#1Tools for gathering information about targets and identifying attack surfaces.
Kitploit recommended

CVE-2024-46383

CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV

Proof-of-concept for CVE-2025-25279: path traversal in Mattermost Boards allows arbitrary file read via crafted import archive and board duplication.

CVE-2025-52691 Scanner - Detects vulnerable SmarterMail installations (CVSS 10.0 RCE)


This repository contains information related CVE-2023-36085 a host header injection vulnerability discovered in SISQUALWFM version 7.1.319.103, which…

PoC Exploit CVE-2018-6389

Quick tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method.

CVE-2025-10035_GoAnywhere Get RCE

Spectre exploit

Netwrix Account Lockout Examiner 4.1 Domain Admin Account Credential Disclosure Vulnerability

Proof-of-concept exploit for CVE-2024-34470: unauthenticated path traversal in HSC Mailinspector's /public/loader.php, enabling arbitrary file read…

Proof-of-concept exploit for CVE-2024-34471, a path traversal vulnerability in HSC Mailinspector allowing authenticated users to read and delete…

Proof-of-concept exploit for Blind SQL injection in HSC Mailinspector (CVE-2024-34472). Demonstrates arbitrary SQL command execution via unsanitized…

MailMasta wordpress plugin Local File Inclusion vulnerability (CVE-2016-10956)

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

A python exploit to automatically dump all the data stored by the auto-completion plugin of Ametys CMS to a local sqlite database file.

CVE-2024-42346 POC