Lucene search
+L
KitploitRecent

44557 matches found

Kitploit
Kitploit
β€’added 2026/09/11 10:46 a.m.β€’6 views

MS_T120

MST120 CVE-2019-0708 make the poc step by step, day by day https://docs.microsoft.com/en-us/openspecs/windowsprotocols/ms-rdpbcgr/5073f4ed-1e93-45e1-b039-6e30c385867c...

10CVSS7.7AI score0.99999EPSS
SaveExploits126
Kitploit
Kitploit
β€’added 2026/09/11 10:46 a.m.β€’8 views

callstranger-detector

Zeek Package that detects CallStranger CVE-2020-12695 attempts http://callstranger.com/ This package attempts to detect CallStranger CVE-2020-12695 exploitation attempts and data exfiltration. It does so by looking for three key things: 1. UPnP SUBSCRIBE commands with a Notify URL that contains a...

7.8CVSS6.9AI score0.15193EPSS
SaveExploits3References1
Kitploit
Kitploit
β€’added 2026/09/11 10:46 a.m.β€’7 views

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

πŸ›‘οΈ ULTIMATE CYBERSECURITY MASTER GUIDE Professional Cybersecurity Knowledge Base Β· Red Team Β· Blue Team Β· Purple Team Compiled from 70+ expert books Β· 90+ PNWC internal documents Β· custom tools & scripts Abide by theLegal Terms of Use & Disclaimer for the use and misuse of this repository. "Under...

6AI score
SaveExploits0References62
Kitploit
Kitploit
β€’added 2026/09/11 10:46 a.m.β€’6 views

CookieCatcher

CookieCatcher CookieCatcher is an open source application which was created to assist in the exploitation of XSS Cross Site Scripting vulnerabilities within web applications to steal user session IDs aka Session Hijacking. The use of this application is purely educational and should not be used...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:46 a.m.β€’11 views

Amnesiac

Amnesiac Amnesiac is a post-exploitation framework designed to assist with lateral movement within active directory environments. Amnesiac is being developed to bridge a gap on Windows OS, where post-exploitation frameworks are not readily available unless explicitly installed. In fact, it is...

5.8AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:46 a.m.β€’11 views

docker-hacklab

Docker Hacklab My personal hacklab, create your own. French article: https://blog.ston3o.me/creer-hacklab-virtuel-docker/ Quick Start root@kitploit: $ docker run --name hacklab --net=host --privileged -it ston3o/docker-hacklab zsh | || | /\ / | |/ / | /\ | | |/ \ | ' /dev/null 2&1; docker start...

6AI score
SaveExploits0References13
Kitploit
Kitploit
β€’added 2026/09/11 10:46 a.m.β€’5 views

cve-2022-26134

Atlassian Confluence OGNL Injection POC Vulnerability CVE-2022-26134 arbitrary code execution Usage: pip3 install termcolor python3 exploit.py http://example.com documentation :...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits77
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’10 views

LWHP

LWHP Linux and Windows Hardening Points Hardening guides can never be complete as every system needs a different configuration. Consideration it when using these documents and take the points written in this repository as guidelines...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’38 views

redherd-framework

...

5.3AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’10 views

SharpShares

SharpShares Multithreaded C .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project root@kitploit: .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local"...

6AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’9 views

BugBountyScanner

BugBountyScanner A Bash script and Docker image for Bug Bounty reconnaissance, intended for headless use. Low on resources, high on information output. Helpful? BugBountyScanner helped you net a bounty? Description ⚠ Note: Using the script over a VPN is highly recommended. It's recommended to run...

6AI score
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’9 views

secretlint

Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’43 views

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’4 views

CVE-2024-0582

Introduction This exploit implements a Dirty Cred attack method to gain unauthorized write access to /etc/passwd. Unlike many similar exploits that create numerous pages or aggressively spray file descriptors, this approach takes a more targeted route to corrupt the necessary kernel structures...

7.8CVSS7.1AI score0.12836EPSS
SaveExploits9
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’724 views

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’9 views

KRBUACBypass

Background This POC is inspired by James Forshaw @tiraniddo shared at BlackHat USA 2022 titled β€œ Taking Kerberos To The Next Level ” topic, he shared a Demo of abusing Kerberos tickets to achieve UAC bypass. By adding a KERB-AD-RESTRICTION-ENTRY to the service ticket, but filling in a fake...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’11 views

dnscontrol

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

6AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’6 views

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...

