44557 matches found
LDAPmonitor
Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object. Features...
CVE-2024-11392
CVE-2024-11392 Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious configuratio...
CVE-2023-36845
Juniper Scanner Scanner for CVE-2023-36845 by bt0 More information about the Vulnerability: https://supportportal.juniper.net/JSA72300 Requirements: python3+ shodan colorama urlopen pyOpenSSL censys $ python3 -m pip install -r requirements.txt Options root@kitploit: -h, --help show this help...
typehub-exploiter
typehub-exploiter GILANG - Exploiter for CVE-2021-25094 referrence : https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ payload : site.com/wp-admin/admin-ajax.php bug path : site.com/wp-content/uploads/typehub/custom/ Thanks to : Ibnudz, Dark clown security greetz : Garuda...
CVE-2026-54806
WP Activity Log PHP Object Injection CVE-2026-54806 PoC š Description CVE-2026-54806 is a critical CVSS 9.8 unauthenticated PHP Object Injection vulnerability in the WP Activity Log WordPress plugin wp-security-audit-log by Melapress. An unauthenticated attacker can inject serialized PHP objects...
CVE-2020-24186-wpDiscuz-7.0.4-RCE
POC CVE-2020-24186-wpDiscuz-7.0.4-RCE WordPress wpDiscuz 7.0.4 Remote Code Execution A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the...
Sweet-Pineapple-Builder
Sweet WiFi Pineapple Tetra Builder Sweet Pineapple Builder is a python script that automate the whole process of creating a custom WiFi Pineapple Tetra image. As the WiFi Pineapple Tetra firmware is a custom version of OpenWrt 19.07.2, it is therefore possible to create our own custom firmware...
CVE-2024-10914
CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...
massdns
MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...
awesome-ai-security
Awesome AI Security A curated list of awesome AI security related frameworks, standards, learning resources and open source tools. If you want to contribute, create a PR or contact me @ottosulin. Table of Contents Learning Resources Reading & Guides Courses, Labs & CTFs Podcasts Governance & Risk...
CVE-2021-42013
CVE-2021-42013 Poc CVE-2021-42013 - Apache 2.4.50 without CGI enable Usage : root@kitploit: chmod -x CVE-2021-42013.sh ./CVE-2021-42013.sh http://ip:port/ /etc/passwd References https://nvd.nist.gov/vuln/detail/CVE-2021-42013 https://vulners.com/cve/CVE-2021-42013...
cve-2021-1647
CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability INFO Password:infected...
ActiveDirectoryEnumeration
ADE - ActiveDirectoryEnum root@kitploit: python -m ade usage: ade -h --dc DC -o OUTFILE -u USER -s -smb -kp -bh -spn -sysvol --all --no-creds --dry-run --exploit EXPLOIT / | / / / \ / / / / / /| |/ / / / | / / / / / / / / / / / / / / / / / / / / / / \ / / // // /| |/ / / // / /...
qs_old
QuickSand.io For QuickSand Version 2 written in Python with PDF analysis support, see quicksand.io. QuickSand Version 1 Lite is no longer being actively developed. QuickSand is a compact C framework to analyze suspected malware documents to 1 identify exploits in streams of different encodings, 2...
project-memoria-detector
project-memoria-detector The project-memoria-detector tool aims to determine whether a target network device runs a specific embedded TCP/IP stack. Currently, the tool supports fingerprints for 16 embedded TCP/IP stacks and their variations: uIP, Contiki or Contiki-NG picoTCP or picoTCP-NG Nut/Ne...
DumpBrowserSecrets
DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...
365Inspect
Purpose Further the state of Microsoft 365 security by authoring a PowerShell script that automates the security assessment of Microsoft 365 environments. Soteria Inspect Soteria Inspect is born from the 365Inspect project and is Soteria's SaaS solution to aid in assessing the security of a...
CVE-2024-34226
Visitor Management System 1.0 Submitter: Kha Do Vulnerability SQL injection Description SQL injection vulnerability in /php-sqlite-vms/?page=managevisitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters. Affected compone...
CVE-2023-48084
CVE-2023-48084 Fixes broken syntax in the POC, primarily incorrect import and incorrect referral to API functions. automates the APIToken retrieval, stores the token as a variable and pipes into the fixed POC. https://github.com/Hamibubu/CVE-2023-48084 If for some reason this does not work,...
CVE-2020-15392
CVE-2020-15392 User Enumeration on Supravizio BPM 10.1.2 Description A user enumeration vulnerability flaw was found in Supravizio BPM, version 10.1.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not,...
DVAP
DVAP - Damn Vulnerable AI Platform Train. Break. Defend. AI Systems. An open-source platform for AI security training, red/blue teaming, CTF, benchmarking, and research. Runs 100% locally. No cloud, no paid APIs, no data leaves your machine. Prerequisites Docker 24+ and Docker Compose v2 16 GB RA...
Inventus
Inventus Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers. It's a Scrapy spider, meaning it's easily modified and extendable to your needs. Demo asciicast Requirements Linux -- I haven't tested this on Windows. Python 2.7 or Pyth...
APTs-Adversary-Simulation
APTs Adversary Simulation A comprehensive collection of simulated Advanced Persistent Threat APT attacks based on real world tactics, techniques, and procedures TTPs used by state sponsored APT Groups from Russia, China, Iran, and North Korea !CAUTION Important Notice : This project is strictly f...
spectre-meltdown-checker
Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list...
CL4R1T4S
CL4R1T4S AI SYSTEMS TRANSPARENCY AND OBSERVABILITY FOR ALL! Full extracted system prompts, guidelines, and tools from OpenAI, Google, Anthropic, xAI, Perplexity, Cursor, Windsurf, Devin, Manus, Replit, and more ā virtually all major AI models + agents! š Why This Exists root@kitploit: "In order t...
