dotnetpaddingoracle

dotnetpaddingoracle .NET Web アプリケーションが padding Oracle に対して脆弱かどうかをチェックする小さなスクリプトです。 このスクリプトは、パッチが適用されたかどうかだけでなく、オラクルが存在し悪用可能かどうかを実際に検証します。 使い方 root@kitploit: dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER Burp request file Perform the padding Oracle attack on .NET web application positional...

LoGiC.NET

소개 LoGiC.NET은 dnlib을 사용하는 무료 오픈 소스 .NET 난독화 도구입니다. 현재 재작성 중입니다. 종속성 dnlib v3.6.0...

CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit

CVE-2026-56158 — .NET Framework リモートコード実行（RCE）PoC エクスプロイト 深刻（CVSS 9.8） — Microsoft .NET Framework & .NET Runtime における信頼されないデータの逆シリアル化（CWE-502） 修正日: 2026年7月14日 | 発見者: Positive Technologies PT-2026-60174 目次 概要 脆弱性の詳細 影響を受けるバージョン 攻撃ベクトル エクスプロイトのアーキテクチャ ファイル構成 インストール ステップバイステップの使用方法 テスト 検出とハードニング 緩和策...

NashaVM

NashaVM - Native Sharp Virtual Machine Nasha는 .NET 파일을 위한 가상 머신이며, 그 런타임은 C++/CLI로 작성되었습니다. 설치 root@kitploit: git clone https://github.com/Mrakovic-ORG/NashaVM --recurse cd NashaVM\NashaVM nuget restore msbuild 종속성 dnlib .NET Framework Visual C++ 재배포 가능 패키지 FAQ 이 프로젝트는 무엇을 위한 것인가요? 이 프로젝트는 관리되는...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

Watson

Watson Watson은 누락된 KB를 열거하고 권한 상승 취약점에 대한 익스플로잇을 제안하도록 설계된 .NET 도구입니다. 지원되는 버전 Windows 10 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004 Server 2016 및 2019 사용법 root@kitploit: C:\ Watson.exe / / /\ \ \ | | \ / / / | / |/ | ' \ \ /\ / | | |\ \ | | | | / / ,||//|| || v2.0...

AVIator

AviAtor가 NETCore 5로 포팅되었으며 UI가 업데이트되었습니다. AV|Ator 정보 ://이름 AV : 안티바이러스 Ator : 검사, 연금술사, 과학자, 마술사, 학자, 엔지니어이며 때로는 무에서 물체를 만들어낼 수 있는 능력을 가진 존재입니다 https://en.wikipedia.org/wiki/Ator 정보 ://목적 AV|Ator 는 백도어 생성 유틸리티로, 암호화 및 인젝션 기술을 사용하여 AV 탐지를 우회합니다. 자세히: AES 암호화를 사용하여 주어진 셸코드를 암호화합니다. 암호화된 페이로드를 포함하는 ...

dnSpy

dnSpy - 최신 릴리스 dnSpy는 디버거이자 .NET 어셈블리 편집기입니다. 소스 코드가 없어도 어셈블리를 편집하고 디버깅할 수 있습니다. 주요 기능: .NET 및 Unity 어셈블리 디버깅 .NET 및 Unity 어셈블리 편집 밝은 테마 및 어두운 테마 자세한 기능은 아래를 참조하세요 바이너리 https://github.com/dnSpy/dnSpy/releases 빌드 root@kitploit: git clone --recursive https://github.com/dnSpy/dnSpy.git cd dnSpy or...

CVE-2022-26503

CVE-2022-26503 概要: Veeam Agent for Microsoft Windows の脆弱性 CVE-2022-26503 は、ローカルでの権限昇格を可能にします。この脆弱性の悪用に成功した攻撃者は、LOCAL SYSTEM 権限で任意のコードを実行できる可能性があります。 @ultrayoba に感謝します。 パッチ: 実装されたパッチは、逆シリアル化の痕跡を示しています: Veeam 公式 KB の記載: Veeam Agent for Microsoft Windows は、Microsoft .NET...

dns-benchmark-tool

⚠️ 이 프로젝트는 이동되어 더 이상 유지되지 않습니다. 후속 버전 설치: pip install net-benchmark 저장소: https://github.com/net-benchmark/net-benchmark 모든 기존 명령과 플래그는 완전히 호환됩니다. DNS 벤치마크 도구 BuildTools - 네트워크 성능 제품군의 일부 DNSSEC 검증, DoH/DoT 지원 및 엔터프라이즈 기능을 갖춘 빠르고 포괄적인 DNS 성능 테스트 bash pip install dns-benchmark-tool dns-benchmark...

CVE-2026-97989

In the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vdusevalidateconfig only checks the upper bound of vqalign. Invalid values can therefore reach vringcreatevirtqueuemap. The split-ring helpers use align - 1 as a bit mask, so the alignment must...

UBUNTU-CVE-2026-97959

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsroute: free emptied bucket on filter move route4change can move an existing filter to a different top-level bucket: route4setparms recomputes the handle from TCAROUTE4TO/ FROM/IIF, and the handle-mismatch check is...

Linux Distros Unpatched Vulnerability : CVE-2026-98026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: mcast: properly convert mglist to rcu Sashiko reported a bug 1 that brmulticastdelportgroup unlists the port group not using proper rcu helper that...

Linux Distros Unpatched Vulnerability : CVE-2026-98099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: mcast: use rcuassignpointer for rcu list updates Several places in net/ipv6/mcast.c update RCU-protected lists np-ipv6mclist, idev-mclist, idev-mctomb usi...

CVE-2026-97613

In the Linux kernel, the following vulnerability has been resolved: net: mana: Reserve extra CQ slot for the fence completion CQE The RX completion queue is sized to hold exactly one CQE per posted RX WQE. MANAFENCERQ makes hardware post an additional CQERXOBJECTFENCE after the packet CQEs. The...

CVE-2026-98104

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: fix duplicate handle when node ID pool is exhausted gennewkid falls back to returning max htid | 0xFFF when both idrallocu32 ranges are full, instead of reporting an error. u32change trusts that value and inser...

CVE-2026-97981

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Count dropped frames as NAPI work The RX loop only consumes budget when it successfully delivers a frame. Error paths keep consuming descriptors without reducing the budget, so a stream of bad frames can...

CVE-2026-98070

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDSINXMIT in rdstcpresetcallbacks rdstcpresetcallbacks quiesces the transmit path by setting the path state to RDSCONNRESETTING and then waiting for RDSINXMIT to be sampled clear before swapping the underlying...

UBUNTU-CVE-2026-97958

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsapi: Don't replay RTMGETCHAIN in tcctlchain. If a netlink socket sends RTMGETCHAIN requests repeatedly without recving the responses, tcctlchain hogs CPU and triggers Hung Task splat. 0 As caught in the stack trace,...

CVE-2026-97618

In the Linux kernel, the following vulnerability has been resolved: iouring/net: don't overconsume buffers when using MSGTRUNC When a recv/recvmsg is issued with MSGTRUNC and the incoming packet is larger than the provided buffer, the net layer returns the full length of the packet rather than th...