redsnarf

root@kitploit: . \ \ | / / / \ | // \ / |\ \ / \ \ \ \ | | \ // // |/ \ | / | | /| | || /\ / /| /| || / / / / / / [email protected] @redsnarf RedSnarf is a pen-testing / red-teaming tool by Ed Williams for retrieving hashes and credentials from Windows workstations, servers and...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root Escape PoC An interactive, multi-step Local Privilege Escalation LPE Proof of Concept PoC targeting the Ubuntu Linux kernel OverlayFS vulnerabilities CVE-2023-2640 / CVE-2023-32629. Unlike standard automated one-liners that trap your...

CVE-2021-38163

CVE-2021-38163 CVE-2021-38163 - exploit for SAP Netveawer SAP NetWeaver Visual Composer 7.0 RT versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass Vulnerability CVE-2026–24061 is a critical weakness in the telnetd service of GNU InetUtils CVE ID : CVE-2026–24061 Severity : Critical CVSS 9.8 Attack Vector : Network Authentication Required : None Impact : Full system compromise root...

GrafanaSCIMalform

Grafana SCIMalform CVE-2025-41115 Descripción general Este repositorio contiene mi investigación sobre la vulnerabilidad CVE-2025-41115 en el componente SCIM de Grafana Enterprise. Consiste en un banco de pruebas con la aplicación vulnerable y el código del exploit. Referencias Solo algunas...

CVE-2023-49543

CVE-2023-49543 Book Store Management System v1.0 - Incorrect Access Control Description : Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating. Vulnerable Product Version : Book Store...

PageTableInjection

PageTableInjection Code Injection, Inject malicious payload via pagetables pml4. Introduction This is just a proof-of-concept of the page table injection technique to inject malicious code into the arbitrary user processes. On Windowsand some modern OSes, every process has a its PML4 a.k.a...

RFCpwn

RFCpwn An SAP enumeration and exploitation toolkit using SAP RFC calls Twitter: @icryo This is a toolkit for demonstrating the impact of compromised service accounts. This PoC is not for use in production environments, no guarantee of stability or support. RFCpwn relies on the pyrfc and the...

CVE-2023-23752

CVE-2023-23752 — Joomla! ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table of Contents Overview Vulnerability Details How It Work...

CSRF-breach

Security breach project - Cross Site Request Forgery Dolibarr 7.0.0 is affected by: Cross Site Request Forgery CSRF. The impact is: allow malitious html to change user password, disable users and disable password encryptation. The component is: Function User password change, user disable and...

CVE-2019-1476

CVE-2019-1476 DoS por sobrescritura arbitraria de archivos en AppXSvc Informé de esta vulnerabilidad de forma independiente a MSRC como parte de mi investigación inspirada en CVE-2019-0841, reportada originalmente por Nabeel Ahmed. Esta vulnerabilidad permite a un usuario normal sobrescribir...

kratos

Chat · Discusiones · Boletín informativo · Documentación · Probar Ory Network · Empleos Ory Kratos es un sistema de gestión de identidad y usuarios API-first para aplicaciones nativas de la nube. Centraliza los flujos de inicio de sesión, registro, recuperación, verificación y gestión de perfiles...

WebView2-Cookie-Stealer

Blog Post Please read this blog post to get more information. Source Code This code is a modified version of Microsoft's WebView2 Code. The current code can be cleaned up and made much better. Demo Launch Example Usage Example Usage Tested on Windows 10 & 11. When the binary is executed...

ScreenConnect-UserEnum

ScreenConnect-UserEnum ConnectWise también conocido como ScreenConnect tiene una vulnerabilidad de enumeración de usuarios. Esta es una herramienta de enumeración de usuarios para eso. CVE-2019-16516 vulnerable = 19.2.24707 ??? realmente no entendí si lo arreglaron en una versión superior...

CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5

CVE-2023-33817 - SQL Injection found in HotelDruid V3.0.5 HotelDruid v3.0.5 are vulnerable to SQL injection. An attacker could issue arbitrary sql command to retrieve data in databases or even execute remote code execution on target database system This is my second repo. Don't beat me if i didn'...

CVE-2023-38831

CVE-2023-38831 A POC demo on CVE-2023-38831 Brief description of vulnerability CVE-2023-38831 is a software vulnerability. The software that was exploited is WinRAR, which is used widely by almost everyone. It is a software that helps different documents or files to make it into small archives zi...

CVE-2024-49328-exploit

CVE-2024-49328-exploit 🌟 Descripción: Este script explota una vulnerabilidad de escalada de privilegios en el plugin FNS de la WP REST API para WordPress. La vulnerabilidad afecta a todas las versiones hasta la 1.0.0 incluida, permitiendo a atacantes no autenticados obtener privilegios de...

CVE-2020-24028

CVE-2020-24028 Description ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. Important Dates Announcement to Vendor: 2020-07-12 Public disclosure date: 2020-08-31 Vulnerability Type Insecu...

kernel-exploits

Exploits del kernel Varios exploits del kernel CVE-2021-22555 Exploit local de root en Linux. Versión actualizada del exploit de theflow para CVE-2021-22555. Se descubrió una escritura fuera de los límites del heap que afecta a Linux desde v2.6.19-rc1 en net/netfilter/xtables.c. Esto permite a un...

kernel-exploits

Kernel Exploits Various kernel exploits CVE-2021-22555 Linux local root exploit. Updated version of theflow's exploit for CVE-2021-22555. A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges or cause a D...