CVE-2025-54123

CVE-2025-54123 - Hoverfly Command Injection RCE PoC CVE-2025-54123 - Middleware Command Injection in Hoverfly 📌 CVE Details ID : CVE-2025-54123 Type : Command Injection / Remote Code Execution RCE Vendor : Hoverfly Impact : Allows authenticated attackers to execute arbitrary system commands via t...

CVE-2020-12446

CVE-2020-12446 You can check WriteUp for detailed explanaiton. If you wanna run it on 25h2 you should change an offset and its given at the comment line...

CVE-2025-31161

CVE-2025-31161 Warning: This tool is for authorized security testing and educational purposes only. Unauthorized use against systems you do not have explicit permission to test is illegal. Overview This tool is a proof-of-concept PoC for CVE-2025-31161 , a critical authentication bypass...

SpringSource__spring-security-oauth_CVE-2018-1260_2-3-2-RELEASE

This project provides support for using Spring Security with OAuth 1a and OAuth2. It provides features for implementing both consumers and providers of these protocols using standard Spring and Spring Security programming models and configuration idioms. Code of Conduct This project adheres to th...

CVE-2024-0762

This repository does not have a README...

nmap-CVE-2023-35078-Exploit

nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35078 - Mobile Iron Core Save the script into a file named nmap-CVE-2023-35078-Exploit.nse. To run the script, you can use Nmap's --script-args option to provide the output file path: nmap -p --script nmap-CVE-2023-35078-Exploit.nse...

cpanel-cve-2026-41940

🔒 cPanel CVE-2026-41940 — Complete Security Toolkit Complete Security Toolkit for cPanel servers infected with CVE-2026-41940 / nuclear.x86. Two scripts — one full audit and one auto cleanup with Imunify360. Works on both original license and bypass/shared license servers. 👨‍💻 Author | ---|---...

msf-module-CVE-2019-0708

CVE-2019-0708 Bluekeep Metasploit module for CVE-2019-0708 BlueKeep Pulled from https://github.com/rapid7/metasploit-framework/tree/5a0119b04309c8e61b44763ac08811cd3ecbbf8d/modules/exploits/windows/rdp and fixed File copy instructions 1. Make a folder named 'rdp' in...

CVE-2025-2304-POC

CVE-2025-2304-POC Manual poc for CVE-2025-2304: Camaleon CMS Version 2.9.0 Exploitation Steps 1. Log in as a low-privileged user e.g., "Bob". 2. Intercept the password change using a proxy e.g Burpsuite, caido and more 3. Capture the updatedajax request during a password change. 4. Inject the...

afrog

Una herramienta de seguridad para Bug Bounty, Pentest y Red Teaming English • 中文 Descargar • Wiki • Afrog PoC 规则编写权威指南 Colaboradores de PoC...

CVE-2025-5548-FreeFloat-FTP-Buffer-Overflow

CVE-2025-5548 — Buffer Overflow in FreeFloat FTP Server 1.0 Vulnerability analysis and exploitation lab · Exploit Development · Windows x86 What is this repository about? This repository fully documents the analysis and exploitation process of the CVE-2025-5548 vulnerability, a stack-based buffer...

CVE-2026-46215-EXPLOIT

CVE-2026-46215 Exploit for Linux 7.0 c0d3 by : Antonius w1sdom / ev1lut10n / sw0rdm4n - bluedragonsec.com https://github.com/bluedragonsecurity This exploit works in a limited environment, check some requirements below !!! WHAT THE HELL IS THIS ? This is and exploit for CVE-2026-46215 Linux Kerne...

CVE-2026-32941

A framework-wide vulnerability in Sliver C2 allows for an unauthenticated, remote Denial of Service by triggering Uncontrolled Memory Allocation CWE-789 / CWE-400, leading to a process-wide Out-of-Memory OOM crash. References: Tenable Reproduction Steps: 1. Extract Credentials: Obtain the mTLS...

CVE-2020-8515

CVE-2020-8515 Draytek CVE-2020-8515 PoC I had kicking about. Amusingly, the command injected gets executed twice, see here: root@kitploit: $ ./draytek.py draytek.local executing command: cat /etc/passwd + vulnerable! executing command: uname -a Linux Vigor3900 2.6.33.5 1 Wed Mar 28 00:49:28 CST...

kube-knark

Kube-Knark Project Trace your kubernetes runtime !! Kube-Knark is an open-source tracer that uses pcap & ebpf technology to perform runtime tracing on a deployed Kubernetes cluster. It is tracing the Kubernetes API execution and master node configuration files permission changes. The trace matchi...