8.8CVSS7.3AI score0.93235EPSS
SaveExploits34References1
Kitploit
Kitploit
β€’added 2026/09/11 10:45 a.m.β€’56 views

gping

gping πŸš€ Ping, but with a graph. Comes with the following super-powers: Graph the ping time for multiple hosts Graph the execution time for commands via the --cmd flag Custom colours Windows, Mac and Linux support Table of Contents Install πŸ’Ώ Usage 🎷 Install πŸ’Ώ macOS Homebrew: brew install gping...

6AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’5 views

PoCForCVE-2015-1528

This PoC is divided into three Parts, the folder mediaserver help to inject code into mediaserver from a normal application. the folder surfaceflinger help to inject code to surfaceflinger after you got mediaserver permission. the folder systemserver help to inject code to systemserver after you...

9.3CVSS5.7AI score0.02742EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’10 views

ageverificationbypass

AgeVerificationBypass AVB The Sanctuary Protocol for Sovereign Systems Why do I need to provide an ID to log into a Linux VM? This is not appropriate. 🚨 The Problem: The Archon Age-Gate As of 2026/2027, major distributions Ubuntu and Fedora have begun integrating the...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’7 views

rootOS

rootOS Tries to use various CVEs to gain sudo or root access. All exploits have an end goal of adding ALL ALL=ALL NOPASSWD: ALL to /etc/sudoers allowing any user to run sudo commands. Run root@kitploit: python root.py Exploits Name| CVE| Date| Links ---|---|---|--- ARDAgent| CVE-2008-2830|...

9.3CVSS6AI score0.36773EPSS
SaveExploits19References4
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’9 views

Evil-Droid

Evil-Droid Framework . version 0.3 root@kitploit: Author: Mascerano Bachir dev-labs Legal Disclamer: root@kitploit: The author does not hold any responsibility for the bad use of this tool, remember this is only for educational purpose. Description: root@kitploit: Evil-Droid is a framework that...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’240 views

sx

sx is the command-line network scanner designed to follow the UNIX philosophy. The goal of this project is to create the fastest network scanner with clean and simple code. πŸ“– Table of Contents Features Install Build from source Quick Start References Contributing Credits License ✨ Features ⚑ 30x...

6.1AI score
SaveExploits0References13
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’9 views

web

I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. 🚧 ⚠️ Work in progress; Not ready for use,yet ⚠️ 🚧 Introducing OSINTBuddy Welcome to the OSINTBuddy project where you can connect,...

5.9AI score
SaveExploits0References12
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’4 views

cve-2022-42889-text4shell-docker

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

9.8CVSS7.4AI score0.99931EPSS
SaveExploits42
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’9 views

MemITM

What's the MemITM tool? The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/11 10:43 a.m.β€’7 views

Stracciatella

Stracciatella v0.7 Powershell runspace from within C aka SharpPick technique with AMSI, ETW and Script Block Logging disabled for your pleasure. Nowadays, when Powershell got severly instrumented by use of techniques such as: AMSI ETW Script Block Logging Transcript file Modules logging Constrain...

6AI score
SaveExploits0References7
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’882 views

struts-pwn

struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...

10CVSS8.7AI score0.99999EPSS
SaveExploits46
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’139 views

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

5.6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’7 views

LTESniffer

LTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper LTESniffer is An Open-source LTE Downlink/Uplink Eavesdropper It first decodes the Physical Downlink Control Channel PDCCH to obtain the Downlink Control Informations DCIs and Radio Network Temporary Identifiers RNTIs of all active user...

6AI score
SaveExploits0References8
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’7 views

SkillSpector

SkillSpector Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, and security risks before installing agent skills. Overview AI agent skills used by Claude Code, Codex CLI, Gemini CLI, etc. execute with implicit trust and minimal vetting. Research shows that 26.1% of...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’5 views

CVE-2025-3243

CVE-2025-32433 Erlang SSH Library Exploit A proof-of-concept exploit for CVE-2025-32433 , a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via malformed SSHMSGCHANNELREQUEST packets. Features Original exploit by Matthew Keeley Updated version by Tyler...

10CVSS7.4AI score0.98594EPSS
SaveExploits40
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’8 views

MAD-CAT

MAD-CAT Meow Attack Data Corruption Automation Tool Overview MAD-CAT Meow Attack Data Corruption Automation Tool is a comprehensive security tool designed to simulate data corruption attacks against multiple database systems. The tool supports both single-target attacks and bulk CSV-based attack...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’7 views

blindy

Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...