CVE-2021-46422
CVE-2021-46422 OS Command Injection in South Korean Wireless Routers Installation root@kitploit: git clone https://github.com/kelemaoya/CVE-2021-46422.git cd CVE-2021-46422 pip3 install -r requirements.txt Usage Single URL pocsuite -r ../CVE-2021-46422.py -u url --verify Batch URLs pocsuite -r...
CVE-2018-25031-PoC
CVE-2018-25031-PoC PoC of CVE-2018-25031...
phantom-keylogger
Phantom Keylogger šÆ MISSION BRIEF Phantom Keylogger is an advanced, stealth-enabled keystroke and visual intelligence gathering system. Built with operational security as the primary objective, this tool provides persistent surveillance capabilities while maintaining minimal footprint on target...
Osint-Sync
Osint Sync - OSINT Browser Extension A powerful browser extension for Open Source Intelligence OSINT research. Search usernames, emails, and phone numbers across 20+ platforms with integrated access to premium OSINT tools like GHunt, IntelX, Epieos, and OSINT Industries. Features Username Search...
Ethical-Hacking-Tools
Ethical-Hacking-Tools Show some š and ā the Repo to SUPPORT DOWNLOAD Kali Linux š š¦...
git-dumper
git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: root@kitploit: pip install git-dumper Usage root@kitploit: usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional...
CVE-2019-19268
CVE-2019-19268 Affected Version: rConfig 3.9.2. Description Multiple attack vectors in rConfig v3.9.2 due to misconfiguration, which allows local users to execute root commands via sudo. Discoverers dmw0ng - Discord: dmw0ng4449 TheCyberGeek - Discord: TheCyberGeek1892 Email: [email protected]...
waldo
Waldo is a lightweight and multithreaded directory and subdomain bruteforcer implemented in Python. It can be used to locate hidden web resources and undiscovered subdomains of the specified target. Key Features Quickly and easily generate a list of all subdomains of target domain Discover hidden...
PixelCode-Attack
Malicious PixelCode Delivery Technique Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing them inside images or videos. A lightweight loader retrieves the media file, reconstructs the original binary, a...
pentest-mcp
Pentest MCP Professional penetration-testing MCP server with modern transport/auth support and expanded recon tooling. What Changed in 0.9.0 Upgraded MCP SDK to @modelcontextprotocol/sdk@^1.26.0 Kept MCP Inspector at the latest release @modelcontextprotocol/inspector@^0.20.0 with bundled launcher...
CVE-2024-3400
CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: root@kitploit: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type:...
StegoForge
š”ļø StegoForge The ultimate hybrid of steganography, digital forensics, and covert communications. ā” Quick Launch Standalone Binaries StegoForge is a complex Python framework, but you shouldn't have to deal with broken environments when doing active forensics. We have compiled zero-dependency,...
CVE-2007-5036
CVE-2007-5036 Airsensor M520 - HTTPd Unauthenticated Remote Denial of Service / Buffer Overflow PoC Exploit-DB publication at https://www.exploit-db.com/exploits/4426/ Author Alex Hernandez aka @alt3kx...
CVE-2009-4049
CVE-2009-4049 Heap-based buffer overflow in aswRdr.sys aka the TDI RDR driver in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service memory corruption or possibly gain privileges via crafted arguments to IOCTL 0x80002024. While part of the reason as to why I di...
Follina-CVE-2022-30190-Unofficial-patch
Follina-CVE-2022-30190-Unofficial-patch- An Unofficial Patch Follina CVE-2022-30190 patch by microsoft Guidelines. for more details goto : https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ About Program this program creates a...
SMBGhost-LPE-Metasploit-Module
SMBGhost-LPE-Metasploit-Module This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework Notes: This module made to be used when you have a valid shell to escalate your privileges. You can change the payload, if you want to have your custo...
xurlfind3r
xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...
RoguePlanet
RoguePlanet RoguePlanet Windows Defender Vulnerability Welcome back everyone !!! The exploit is a race condition, so it's a hit or miss. I have managed to get a 100% success rate on some machines while it struggled to work on others. The exploit has been tested in Windows 11 Official channel +...
CrushFTP-CVE-2024-4040-illdeed
CVE-2024-4040 ā CrushFTP Authentication Bypass Exploit This repository contains a stealthy Python proof-of-concept PoC exploit for CVE-2024-4040 , a critical vulnerability in CrushFTP v10 and below that allows an attacker to bypass authentication using a forged CrushAuth cookie and AWS-style...
CVE-2025-25257-Exploit-Tool
CVE-2025-25257 Exploit Tool Credits root@kitploit: Based on watchTowr Labs, 0xbigshaq, and pwner.gg analyses. Warnings root@kitploit: For educational purposes only. Use on authorized systems. Modifies database/filesystem. Enhanced Python tool for detecting and exploiting CVE-2025-25257 Pre-Auth...
CVE-2020-0796
CVE-2020-0796 Integer Overflow Vulnerability By inserting a value larger than what can be stored in the OriginalCompressedSegmentSize field, the variable cannot handle this value and unintentionally interprets it as a very small number or a negative value. This can cause unexpected behavior in th...
CVE-2024-45216-Poc
CVE-2024-45216-Poc python CVE-2024-45216poc.py --host http://122.51.176.242:8983...
ssrf-king
š„ ssrf-king š„ v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist āļø It will soon have a...
CVE-2025-55182
CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions1, which can be seen as...
Live-Forensicator
š”ļø Forensicator š”ļø Cross-platform Incident Response & Live Forensics Toolkit Windows PowerShell | Linux Bash | macOS Shell Built for fast, structured, and actionable forensic investigations. š¤ About Forensicator is a cross-platform incident response and live forensics toolkit. It is designed to...