CVE-2026-23980-Exploit

CVE-2026-23980 - Apache Superset Authenticated SQL Injection root@kitploit: / \ | | | | | || | \\ sqlExpression goes straight to the query. no parameterization. no hope. Apache Superset ChartDataRestApi.data - QueryContext.getdfpayload - SqlaTable.getsqlaquery - adhoc column sqlExpression /...

memguard

MemGuard メモリ内の機密情報を保存するためのソフトウェアエンクレーブ。 このパッケージは、機密データがメモリ上に露出する可能性を低減することを目的としています。主要なオペレーティングシステムすべてをサポートするよう設計されており、純粋なGoで記述されています。 機能 機密データはメモリ上でXSalsa20Poly1305により暗号化および認証されます。使用されている方式はコールドブート攻撃に対しても防御します。 メモリ割り当てはシステムコールを使用してカーネルに直接リソースを要求することで、言語ランタイムをバイパスします。これによりガベージコレクタの干渉を回避します。...

memguard

MemGuard Software enclave for storage of sensitive information in memory. This package attempts to reduce the likelihood of sensitive data being exposed when in memory. It aims to support all major operating systems and is written in pure Go. Features Sensitive data is encrypted and authenticated...

cve-2024-23113-poc

CVE-2024-23113-poc CVE-2024-23113 is a vulnerability discovered in the Linux Kernel , classified as an arbitrary code execution vulnerability that affects the bpf Berkeley Packet Filter subsystem. Specifically, this vulnerability affects objects of the bpfprog type in bpf programs, and can allow ...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

CVE-2023-28432

CVE-2023-28432 Minio is an object storage service written in Go. It implements most of the Amazon S3 cloud storage service interfaces and can be seen as an open-source version of S3, making it very suitable for storing large volumes of unstructured data such as images, videos, log files, backup...

cloudsplaining

Cloudsplaining Cloudsplainingは、AWS IAMの最小権限の違反を特定し、リスク優先度でソートされたHTMLレポートを生成するAWS IAMセキュリティ評価ツールです。 サンプルレポート ドキュメント 完全なドキュメントについては、ReadTheDocs上のプロジェクトをご覧ください。 インストール チートシート サンプルレポート 概要 Cloudsplainingは、AWS...

gh-repo-clone-marklindsey11--CVE-2021-44228_scanner-Applications-that-are-vulnerable-to-the-log4j-CV

-My intention was to concieve of a novel, and effective, policy-based data science framework to optimize a massively distributed alternative data landscape. By leveraging emerging critical new technological advances in operations and core processes, integrated natively, in an architecture which...

CVE-2026-27579-CollabPlatform-Appwrite-CORS-Misconfiguration

Appwrite CORS Misconfiguration Exploit PoC CVE-2026-27579 – Credentialed Account Data Leak via Permissive CORS CVE-2026-27579 GHSA-qh5m-p8jh-hx88 A severe CORS misconfiguration in the Appwrite backend used by the realtime-collaboration-platform allows an attacker-controlled origin to read sensiti...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

CVE-2023-22515-joaoviictorti

CVE-2023-22515 Overview Compile Usage Running CVE-2023-22515 Overview Confluence is a web-based enterprise wiki developed by Australian software company Atlassian. Atlassian has been made aware of an issue reported by some customers where external attackers may have exploited a previously unknown...

refinery

Binary Refinery root@kitploit: High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / Binary Refinery™ 是一系列 Python 脚本的集合，用于实现二进制数据的转换，例如压缩和加密。 我们通常将其简称为...

ghostlock-aresin

GhostLock CVE-2026-43499 — POCO F3 GT aresin Data-only physmap overwrite exploit for MediaTek Dimensity 1200 MT6893. Kernel: 4.14.186-android13 / MIUI V14.0.4.0.TKJCNXM. ⚠️ Prerequisites Device : POCO F3 GT / Redmi K40 Gaming Edition codename: aresin Chipset : MediaTek Dimensity 1200 MT6893 OS :...

vulnx

vulnx 用于探索漏洞数据的现代 CLI，支持强大的搜索、过滤和分析功能 快速开始 root@kitploit: 1. Get vulnx go install github.com/projectdiscovery/vulnx/v2/cmd/vulnx@latest 2. Explore commands vulnx --help vulnx search --help 3. Start exploring vulnerabilities no API key required vulnx filters See all available search fields vulnx...

CVE-2022-26134

CVE-2022-26134 POC Description root@kitploit: In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. POC 1. Run python3 confluence.py -...

vaas

Verdict-as-a-Service Verdict-as-a-Service VaaS is a cloud service that provides capabilities to scan files for malware and other threats. It allows you to easily integrate malware detection in your application with a few lines of code. You can use VaaS to secure any scenario where a file is...

SharePointDumper

SharePointDumper SharePointDumper is a PowerShell-based extraction and auditing utility that enumerates SharePoint sites a user can access via Microsoft Graph and downloads files via SharePoint. It is designed for SOC / DLP testing, purple teaming, and non-sophisticated red-team assessments, and...

XenoScan

XenoScan XenoScan is a memory scanner which can be used to scan the memory of processes to locate the specific locations of important values. These types of tools are typically used when hacking video games, as they allow one to locate the values representing the game's state in memory. XenoScan ...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

Octopii

Octopii root@kitploit: ⠀⠀⠀⠀⠀⠀⠀⣤⣤⣄⣀⡀⠀⠀⠀⢀⣠⣤⣤⣄⡀⠀⠀⠀⢀⣀⣠⣤⣤⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠸⣿⣿⡿⠿⢿⣷⡄⢠⣿⣿⣿⣿⣿⣿⡄⢀⣾⡿⠿⢿⣿⣿⠇⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠈⠉⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠉⠁⠀⠀⠀⠀⠀⠀⠀⠀⠀ ⠀⣠⣤⡀⠀⠀⠀⠀⠀⠀⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⠀⠀⠀⠀⠀⠀⢀⣤⣄⠀⠀⠀ ⠸⣿⣿⣿⣿⣿⣿⣿⣿⣦⠀⢸⣿⡇⢸⣿⣿⣿⣿⣿⣿⡇⢸⣿⡇⠀⣴⣿⣿⣿⣿⣿⣿⣿⣿⠇⠀⠀ ⠀⠉⠉⠁⠀⠀⠀⠀⣿⣿⠀⢸⣿⡇⠀⠉⣿⣿⣿⣿⠉⠀⢸⣿⡇⠀⣿⣿⠀⠀⠀⠀⠈⠉⠉⠀⠀ ⠀⠀⠀⠀⠀⠀⠀⠀⣿⣿⣀⣈⣻⣿⣿⣿⣿⣿⣿⣿⣿⣿⣿⣟⣁⣀⣿⣿⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀...