IATelligence

IATelligence IATelligence هو برنامج نصي بلغة Python يستخرج جدول عناوين الاستيراد IAT من ملف PE ويستخدم نموذج GPT-3 من OpenAI لتقديم تفاصيل حول كل واجهة برمجة تطبيقات Windows مستوردة بواسطة الملف. يبحث البرنامج النصي أيضًا عن تقنيات MITRE ATT&CK ذات الصلة ويشرح كيف يمكن للمهاجمين استخدام API...

HookDump

HookDump EDR फंक्शन हुक डंपिंग कृपया अधिक जानकारी के लिए Zeroperil ब्लॉग पोस्ट देखें https://zeroperil.co.uk/hookdump/ स्रोत बनाना इसे बनाने के लिए आपको Visual Studio 2019 कम्युनिटी संस्करण ठीक है और CMake की आवश्यकता होगी। बैच फ़ाइल Configure.bat दो बिल्ड निर्देशिकाएँ बनाएगी जिनमें Visual Studio...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

dcipher

dcipher Decipher hashes using online rainbow & lookup table attack services. Install root@kitploit: ❯❯❯ npm install dcipher Usage root@kitploit: const dcipher = require'dcipher'; dcipher'21232f297a57a5a743894a0e4a801fc3'.thenplaintext = console.logplaintext; //= 'admin' ;...

WordPress ARPrice <3.6.1 - SQL Injection

WordPress ARPrice plugin prior to 3.6.1 contains a SQL injection vulnerability. It fails to properly sanitize and escape user supplied POST data before being inserted in an SQL statement and executed via an AJAX action. An attacker can possibly obtain sensitive information, modify data, and/or...

Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting

The Responsive Pricing Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'planicons' parameter in all versions up to, and including, 5.1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-lev...

WP Pricing Table - Reflected XSS

WP Pricing Table WordPress plugin = 1.1 contains a reflected cross-site scripting caused by unsanitized parameter output, letting attackers execute scripts in the context of high privilege users, exploit requires attacker to craft malicious URL. id: CVE-2024-13628 info: name: WP Pricing Table -...

bn-uefi-helper

bn-uefi-helper ATTENTION: This plugin has been deprecated. See EFI Resolver Description Helper plugin for analyzing UEFI firmware. This plugin contains the following features: Apply the correct prototype to the entry point function Fix segments so all segments are RWX and have the correct semanti...

CVE-2024-37759_PoC

CVE-2024-37759 PoC Description DataGear version 5.0.0 and earlier has a SpEL expression injection vulnerability that leads to remote code execution. Exploit CVE Exploit Details When you request the /data/schemaId/tableName/view interface, if the database table does not have a primary key, an...

mtk-su-reverse-cve-2020-0069

mtk-su बस मेरे कुछ नोट्स स्ट्रिंग टेबल binwalk -Xe stringtabledump का उपयोग करके डीकंप्रेस्ड स्ट्रिंग टेबल प्राप्त करें idb में पते से डंप करें 0x1F098 संपीड़ित आकार: 1260 यदि आप idb चाहते हैं तो अपने ईमेल के साथ एक इश्यू खोलें और मैं इसे भेज दूंगा। यदि आप एक्सप्लॉइट को फिर से लिखना चाहते हैं तो ...

ProcessInjection

ProcessInjection यह प्रोग्राम प्रोसेस इंजेक्शन process injection करने के लिए डिज़ाइन किया गया है। वर्तमान में यह टूल 5 प्रोसेस इंजेक्शन तकनीकों का समर्थन करता है। root@kitploit: 1 Vanilla Process Injection 2 DLL Injection 3 Process Hollowing 4 APC Queue 5 KernelCallbackTable Injection यह टूल शेलक...

CVE-2020-2978

CVE-2020-2978 CVE-2020-2978 refrence link for PoC: https://databasesecurityninja.wordpress.com/2020/12/01/cve-2020-2978-rman-audit-table-point-in-time-recovery-not-logged/...

Dagon

Dagon - Advanced Hash Manipulation Named after the prince of Hell, Dagon day-gone is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to...

iOS26.6-CVE-2026-64788

CVE-2026-64788 — Use-After-Free dans IOGPUFamily Composant : Extension noyau IOGPUFamily com.apple.iokit.IOGPUFamily Affecté : iOS / iPadOS 26.6 23G71 et versions antérieures Corrigé dans : iOS / iPadOS 26.6.1 23G83 Type : Use-After-Free dans IOGPUDevice::createresourceiosurface Impact : Corrupti...

solarflare

solarflare Credential Dumping Tool for SolarWinds Orion Blog post: https://malicious.link/post/2020/solarflare-release-password-dumper-for-solarwinds-orion/ Credit to @asolino, @gentilkiwi, and @skelsec for helping me figuring out DPAPI. root@kitploit: ============================================...

CVE-2020-15999

CVE-2020-15999 CVE-2020-15999 Added font with SBIX table based on Arial - https://docs.microsoft.com/en-us/typography/opentype/spec/sbix Crashes in ftview asan.png but somehow cannot bring Chrome to crash Flags are also not correctly set so loadsbitimage is also not called. Weird. Calling it like...

CVE-2024-1071-Docker

CVE-2024-1071 with Docker 🎯 Want to practice with the new WordPress CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2024-1071-Docker.git. 3. Go to the project : cd...

CVE-2026-82538

ILIAS before versions 9.22, 10.10, and 11.3 is affected by a SQL injection in the repository trash table . The sort field from HTTP requests is passed directly into the ORDER BY clause without validation against declared sortable columns. Authenticated users with write permission on any container...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...