lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

Email-Extract

Email-Extract - Tool for extracting emails from enumerated websites! UPDATE : Converted to CLI tool, added format option to format lists other than dirb generated ones, Email-Extract is a simple tool I wrote to help extract emails from websites for OSINT research. Simply enumerate it with a commo...

CVE-2022-34265

CVE-2022-34265 PoC for CVE-2022-34265 Description An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and...

frida-ipa-extract

frida-ipa-extract This project was inspired by frida-ios-dump. Since I recently encountered problems with that tool, I decided to create frida-ipa-extract with greater robustness and additions to address problems we face today. Extract a decrypted .ipa from a jailbroken iOS device using Frida...

CVE-2026-85396

A flaw was found in rubyzip. This path traversal vulnerability in the Zip::Entryextract function allows a remote attacker to craft malicious archive entries. By failing to properly validate extraction paths, the vulnerability enables an attacker to write files outside the intended extraction...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database root@kitploit: python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key...

CVE-2026-85396

rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract. The root cause is that extraction paths are validated using prefix comparison without trailing separators , allowing attackers to craft archive entries with names like ../upload_backup/owned.sh that bypass...

EUVD-2026-70673

rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entryextract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can craft archive entries with names like ../uploadbackup/owned.sh to write files outside the...

CVE-2026-85396 rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix

rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entryextract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can craft archive entries with names like ../uploadbackup/owned.sh to write files outside the...

uefi-firmware-parser

UEFI Firmware Parser .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser The UEFI firmware parser is a simple module and set of scripts for parsing, extracting, and recreating UEFI firmware volumes. This...

CTF_Django_CVE-2022-34265

CTFCVE-2022-34265 Description Un problème a été découvert dans Django 3.2 avant 3.2.14 et 4.0 avant 4.0.6. Les fonctions de base de données Trunc et Extract sont sujettes à l'injection SQL si des données non fiables sont utilisées comme valeur kind/lookupname. Les applications qui limitent le cho...

nuubi

Nuubi Tools Scanner, Recon. Details root@kitploit: Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract link...

CVE-2022-34265

CVE-2022-34265 Usage start root@kitploit: docker-compose build docker-compose up -d stop root@kitploit: docker-compose down PoC verification of Django vulnerability CVE-2022-34265 A vulnerability CVE-2022-34265 in Django was disclosed on July 5, 2022 US time. This article describes our discussion...

ROOT-APP-NPM-CVE-2026-56876 CVE-2026-56876 in extract-zip - Patched by Root

Root has patched CVE-2026-56876 in the extract-zip package for Root:npm. Multiple fixed versions available...

CVE-2026-23907

ثغرة اجتياز المسار في Apache PDFBox ملخص الثغرة الوصف لا يقوم الكود المثال ExtractEmbeddedFiles في Apache PDFBox بتعقيم أسماء الملفات عند استخراج الملفات المدمجة من ملفات PDF. يمكن للمهاجم تضمين ملفات تحتوي على تسلسلات اجتياز المسار ../ لكتابة ملفات في مواقع عشوائية على نظام الملفات. الكود المعرض...

CVE-2022-34265

CVE-2022-34265 Résumé de la vulnérabilité Cette vulnérabilité est due à un traitement incorrect des chaînes lors de l'exécution de SQL pour les arguments des fonctions Trunc et Extract utilisées pour les données de date dans Django. En spécifiant les paramètres de requête tels quels dans l'argume...

CVE-2026-15741

A SQL injection flaw in PostgreSQL's EXTRACT expression deparser allows an authenticated object owner to execute arbitrary SQL commands with superuser privileges. By defining a hostile database object, an attacker can achieve privilege escalation when deparsing tools like pgdump or psql inspect o...

gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

CVE-2026-9548

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write restricted files and conduct limited denial-of-service attacks...

CVE-2026-40541

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in extract domain in Synology Chat Server before 2.4.5-22148 allows remote authenticated users, via a UI interaction, to read or write arbitrary files and conduct denial-of-service attacks in DSM...