux. This tool leverages eBPF Extended Berkeley Packet Filter to trace file operations directly from the kernel, providing high-performance monitoring with minimal...

CVE-2024-51567

Script de Explotación CVE-2024-51567 CVE-2024-51567 es un script de explotación de prueba de concepto PoC en Python para CVE-2024-51567 , una vulnerabilidad crítica de inyección de comandos que afecta a CyberPanel v2.3.6. Esta vulnerabilidad, encontrada en el endpoint upgrademysqlstatus, permite ...

ipv4Bypass

ipv4Bypass Using IPv6 to Bypass Security Dependences tested on Kali Linux python3 nmap arp-scan apt-get install arp-scan python-nmap https://pypi.org/project/python-nmap/ Example on how to run the tool root@kitploit: $ python bypass.py -i eth0 -r 10.5.192.0/24 $ python bypass.py -h Usage: bypass....

Invoke-DNSteal

Invoke-DNSteal is a Simple & Customizable DNS Data Exfiltrator. This tool helps you to exfiltrate data through DNS protocol over UDP and TCP, and lets you control the size of queries using random delay. Also, allows you to avoid detections by using random domains in each of your queries and you c...

CVE-2021-3129

Remote Code Execution: Laravel CVE-2021-3129 📜 Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...