CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/...

CVE-2025-55182_liyon

CVE-2025-55182 - React Server Components RCE ⚠️ Legal Notice : This tool is intended solely for security research, authorized penetration testing, and educational purposes. Using this tool against any system without explicit permission is illegal and unethical. 📋 Overview CVE-2025-55182 is a...

CVE-2019-15107

Unauthenticated RCE via Webmin Backdoor CVE-2019–15107 Summary CVE: CVE-2019–15107 Affected Version: Webmin it will open an shell for you . Note: For versions 1.900–1.920, the “expired password changing” feature must be enabled for the backdoor to trigger. Version 1.890 is vulnerable in its defau...

CVE-2021-32724-Target

CVE-2021-32724 Exploit target repository /!\ This repo is configured with a vulnerable version of the Check Spelling Workflow /!\ This repo is a target for CVE-2021-32724 exploit. Helllo World...

CVEs

🔎 CVEs: 🎯...

Public_Poc

0xmrsecurity.github.io Personal Blog web Page Thoughts I learn and write the public proof of concepts for the better understanding of hacking and programming skills...

cis-vsphere

🦍 CIS vSphere A tool to assess the compliance of a VMware vSphere environment against the CIS Benchmark for VMware vSphere. Requirements VMware PowerCLI 12.0.0 or higher VMware vSphere 7.0 Read access to the vCenter or ESXi host Usage 1. Clone the repo and navigate to the folder: root@kitploit: g...

PortForwarder

Windows TCP Port Forwarder A high-performance TCP port forwarder for Windows with optional IP whitelisting and verbose logging capabilities. Features ✅ Forward TCP traffic from a local port to any remote host:port ✅ Optional IP whitelisting for enhanced security ✅ Port 445 / SMB takeover mode...

Sitadel

Sitadel - Web Application Security Scanner root@kitploit: | || || | / | | | | | | | | | | || | | | \ | | |/ | | | | || | | | |/ | | | | | | /|| ||\ Sitadel is basically an update for WAScan making it compatible for python = 3.11 It allows more flexibility for you to write new modules and...

yakit

YAKIT-A Cyber Security ALL-IN-ONE Platform based on Yak language...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

CVE-2026-1529 Keycloak Exploit Tool Keycloak: Unauthorized organization registration via improper invitation token validation Disclaimer This tool is for educational and security testing purposes only. Use only on systems you have explicit permission to test. Unauthorized access to computer syste...

CVE-2025-38248_EXP

CVE-2025-38248EXP The first exploit for CVE-2025-38248 The exploit has two modes: ROP and dataonly. Interested masters can study it...

CVE-2019-11043

CVE-2019–11043: PHP-FPM Nginx Remote Code Execution Vulnerability Vulnerability Description and Impact CVE-2019–11043 is a remote code execution RCE vulnerability. It affects PHP-FPM, which is a FastCGI Process Manager that is commonly used with Nginx web servers. The flaw arises from inadequate...

CVE-2022-0847-dirty-pipe-exploit

CVE-2022-0847-dirty-pipe-exploit An exploit for CVE-2022-0847 dirty-pipe vulnerability How to use this Compile with gcc exploit.c -o exploit assumes gcc is installed Run ./exploit and it'll pop a root shell If you are getting error message like then, Login as root with password cspshivam Then,...

CVE-2021-3156-Sudo-Buffer-Overflow-Linux

CVE-2021-3156 – Sudo Buffer Overflow Linux Baron Samedit Privilege Escalation Exploit 📌 Overview This project demonstrates the exploitation of CVE-2021-3156 Baron Samedit , a critical heap-based buffer overflow vulnerability in the Linux sudo utility. The vulnerability allows a low-privileged use...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...

CVE-2021-26084

CVE-2021-26084 Introduction This write-up provides an overview of CVE-2021-26084 - Confluence Server Webwork OGNL injection 1 that would allow an authenticated user to execute arbitrary code on a Confluence Server or Data Center instance. TL;DR Confluence Server / Data Center makes use of Webwork...

dnsobserver

DNSObserver A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends notifications with the received request's details via Slack. DNSObserver can help you find bugs such as blin...

dnsobserver

DNSObserver Un práctico servicio DNS escrito en Go para ayudar en la detección de varios tipos de vulnerabilidades ciegas. Monitorea el servidor de un pentester en busca de interacciones DNS fuera de banda y envía notificaciones con los detalles de la solicitud recibida a través de Slack...

network-monitor

Network Monitor A real-time network connection monitoring tool built with Rust and GTK4, displaying active connections with live I/O statistics in a modern graphical interface. Features Real-time monitoring : Continuously monitors active network connections I/O statistics : Shows live...

cve-scores

CVE Scores EPSS & VEDAS Score Aggregator for CVEs Data Providers SCORE| MAINTAINER| PURPOSE| COVERAGE| ATTRIBUTION| FREQUENCY ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Prediction of Future Exploitation| 1 Identifier CVE| Proprietary Data sourced from Data...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

darling

Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...

CVE-2024-47176

PoC: Unauthenticated RCE on cups-browsed 📜 Vulnerability information...

rust-cve-2025-55182-scanner

CVE-2025-55182 Scanner Rust A high-performance, concurrent vulnerability scanner written in Rust for detecting CVE-2025-55182 Next.js Server Actions RCE across multiple targets. 🚀 Features ⚡ High-performance Rust implementation 🧵 Multi-threaded scanning engine ⏱ Adjustable timeout & retry system ...

