CVE-2020-24029

CVE-2020-24029 Description Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Incorrect...

dawgmon

dawgmon - Dawg the Hallway Monitor SUMMARY The name of this tool is based upon an episode season 10, episode 10 of South Park in which Cartman is Dawg the Hallway Monitor patrolling the hallways of his school. It's a tool which helps one to monitor changes which have taken place on a Linux-based...

CVE-2020-1472

CVE-2020-1472 POC Requires the latest impacket from GitHub with added netlogon structures. Do note that by default this changes the password of the domain controller account. Yes this allows you to DCSync, but it also breaks communication with other domain controllers, so be careful with this! Mo...

PrivacyNet

PrivacyNet: Privacy Network PrivacyNet is an anonymization tool that configures iptables and Tor to route all services, traffic and DNS through the Tor network. This tool allows users to route internet traffic through Tor and hide their real IP address. Features Installing and removing iptables...

CVE-2019-5736-Dockerattack-and-security-mechanism

CVE-2019-5736-attack-and-security-mechanism In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it. Introduction Cyber-attacks have become a critical challenge for both companies and small businesses, largely due to vulnerabilitie...

fingerprint

fingerprint 监控Windows中的注册表和文件更改 - 针对Windows注册表和文件的取证分析 "fingerprint" 记录 Windows 系统在文件和注册表方面的状态。 此类指纹可相互比较，以发现所有已更改的数据。 可借助 procmon 日志文件来缩小数据范围，从而查看是哪个进程导致了更改。 Procmon 日志文件可进行过滤，仅显示已更改文件或注册表项的事件。 这使得查找系统更改的原因更加容易。 所有指纹均以 CSV 格式（与 Excel 兼容）存储，便于过滤、排序等操作。 您也可以使用第三方工具（如 "Meld"、"FC"、"diff"）来比较指纹。...

CVE-2023-28810

CVE-2023-28810 Exploit code for CVE-2023-28810. udp-config-changer.py Change the running configuration of a target hikvision intercom without needing any authentication. udp-password-brute.py Attempt to recover the admin password for the device via brute force guessing wordlist not supplied...

CVE-2020-1472

CVE-2020-1472 POC Requiere la última versión de impacket desde GitHub con estructuras netlogon añadidas. Tenga en cuenta que por defecto esto cambia la contraseña de la cuenta del controlador de dominio. Sí, esto le permite realizar DCSync, pero también rompe la comunicación con otros controlador...

port-scan-automation

LazyMap - Auto NMAP Scanning Script Automate NMAP scans and custom Nessus polices. Developed by Daniel Compton https://github.com/commonexploits/port-scan-automation.git Released under AGPL see LICENSE for more information Installing root@kitploit: git clone...

CVE-2021-41074

CVE-2021-41074 CSRF in Qloapps HotelCommerce 1.5.1 There is a CSRF in HotelCommerce 1.5.1. It can allow anyone to change the admin email. If an attacker gets an admin to click a maliciously crafted html document, they can change the admin user email...

CVE-2023-34732

CVE-2023-34732 Authenticated Function Abuse for Account Takeover Description An attacker can brute-force any user's password including admins using the userId parameter in the change password functionality and update the user's password to a new one chosen by the attacker. CVSS Score: 8.8 High...

CVE-2023-46449

CVE-2023-46449 Control de Acceso Incorrecto ENLACE DEL VIDEO POC https://www.youtube.com/watch?v=H5QnsOKjs3s Sourcecodester Free and Open Source inventory management system v1.0 es vulnerable a Control de Acceso Incorrecto. Un usuario arbitrario puede cambiar la contraseña de otro usuario y tomar...

DLLPasswordFilterImplant

DLLPasswordFilterImplant DLLPasswordFilterImplant es un DLL personalizado de filtro de contraseñas que permite capturar las credenciales de un usuario. Cada evento de cambio de contraseña en un dominio activará el DLL registrado para exfiltrar el nombre de usuario y el nuevo valor de la contraseñ...

CVE-2025-5095-POC

How To Use: Open Login.htm and edit the places where IP:PORT is to the victim address Edit the var LoginVersion = "Check On The Victim Site"; part to the victim page version, by this, you can visit the victim page and view as source WARNING: THIS CVE ONLY WORKS ON VERSIONS OLDER THAN 1.0.60...

cve-2023-46813-poc

CVE-2023-46813 PoC 1. Aplica los parches de la carpeta host-patches al host Linux y a QEMU. 2. Inicia una VM SEV-SNP. 3. Ejecuta el código de este repositorio y espera el mensaje "waiting for the hypervisor to change memory to MMIO". 4. Ejecuta repetidamente el comando attack en QEMU varias veces...

jsmon

JSMon JSMon - 用于 BugBounty 的 JavaScript 变更监控器 使用此脚本，你可以配置你想要监控的网站上的多个 JavaScript 文件。每次运行此脚本时，这些文件将被获取并与之前获取的版本进行比较。如果它们发生了变化，你将通过 Telegram 收到通知，消息中包含脚本链接、更改的文件大小以及用于轻松检查更改的差异文件。 安装 要安装 JSMon： root@kitploit: git clone https://github.com/robre/jsmon.git cd jsmon python setup.py install 你需要在环境中设置...

clusterfuzzlite

ClusterFuzzLite ClusterFuzzLite is a continuous fuzzing solution that runs as part of Continuous Integration CI workflows to find vulnerabilities faster than ever before. With just a few lines of code, GitHub users can integrate ClusterFuzzLite into their workflow and fuzz pull requests to catch...

CVE-2026-73730

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system...

EUVD-2026-69434

Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to complete state-changing actions that should not be allowed by their current level of authorization on the platform, includin...

EUVD-2026-69433

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to obtain limited system information and to change the state of certain settings of a vulnerable system. Successful exploitation could allow an attacker to gain insight into internal servic...