#1Configuration auditing, compliance scanning, hardening benchmarks, and drift detection tools.
Kitploit recommended
ailenye/cve-2024-54879CVE-2024-54879
leonardobg/cve-2023-36144Proof-of-concept exploit for CVE-2023-36144 demonstrating unauthenticated backup file download on Intelbras SG 2404 MR L2+ switch, exposing device…
randomrobbiebf/cve-2023-6289Swift Performance Lite <= 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export
jet-pentest/cve-2020-29666Proof-of-concept for CVE-2020-29666: directory listing vulnerability in Lan ATMService M3 ATM Monitoring System 6.1.0 that exposes log files…
angelopioamirante/cve-2022-35899Unquoted Service Path Asus GameSdk
jmaddington/serious-sam---cve-2021-36934-mitigation-for-datto-rmmPowerShell script to apply Microsoft and US CERT mitigation measures for CVE-2021-36934 (Serious SAM) via Datto RMM, with UDF-based status tracking.
yogeswaran6383/cve-2024-57484Proof-of-concept for CVE-2024-57484: directory listing vulnerability in FoxyProxy extension exposing internal file structure and metadata, enabling…
randomrobbiebf/cve-2024-43919YARPP <= 5.30.10 - Missing Authorization
randomrobbiebf/cve-2023-40600EWWW Image Optimizer <= 7.2.0 - Unauthenticated Sensitive Information Exposure via Debug Log
geraldoalcantara/cve-2023-49981School Fees Management System v1.0 - Incorrect Access Control - Directory Listing
armaansidana2003/cve-2025-25616Proof-of-concept demonstrating incorrect access control in Unifiedtransform v2.0, allowing students to modify exam rules via the /exams/edit-rule…
yihtserns/spring-web-without-remotingSpring Web 5.x with `org.springframework.remoting` package removed, to fix CVE-2016-1000027.
dante01yoon/cve-2025-29927Demonstration of CVE-2025-29927: Next.js middleware authentication bypass via x-middleware-subrequest header spoofing. Includes vulnerable and fixed…
andypitcher/log4j_checkerLog4J checker for Apache CVE-2021-44228
geraldoalcantara/cve-2023-49980Proof-of-concept for CVE-2023-49980: directory listing vulnerability in Best Student Result Management System 1.0 allowing unauthorized access to…
austino2000/cve-2024-22534Proof-of-concept demonstrating information leakage in OneinStack deployment tool via exposed endpoints (phpinfo.php, xprober.php, ocp.php) leading to…
verrideo/cve-2024-23774Repository dedicated to CVE-2024-23774, an unquoted Windows service path vulnerability, providing information and potential exploitation details.
furmak331/cve-2025-29927Critical vulnerability in next.js : Bypass middleware authentication
