Lucene search
+L
KitploitRecent

44497 matches found

Kitploit
Kitploit
added 2026/09/09 6:58 p.m.5 views

AegisJava

AegisJava A specialized tool to detect and mitigate CVE-2025-30749 , a critical Remote Code Execution RCE vulnerability in Oracle Java SE. Vulnerability Details CVE : CVE-2025-30749 Severity : High CVSS 8.1 Affected Components : Java 2D Impact : Unauthenticated Remote Code Execution Usage 1. Run...

8.1CVSS7.5AI score0.01095EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.6 views

viper

Viper Frank4DD, @ Mayo 2000 Viper es un cracker de contraseñas de estilo UNIX por fuerza bruta para contraseñas encriptadas con crypt. Ha sido desarrollado a partir del programa Perl viper 1.4 de Hale. Si bien existen otros programas de crack más potentes, este trata sobre el estudio de la...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.25 views

viper

Viper Frank4DD, @ May 2000 Viper is a prute force UNIX-style password cracker for passwords encrypt with crypt. It has been developed from Hale's viper 1.4 Perl program. While there are other more powerful crack programs out, this one is about studying the safety of passwords while hardware speed...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.4 views

egression

Descripción EGRESSION es una herramienta que proporciona una vista instantánea de lo fácil que es subir datos sensibles desde cualquier red. Comienza con un archivo sensible con estos contenidos, que se almacena localmente en texto plano. Este archivo se utiliza para probar los controles de...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.588 views

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.58 views

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

5.7AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.9 views

ofrak

OFRAK OFRAK Consola de Análisis Inverso de Firmware Abierto es una plataforma de análisis y modificación binaria. OFRAK combina la capacidad de: Identificar y desempaquetar muchos formatos binarios Analizar binarios desempaquetados con herramientas de ingeniería inversa probadas en campo Modifica...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.7 views

CVE-2022-43117

Descripción sugerida La aplicación de almacenamiento de contraseñas de Sourcecodester en PHP/OOP y MySQL 1.0 se descubrió que contenía múltiples vulnerabilidades de cross-site scripting XSS a través de los parámetros Name, Username, Description y Site Feature. Información adicional Prueba de...

5.4CVSS6AI score0.00789EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.15 views

apache-flink-directory-traversal.nse

Este repositorio no tiene un README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:58 p.m.6 views

CVE-2026-54900

CVE-2026-54900, CVE-2026-54902 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing...

6.3CVSS6AI score0.00428EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.12 views

Eris

Eris Eris es una estación de trabajo PGP de escritorio escrita en Go con Fyne. Almacena las claves en una bóveda cifrada y t...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.4 views

cve-2018-8120

CVE-2018-8120 win7 x64 Reference https://github.com/unamer/CVE-2018-8120 https://github.com/FuzzySecurity/PSKernel-Primitives...

7.2CVSS7.2AI score0.73721EPSS
SaveExploits18References2
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.4 views

CVE-2013-2730

CVE-2013-2730...

10CVSS5.2AI score0.78757EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.6 views

OsirisJailbreak12

OsirisJailbreak12 iOS 12.0 - 12.1.2 Incomplete Jailbreak with CVE-2019-6225 An incomplete iOS 12 Jailbreak. For now it only runs the exploit, gets tfp0, gets ROOT, escapes the SandBox, writes a test file to prove the sandbox was escaped then resprings. Feel free to build on top of it as long as y...

7.8CVSS7.8AI score0.28757EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.7 views

mssqlbof

mssqlbof Un conjunto de Beacon Object Files para Microsoft SQL Server que habla directamente TDS 7.4 en el cable, en C. Sin msodbcsql.dll, sin sqloledb.dll, sin .NET CLR, sin PowerShell. Un COFF por arquitectura, se carga en cada beacon que respeta la API Beacon canónica. Por qué SQL Server apare...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.5 views

CVE-2026-3300

CVE-2026-3300 - Everest Forms Pro Unauthenticated Stored Cross-Site Scripting Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: CRITICAL CVSS: 9.8 Impact: Confidentiality, Integrity, Availability Published:...

