CVE-2024-21626-demo

CVE-2024-21626-demo Demo per il LT del Container Runtime Meetup 5. Scopo: diffondere la consapevolezza del pericolo di attacco secondo le informazioni pubbliche; l'abuso è severamente vietato. Slides Container Runtime Meetup 5 〜Quella immagine, ti fidi davvero?〜 Ottenere la root dell'host con...

log4j-cve-2021-44228

Playbook dello scanner detector Log4j-CVE-2021-44228 Playbook Ansible per verificare gli host Linux di destinazione utilizzando lo script detector ufficiale Red Hat Log4j per Log4Shell CVE-2021-44228. Detector Red Hat versione 1.3 del 2022-01-10. Il risultato viene salvato in un file txt in...

docker-cve-2022-39253-poc

Lettura file host docker usando cve-2022-39253 poc PoC riproduci ambiente root@kitploit: $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment...

Remote-Buffer-overflow-CVE-2003-0172

Remote-Buffer-overflow-CVE-2003-0172 root@kitploit: ┌──cyberdesu㉿MSI- └─$ python3 buffer.py usage: exploit.py...

CVE-2011-3192

CVE-2011-3192 Запустите с использованием python 3.7 или 3.10 протестировано на них 1. git clone https://github.com/futurezayka/CVE-2011-3192.git 2. cd ./CVE-2011-3192 3. pip install -r requirements.txt 4. python3 exploit.py host tasks пример python3 exploit.py https://example.com 50...

CVE-2023-27163

CVE-2023-27163 PoC CVE-2023-27163, SSRF, request-baskets bis v1.2.1 Anwendungsbeispiel myscript.sh -i 10.10.11.111 -f 'localhost:80' -t 10.10.14.27 -i IP des Zielservers -f IP oder Adresse, an die die durch den SSRF erzeugten Verbindungen geleitet werden sollen -t in dieser Option wird Ihre lokal...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

Mini_httpd-CVE-2018-18778

Vulnerabilidade de leitura arbitrária de arquivos no minihttpd CVE-2018-18778 Minihttpd é um servidor HTTP mínimo que, consumindo poucos recursos do sistema, consegue manter um certo nível de desempenho cerca de 90% do Apache; por isso, é amplamente utilizado por diversos dispositivos IoT...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

CVE-2022-30190

CVE-2022-30190 Использование только Windows Create docx file: $ PoC.py docx your-host-ip Run server directly: $ PoC.py host...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

CVE-2025-32462

CVE-2025-32462 - Sudo Host Bypass Exploit Descoberta Original Esta vulnerabilidade foi descoberta por Rich Mirch. Mais detalhes podem ser encontrados em: https://cxsecurity.com/issue/WLB-2025070022 Sobre Este script é um exploit para CVE-2025-32462, permitindo escalonamento de privilégios ao...

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE-

CVE-2020-13151-POC-Aerospike-Server-Host-Command-Execution-RCE- Referência: https://b4ny4n.github.io/network-pentest/2020/08/01/cve-2020-13151-poc-aerospike.html exploit.py - código python para executar...

cisagov__check-cve-2019-19781.4142e02b

check-cve-2019-19781 🔎🐞 Questa utility determina se un host sembra essere suscettibile a CVE-2019-19781. Requisiti Versioni Python 3.6 e superiori. Si noti che Python 2 non è supportato. Installazione...

webanalyze

webanalyze これはGoで書かれたWappalyzerの移植版です。このツールは高性能になるように設計されており、大量のホストリストをテストすることができます。 Wappalyzerがアプリ定義への公開アクセスを削除したため、webanalyzeは現在enthecから定義を読み込んでいます。 インストールと使用方法 プリコンパイル済みリリース プリコンパイル済みのリリースはこちらから直接ダウンロードできます。 ビルド 自分でビルドする場合： root@kitploit: $ go install -v...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Побег из гостевой в хостовую Januscape — это уязвимость ядра Linux KVM, вызванная состоянием Use-After-Free UAF в x86 Shadow MMU. При уязвимых конфигурациях вредоносная гостевая система может повредить память хоста, что приводит ...

fscan v2.2.1

Fscan 中文 Comprehensive intranet scanning tool for automated vulnerability assessment. Version : 2.2.0 Features Scanning Host Discovery - ICMP/Ping alive detection, B/C segment statistics for large networks Port Scanning - TCP connect scan, 133 built-in ports, port groups web/db/service/all...

Platypus

Platypus Un hub di gestione degli host per flotte di macchine Linux. Installa l'agente Platypus su ogni host che possiedi; l'agente si riconnette al tuo server Platypus tramite TLS + protobuf; dal server ottieni una shell interattiva, gestione dei file e tunneling di rete su ogni host gestito —...

CVE-2026-46370

Fleet (open-source device management platform built on osquery) versions up to 4.84.1 contained an ORDER BY oracle in the labels host-listing endpoint (GET /api/v1/fleet/labels/{id}/hosts). An unvalidated order_key parameter allowed Observer-level users to binary-search long-lived enrollment secr...

CVE-2026-46370 Fleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint

Fleet is an open-source device management platform built on osquery. In versions up to and including 4.84.1, the labels host-listing endpoint GET /api/v1/fleet/labels/id/hosts allowed an authenticated user with the lowest-privilege Observer role to extract host enrollment secrets through a...