6.1AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’7 views

chain-bench

πŸ“– Documentation Chain-bench is an open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark. The auditing focuses on the entire SDLC process, where it can reveal risks from code time into deploy time. To win the race...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/11 10:42 a.m.β€’8 views

BeeLogger

BeeLogger Copyright 2017 BeeLogger Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official TOOL DESIGNED TO GOOD PURPOSES, PENTESTS, DON'T BE A CRIMINAL ! Only download it here, do not trust in other places. NOTE: BeeLogger just have official support for latin languages in this moment. HOW TO...

6AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’7 views

CVE-2014-1773

CClipStack::PushClipRect Invalid Array Indexing First, starting with the callstack from the crash with pageheap enabled: ChildEBP RetAddr 0919aac8 6b58459f MSHTML!CWorldTransform::IsAxisAligned 0919ab40 6ba228e9 MSHTML!CDispSurface::CClipStack::PushClipRect+0x1a2 0919aba4 6be25b58...

9.3CVSS5.8AI score0.63114EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’8 views

CVE-2024-27956

WP Automatic Plugin SQL Injection Exploit CVE-2024-27956 A proof-of-concept exploit for the SQL injection vulnerability in WP Automatic plugin CVE-2024-27956 affecting WordPress sites. πŸ“Œ Description This exploit targets a critical unauthenticated SQL injection vulnerability in the WP Automatic...

9.9CVSS8.5AI score0.93971EPSS
SaveExploits16
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’6 views

CVE-2021-41773

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 CVE-2021-41773 Info A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document...

9.8CVSS8.1AI score0.99992EPSS
SaveExploits165
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’6 views

CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable to a stack-based buffer overflow on its firmware version 1.0.14 Build 20240108 rel.426554555, leading to Remote Code Execution both in the LAN and in the WAN side. This vulnerability has the same root cause as CVE-2020-10881, found by th...

9.2CVSS7.9AI score0.00665EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’6 views

bouvet

Bouvet Isolated code execution sandboxes for AI agents About β€’ How It Works β€’ MCP Tools β€’ Documentation What is Bouvet? Bouvet boo-veh is an MCP server that creates secure, isolated sandboxes for AI agents to execute code. When an AI agent needs to run Python, Node.js, or shell commands, Bouvet...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’11 views

deptrust

deptrust root@kitploit: / / / / / / / / / / / / / / / / / / / // / / // / / // / ,// ./// ,/// // deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’11 views

RedGridLink

Red Grid Link Offline MGRS navigation and proximity team coordination for small teams 2-8 people. No cell service needed. Built on the MGRS engine from Red Grid MGRS. Field Link adds zero-config proximity sync over Bluetooth, with Apple Multipeer Connectivity iOS and Google Play Services Nearby...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’5 views

quasar

Quasar Quasar Is An Information Gathering Framework For Penetration Testers Coded By Belahsan Ouerghi Website Informations E-mail Address Checker Phone Number Information Credit Card Bin Checker Ip Locator Port Scanner Installation root@kitploit: sudo apt-get install git git clone...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’6 views

PersistBOF

PersistBOF A tool to help automate common persistence mechanisms. Currently supports Print Monitor SYSTEM, Time Provider Network Service, Start folder shortcut hijacking User, Junction Folder User, Xll Add-In User. Usage Clone, run make, add .cna to Cobalt Strike client. run: help persist-ice in ...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’8 views

CVE-2022-28368-handler

CVE-2022-28368-handler This repository contains a python script that will handle the majority of the dompdf cached font exploit CVE-2022-28368, all you need to do is create the request. It will even provide a trigger string to start the exploit : Usage root@kitploit: usage: CVE-2022-28368.py -h -...

9.8CVSS8.4AI score0.82438EPSS
SaveExploits8
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’8 views

CVE-2021-41805

CVE-2021-41805 - HashiCorp Consul Enterprise RCE !WARNING LEGAL DISCLAIMER: This tool is STRICTLY for EDUCATIONAL PURPOSES ONLY! Usage of this tool for attacking targets without prior mutual consent is ILLEGAL. It is the user's responsibility to obey all laws that apply whilst using this tool. Th...

8.8CVSS7.8AI score0.3479EPSS
SaveExploits3
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’6 views

CVE-2024-29272

CVE-2024-29272 This is a Proof-of-Concept for CVE-2024-29272, an unauthenticated arbritrary file upload vulnerability that leads to remote code execution on versions of VvvebJS -l -p in another terminal: root@kitploit: nc -lvnp...

6.5CVSS5.9AI score0.09366EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/11 10:41 a.m.β€’4 views

CVE-2019-9193

EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in certain versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server vulnerable to CVE-2019-9193. Features...

9CVSS7.6AI score0.91655EPSS
SaveExploits17
Total number of security vulnerabilities44557