GONET-Scanner

GO/NET Scanner ScreenShots Install root@kitploit: chmod +x install.sh ./install.sh as root Usage root@kitploit: ARGUMENTS -ar CIDR: ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to 65535 Ports -pr MINPORT MAXPORT: Define Port Range to Scan -1000: Scan Top 1000 ports like...

bifrost

Bifrost root@kitploit: \ /' | | | , | '| || , '/'\ /',| | | | || | | | , | | /' /'/\ root@kitploit: Usage: ./bifrost -action dump | list | askhash | describe | asktgt | asktgs | s4u | ptt | remove For dump action: -source tickets | keytab for keytab, optional -path to specify a keytab for...

GuardReasoner-VL

GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning Yue Liu, Shengfang Zhai, Mingzhe Du Yulin Chen, Tri Cao, Hongcheng Gao, Cheng Wang Xinfeng Li, Kun Wang, Junfeng Fang, Jiaheng Zhang, Bryan Hooi 1National University of Singapore, 2Nanyang Technological University To enhance the safety ...

goca

Goca is a FOCA fork written in Go, which is a tool used mainly to find metadata and hidden information in the documents its scans. These documents may be on web pages, and can be downloaded and analyzed with Goca. It is capable of analyzing a wide variety of documents, with the most common being...

goca

Goca es un fork de FOCA escrito en Go, una herramienta utilizada principalmente para encontrar metadatos e información oculta en los documentos que escanea. Estos documentos pueden estar en páginas web, y se pueden descargar y analizar con Goca. Es capaz de analizar una amplia variedad de...

Redcloud

Weather report. Cloudy with a chance of shells! Early release. Follow me on Twitter to stay updated on Redcloud's development. 💁☁️🐚🌱 Quick Start - Architecture - Use-cases - Screenshots Introduction Redcloud is a powerful and user-friendly toolbox for deploying a fully featured Red Team...

CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding

https://hackintoanetwork.com/blog/2023-starlink-dns-rebinding-attack-eng...

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434CVE-2025-59528 PoC Script CVE-2025-58434 Flowise -lp...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

CVE-2025-8110-Silentium-HTB

CVE-2025-8110 — Gogs RCE PoC Silentium / HackTheBox Disclaimer: This tool is intended strictly for educational purposes and authorized penetration testing. Only use it against systems you have explicit permission to test. This is a modified version of zAbuQasem/gogs-CVE-2025-8110, adapted to work...

CVE-2025-40554

CVE-2025-40554 Exploitation Suite A comprehensive security testing tool for detecting and exploiting the authentication bypass vulnerability CVE-2025-40554 / CVE-2025-40536 in SolarWinds Web Help Desk. ⚠️ Disclaimer FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING PURPOSES ONLY This tool is provide...

CVE-2019-6447

️⃣ CVE-2019-6447 🖥️ -h3x0v3rl0rd- ES File Explorer 4.1.9.7.4 - Arbitrary File Read...

SSH_Enum_CVE-2018-15473

SSH Username Enumeration Exploit Este script es una versión modificada de un exploit original que permite realizar una enumeración de usuarios SSH en servidores vulnerables OpenSSH 2.3 7.7. Funcionalidad El script utiliza una vulnerabilidad en el protocolo SSH para enumerar usuarios válidos en el...

frameworks_base_AOSP10_r33_CVE-2020-0401

This repository does not have a README...

ntdissector

ntdissector Ntdissector is a tool for parsing records of an NTDS database. Records are dumped in JSON format and can be filtered by object class. By providing the SYSTEM hive or the right bootkey in hex format, encryption layers will be removed from the right columns. More info in the following...

badkeys

badkeys Tool and library to check cryptographic public keys for known vulnerabilities what? badkeys checks public keys in various formats for known vulnerabilities. A web version can be found at badkeys.info. install badkeys can be installed via pip: root@kitploit: pip3 install badkeys You may wa...

