HikVision-CVE-2017-7921

HikVision-CVE-2017-7921 Identify potential vulnerabilities with CVE-2017-7921 exploit checks or by testing the /onvif-http/snapshot?auth=YWRtaW46MTEK URI on target IP addresses using a multi-threaded approach for faster results. Requirements root@kitploit: python3 Python Pacakges = requests,...

sogen

Sogen runs Windows and Linux programs without a real operating system, and lets you see and control everything they do. Instead of reimplementing thousands of OS APIs, Sogen emulates binaries at CPU and syscall level and runs the real system DLLs , so behavior closely matches the real OS. Every...

CVE-2024-40422

CVE-2024-40422 Implementación en Python/PoC para CVE-2024-40422. Explota una vulnerabilidad crítica de directory traversal en el endpoint /api/get-browser-snapshot de Devika v1 para leer archivos arbitrarios del sistema...

ransomwhere

Ransomwhere A Proof of Concept ransomware sample that encrypts your files to test out your ransomware detection & prevention strategies. If no arguments are provided, ransomwherewill automatically execute the encrypt mode without deleting the original files. I am not responsible for any damage...

ADExplorerSnapshot

ADExplorerSnapshot.py ADExplorerSnapshot.py es un analizador de instantáneas de AD Explorer. Está diseñado como un ingestor para BloodHound a través de BOFHound, y también admite el volcado completo de objetos a NDJSON. AD Explorer te permite conectarte a un DC y explorar datos LDAP. También pued...

wtf

what the fuzz Un fuzzer distribuido, guiado por cobertura de código, basado en instantáneas y multiplataforma, diseñado para atacar objetivos en modo usuario y/o núcleo que se ejecuten en Microsoft Windows y modo usuario de Linux ¡experimental!. Descripción general what the fuzz o wtf es un fuzze...

kernagent

root@kitploit: | | | | | |/ / \ '| ' \ / |/ |/ \ ' | | | / | | | | | | | | | / | | | | ||\|| || ||,|, ||| ||| |/ 🔍 kernagent Turn binaries into conversations — deterministic, auditable, offline-capable. kernagent converts a binary into a portable static snapshot and lets an LLM or your...

gha-lab-5511dc3f73

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of CloudPirates-io/helm-charts at commit...

CVE-2023-26035

CVE-2023-26035 RCE no autenticado en ZoneMinder Snapshots - Exploit PoC alt img Descripción Las versiones de ZoneMinder anteriores a 1.36.33 y 1.37.33 son vulnerables a la ejecución remota de código no autenticada debido a la falta de controles de autorización en la acción de snapshot. Uso...

Collect-MemoryDump

Collect-MemoryDump Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR Collect-MemoryDump.ps1 is a PowerShell script utilized to collect a Memory Snapshot from a live Windows system including Pagefile Collection in a forensically sound manner. Features: ARM64 Support MAGN...

ret-sync

ret-sync ret-sync stands for Reverse-Engineering Tools SYNChronization. It is a set of plugins that help to synchronize a debugging session WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg with a disassembler IDA/Ghidra/Binary Ninja. The underlying idea is simple: take the best from both worlds static and...

adexplorersnapshot-rs

ADExplorerSnapshot-rs Rewrite of ADExplorerSnapshot.py. Outputs a .tar.gz of BloodHound CE JSON files for ingestion. Please see the issues with this project before using it. It's not a drop in replacement yet. Installation Pre-built binaries for Linux and Windows are published in releases Usage...

VMkatz

VMkatz Demasiado grande para robar Llevas tres semanas en un compromiso de equipo rojo. Tu tráfico se arrastra a través de una VPN, luego salta a través de cuatro proxies SOCKS encadenados a través de cajas de salto comprometidas antes de tocar la red objetivo. Cada paquete toma la ruta escénica...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

web_exploit_detector

Web Exploit Detector Introducción Web Exploit Detector es una aplicación Node.js y un módulo NPM utilizada para detectar posibles infecciones, código malicioso y archivos sospechosos en entornos de alojamiento web. Esta aplicación está pensada para ejecutarse en servidores web que alojen uno o má...

Doldrums

Agitarse: moverse en movimientos rápidos e irregulares, latir rápidamente, estar agitado. Doldrums: un período de estancamiento. Doldrums es una herramienta de ingeniería inversa para aplicaciones Flutter orientadas a Android. Concretamente, es un analizador y extractor de información para el...

CVE-2026-100907

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes information disclosure. The attack is possible to be carried out remotely. The exploit has been published and may be used...

CVE-2026-100907

A flaw in the p2pcam Service of Eyeplus 57.0.0.0308 allows for information disclosure via an unknown function within the /snapshot file. This vulnerability can be triggered remotely by an attacker. While the vulnerability is confirmed to be exploitable and an exploit has been published , specific...

gha-lab-677752506e

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of gitroomhq/postiz-app at commit...