9.8CVSS6.7AI score0.39159EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.12 views

Joomla-3.4.6---configuration.php-Remote-Code-Execution

Joomla-3.4.6---configuration.php-Remote-Code-Execution Affected versions: 3.0.0-3.4.6 1. Vulnerability verification python3 Joomla-3.4.6-RCE.py -t http://172.20.10.4 If "Vulnerable" is displayed, the vulnerability exists. python3 test.py -t http://127.0.0.1:8080/ --exploit --lhost 192.168.31.126...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.6 views

F5-Big-IP-CVE-2020-5902-mass-exploiter

F5-Big-IP-CVE-2020-5902-mass-exploiter F5 Big-IP CVE-2020-5902 explotador/fuzzer masivo. uso: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...

10CVSS7.5AI score0.99999EPSS
SaveExploits62
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.5 views

OWASP-Learning-Gateway

The OWASP Learning Gateway Project...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.7 views

SuperDiagnosticTool

SuperDiagnosticTool AI-Powered Windows Diagnostic & Self-Healing Tool SuperDiagnosticTool is an intelligent system diagnostic utility that combines real-time hardware telemetry with Google Gemini AI to analyze, diagnose, and automatically remediate Windows system issues. Built with a safety-first...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.11 views

Auto_EAP

AutoEAP Introduction Published Sepetember 15, 2016 AutoEAP.py is a script designed to perform automated brute-force authentication attacks against various types of EAP networks. These types of wireless networks provide an interface to facilitate password guessing of domain credentials as radius...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.9 views

Shell3er

Shell3er Shell3er PowerShell Reverse Shell The Shell3er Reverse Features Get-RandomProcessName Function The Get-RandomProcessName function generates a random process name by concatenating "PS" with a new GUID. This is used to create unique and seemingly random process names, making it harder to...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:57 p.m.7 views

UnderlayCopy

UnderlayCopy UnderlayCopy is a PowerShell utility for low-level NTFS acquisition and dumping protected, locked system artifacts for example: SAM , SYSTEM , NTDS.dit , registry hives , and other files that are normally inaccessible while Windows is running. It supports two complementary modes to...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.5 views

Cisco-CVE-2025-20281-illdeed

CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit This repository contains a Python 3 proof-of-concept exploit for CVE-2025-20281 , a critical vulnerability in Cisco Identity Services Engine ISE that allows unauthenticated remote code execution RCE as root via the ERS API. 🩻...

10CVSS8.5AI score0.97093EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.6 views

compromised-packages

Este repositorio no tiene un README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.5 views

sony-vp-extract

Sony WH-1000XM4 Extractor de Paquetes de Voz Descifra y extrae las indicaciones MP3 de guía de voz de los archivos de firmware cifrados de los Sony WH-1000XM4. La clave AES-128-CBC se ob...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.4 views

rover

rover Proof of Concept code for CVE-2016-5696 Rover is a small python program to discover abitrary client source ports as shown in CVE-2016-569. Once the source port is known, the 4 tuple of information needed to confirm that two host are communicating can be completed. When run, rover establishe...

5.8CVSS7AI score0.15073EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.2 views

CVE-2020-16898

CVE-2020-16898: “Bad Neighbor” CVSS Score: 8.8 CVSS Vector: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced an exceptionally critical vulnerability in the Windows IPv6 stack, which allows an attacker to send maliciously crafted packets to...

8.8CVSS8.1AI score0.1094EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.11 views

CANToolz

CANToolz alias YACHT Otra Herramienta de Hacking de Automóviles CANToolz es un framework para analizar redes y dispositivos CAN. Proporciona múltiples módulos que pueden encadenarse usando el sistema pipe de CANToolz y ser utilizados por investigadores de seguridad, probadores de seguridad...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.16 views

SecureCodingDojo

About the Secure Coding Dojo The Secure Coding Dojo is a platform for delivering secure coding training. While it comes with its own vulnerable training application the Insecure.Inc website the training portal can be used in conjunction with other training applications. The strength of the platfo...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.246 views

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

5.9AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.7 views

test

test CVE-2018-17456 Reproduction...

9.8CVSS8.1AI score0.97356EPSS
SaveExploits12
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.6 views

CVE-2025-0108-Authentication-Bypass-checker

This tool tests whether a target PAN-OS device is vulnerable to the CVE-2025-0108 authentication bypass vulnerability . It sends a crafted HTTP request to the target and analyzes the response to determine if the device is exploitable. Usage single ip root@kitploit: python authbypasscve20250108.py...