VSHG

VSHG - Hardware resistance & enhanced security for GnuPG. VSHG aims to provide a memory / hardware resistant reinforcement to GnuPG's standared s2k key-derivation-function + a simplified interface for symmetric encryption . About VSHG VSHG Very secure hash generator is a standalone Addon for GnuP...

glassworm-hunter

glassworm-hunter Detect GlassWorm supply chain attack payloads on your machine. Scans VS Code extensions, npm packages, Python packages, and git repositories. This scanner detects the attack technique itself - invisible Unicode variation selector payloads, GlassWorm decoder patterns, C2...

Quantum-Algorithm-for-Elliptic-Curve-Discrete-Logarithms-with-Space-Efficient-Point-Addition

Quantum Algorithm for Elliptic Curve Discrete Logarithms with Space-Efficient Point Addition This repository contains Qiskit code for resource estimation of the space-efficient quantum modular inversion and affine point-addition circuits used in elliptic-curve discrete logarithm settings. The...

xcavator

xcavator A network data locater using credentials obtained during penetration tests. Xcavator is a tool that scans a range of IP addresses for services that host files FTP, FTPS and SMB at the moment and for given credentials it will try to download everything it can and scan within the files for...

factual-rules-generator

factual-rules-generator Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a running operating system. The goal of the software is to be able to use a set of rules against collected or acquired digital forensic evidences and find...

Nmap-API

API de Nmap Usa python3.10, Debian, python-Nmap y el framework flask para crear una API de Nmap que puede realizar escaneos con buena velocidad en línea y es fácil de desplegar. Esta es una implementación para nuestro proyecto universitario PCL que aún está en desarrollo y se actualiza...

Metasploit-Wordpress-Canto-Exploit-RCE

Metersploit exploit module canto RCE CVE-2024-25096 & CVE-2023-3452 This exploit is a proof-of-work exploit of the RFI vulnerabilities CVE-2024-25096 and CVE-2023-3452, which allow the attacker to establish an interactive remote shell session on the target. CVE-2024-25096 abuses the abspath...

atlantis-android

Atlantis Android Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging. Overview Atlantis Android is a companion library to Proxyman that allows you to capture and inspect network traffic from your Android applications without configuring a proxy or installing...

CVE-2018-15473

CVE-2018-15473 - SSH Username Enumeration Exploit A tool for enumerating valid usernames on vulnerable SSH servers OpenSSH 2.3 through 7.7. 📋 Vulnerability Description CVE-2018-15473 allows enumeration of existing users on SSH servers by sending malformed authentication packets. The server respon...

crAPI

crAPI c ompletely r idiculous API crAPI te ayudará a entender los diez riesgos de seguridad de API más críticos. crAPI es vulnerable por diseño, pero podrás ejecutarlo de forma segura para educarte/entrenarte. crAPI es moderno, construido sobre una arquitectura de microservicios. Cuando llegue el...

msf-cve-2024-46987

MSF-CVE-2024-46987 Metasploit module to exploit CVE-2024-46987 - an authenticated path traversal vulnerability in Camaleon CMS versions = 2.8.0 and 2.9.0 Based on this POC by Goultarde...

CVE-2025-68613

CVE-2025-68613 — n8n RCE via Expression Injection For educational and authorized security research purposes only. Overview Critical RCE vulnerability CVSS 9.9 in n8n workflow automation platform. Authenticated users can execute arbitrary OS commands via the executeCommand node, bypassing sandbox...

Explotando-FreeFloatFTP-CVE-2025-5548

Exploiting-FreeFloatFTP-CVE-2025-5548 Welcome to my exploit research and development repository. This project documents the full technical analysis, environment setup, and step-by-step exploitation of CVE-2025-5548 Stack-Based Buffer Overflow found in FreeFloat FTP Server. 🌱 Personal note: This...

NoArgs

NoArgs: Manipulating and Hiding Process Arguments Twitter: @AzizWho Disclaimer: Educational Use Only This tool is intended solely for educational purposes. I am not liable for any misuse and all users must adhere to applicable laws. Illegal use is prohibited. Introduction NoArgs is a tool designe...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory α = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md root@kitploit: CTT-Vsyslog-Vortex Temporal...

rootend

rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage root@kitploit: . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |...

rootend

rootend rootend es una herramienta de enumeración y escalada automática de privilegios para sistemas nix. Para una lista completa de nuestras herramientas, visite nuestro sitio webhttps://www.twelvesec.com/ Escrito por: nickvourd twitter maldevel twitter servo Uso root@kitploit: . \ / | | / / | |...

pphack

pphack Advanced Client-Side Prototype Pollution Scanner Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Install 📡 Using Go root@kitploit:...

MiscTools

MiscTools CsExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context of a privileged user. root@kitploit: CsExec.exe Also see TikiService. CsPosh Command Exec / Lateral Movement via PowerShell. Creates a PowerShell runspace on a remote target. Must be...

yatas

YATAS Yet Another Testing & Auditing Solution The goal of YATAS is to help you create a secure AWS environment without too much hassle. It won't check for all best practices but only for the ones that are important for you based on my experience. Please feel free to tell me if you find something...

cuckoo-modified

This is a heavily modified version of Cuckoo Sandbox provided under the GPL. It offers a number of advantages over the upstream Cuckoo: Fully-normalized file and registry names 64-bit analysis Handling of WoW64 filesystem redirection Many additional API hooks Service monitoring Correlates API cal...

Dracnmap

What is Dracnmap ? Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast...

Inveigh

Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers. This repo contains the primary C version as well as the legacy PowerShell version. Overview Inveigh conducts spoofing attacks and hash/credential captures through both packet sniffing and protoc...

CVE-2017-12542-Exploit

HP iLO Authentication Bypass CVE-2017-12542 This repository contains a proof-of-concept exploit for CVE-2017-12542 , an authentication bypass vulnerability affecting certain versions of HP Integrated Lights-Out iLO firmware. The vulnerability allows unauthenticated access to the iLO REST API, whi...