ALHacking

Author: 4lbH4cker Version 4 Hacking Tools Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery, Webcam Hack • Powerful DDOS attack tool!! Youtube Video: https://www.youtube.com/watch?v=zgdq6ErscqY Operating System Requirements...

medusa

Sponsored by: MEDUSA A modular automation framework and script repository for runtime testing and investigating Android and iOS apps, designed for penetration testers and malware analysts. It lets you plug in modules to bypass protections like SSL pinning, inspect network/WebView activity, trace...

OneForAll

OneForAll 👊OneForAll is a powerful subdomain integration tool 📝中文文档 🚀Start Guide 📢 Please read this document to help you start quickly! 🐍Installation requirements OneForAll is developed and tested based on Python 3.6.0, OneForAll needs to be higher than Python 3.6.0 to run. For more information o...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Desbordamiento de Búfer Basado en Pila x86 y x64 Desbordamiento de búfer basado en pila en R 3.4.4. Explotación completa en x86, pero solo control de RIP con análisis de gadgets en x64 debido a restricciones del programa. La misma vulnerabilidad en dos arquitecturas, l...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 A Proof of Concept PoC for CVE-2025-8110 , a critical vulnerability in Gogs that allows Remote Code Execution RCE via .git/config manipulation using symbolic link bypasses and sshCommand injection. 📖 Overview This exploit targets a Path Traversal flaw in the Gogs AP...

CVE-2019-1315

Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...

ft9201-libfprint

ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...

evildork

evildork👁️ Dork only one specific domain or all subdomains available Dork targeting a general target likely to be a person Produce an html output result page with all the dorks links Be aware that Google after some tries will add some captcha to check if you're a bot or not. Installation 📥 git...

steamer

Steamer Importa, gestiona y busca volcados públicos. ¿Tienes cantidades masivas de CSV, .sql, .txt que contengan credenciales, contraseñas y hashes? ¡Usa Steamer para gestionarlos! Cárgalos en una base de datos MongoDB, y ya sea usa la consola directamente, o simplemente usa la práctica interfaz...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

unimap v0.8.0

Unimap Scan only once by IP address and reduce scan times with Nmap for large amounts of data. Unimap is an abbreviation of "Unique Nmap Scan ". The tool can run in Linux, OSX, Windows or Android Termux without problems. Why? If you have plans to run a Nmap to a whole organization you need to...

SecurityRAT

OWASP Security RAT Requirement Automation Tool is a tool helping you manage security requirements in your agile development projects. The typical use case is: specify parameters of the software artifact you're developing based on this information, list of common security requirements is generated...

kali-linux-tools-interface

Kali Linux Tools Interface A graphical interface to use information security tools by the browser. Explore the article » Available only in Brazilian Portuguese Report Bug · Request Feature ⚠️ ALERT 🚧 As I am involved in other projects, I am no longer supporting this project. However, the code...

ICMP-TransferTools

ICMP-TransferTools ICMP-TransferTools is a set of scripts designed to move files to and from Windows hosts in restricted network environments. This is accomplished using a total of 4 different files, consisting of a python server and powershell client for each transfer direction Download & Upload...

rdpy

RDPY Protocolo de Escritorio Remoto en twisted python. RDPY es una implementación pura en Python del protocolo Microsoft RDP Remote Desktop Protocol lado cliente y servidor. RDPY está construido sobre el motor de red orientado a eventos Twisted. RDPY soporta la capa de seguridad estándar de RDP,...

rdpy

RDPY Remote Desktop Protocol in twisted python. RDPY is a pure Python implementation of the Microsoft RDP Remote Desktop Protocol protocol client and server side. RDPY is built over the event driven network engine Twisted. RDPY support standard RDP security layer, RDP over SSL and NLA...

CVE-2011-1473-POC

CVE-2011-1473-POC CVE-2011-1473 POC script USAGE root@kitploit: python3 poc-CVE-2011-1473.py --target TARGETHOST --count 5 --debug...

CVE-2025-24999

CVE-2025-24999 proof of concept for CVE-2025-24999 https://databasesecurityninja.wordpress.com/2026/04/02/microsoft-sql-server-privilege-elevation-through-msdatabasemanager-role-cve-2025-24999/...

EXPLOIT-CVE-2021-44228

CVE-2021-44228 — Log4Shell PoC Lab DISCLAIMER This lab was created exclusively for educational and security research purposes. All traffic occurs within an isolated Docker network. Do not use this material on real systems or without explicit authorization. Misuse may be a crime. Use responsibly...