9.1CVSS8AI score0.98455EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.7 views

CVE-2022-41358

Exploit Title: Garage Management System 1.0 - 'categoriesName' - Stored XSS Exploit Author: Sam Wallace Software Link: https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html Version: 1.0 Tested on: Debian ID: CVE-2022-41358 Summary:...

5.4CVSS5.9AI score0.0312EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.6 views

CVE-2023-2516

CVE-2023-2516: Stored XSS Vulnerability in Teampass 3.0.6 - M Nadeem Qazi Hey everyone, I wanted to share with you a vulnerability that I discovered in Teampass, a password management software. I found a stored XSS vulnerability CVE-2023-2516 that allows attackers to inject malicious code into...

5.4CVSS6.4AI score0.00612EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.8 views

CVE-2021-41730

TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.7 views

bat

Behavioral Adversary Tracer BAT BAT is a realistic, evolving adversary threat model for Linux and Windows. It is not a C2 framework and it is not a rootkit. It is a complete threat simulation platform that integrates C2 communication, kernel-level stealth rootkit modules, userspace evasion,...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.10 views

silph

SILPH: Recolector de Contraseñas Local Sigiloso en Memoria SILPH es una herramienta de red team de código abierto diseñada para volcar secretos LSA, hashes SAM y credenciales DCC2 completamente en memoria, sin escribir ningún archivo en disco. A diferencia de su proyecto ascendente go-secdump ,...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.49 views

terrier

Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.8 views

terrier

Terrier Terrier es una herramienta de análisis de imágenes y contenedores que se puede utilizar para escanear imágenes OCI y contenedores para identificar y verificar la presencia de archivos específicos según sus hashes. Un artículo detallado sobre Terrier se puede encontrar en el blog de Heroku...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.10 views

capa

Sitio web | Descargar | Interfaz web capa detecta capacidades en archivos ejecutables. Lo ejecutas contra un PE, ELF, módulo .NET, shellcode o un sandbox report y te dice lo que cree que el programa puede hacer. Por ejemplo, puede sugerir que el archivo es un backdoor, es capaz de instalar...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/09 6:56 p.m.13 views

capa

Website | Download | Web Interface capa detects capabilities in executable files. You run it against a PE, ELF, .NET module, shellcode file, or a sandbox report and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing...

5.9AI score
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.4 views

CVE-2021-45010

CVE-2021-45010 Título del Exploit: Tiny File Manager 2.4.6 Autenticado Ejecución Remota de Código Fecha: 04 Mar 2023 Autor del Exploit: Syd Software Enlace: https://github.com/prasathmani/tinyfilemanager Versión: Tiny File Manager = 2.4.3 Probado en: Parrot OS 20.04 CVE : CVE-2021-45010 Referenci...

8.8CVSS7.8AI score0.7008EPSS
SaveExploits8References1
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.5 views

CVE-2024-24919

EN Is a Proof of Concept PoC script to check for vulnerability CVE-2024-24919. The script is designed to send HTTP POST requests to specified URLs and analyze the responses for possible security issues, like unauthorized access or sensitive data leaks. The script provides a simple yet powerful wa...

8.6CVSS7.9AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.6 views

Klyda

El proyecto Klyda ha sido creado para ayudar en ataques rápidos basados en credenciales contra aplicaciones web en línea. Klyda soporta el uso desde simples rociados de contraseñas hasta grandes ataques de diccionario multihilo. Klyda es un proyecto nuevo, y estoy buscando contribuciones. Cualqui...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.6 views

Maestro

Maestro Maestro is a post-exploitation tool designed to interact with Intune/EntraID from a C2 agent on a user's workstation without requiring knowledge of the user's password or Azure authentication flows, token manipulation, and web-based administration console. Maestro makes interacting with...

5.8AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.25 views

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.173 views

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

6.1AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.136 views

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser...

5.8AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 6:55 p.m.11 views

instantbox

Es | 简 | 繁 instantbox Obtén una caja Linux limpia y lista para usar en segundos. Introducción ¿Qué es instantbox?...

5.8AI score
SaveExploits0References2
Total number of security vulnerabilities44497