vsftpd-cve-2011-2523-detection-signature

Detection Engineering & Vulnerability Research - CVE-2011-2523 vsftpd 2.3.4 A CVE to Detection Signature Engineering Project: researching a disclosed vulnerability, building a fingerprint that identifies it externally, and validating detection quality against real lab targets. !Vulnerability...

kibana-prototype-pollusion

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2026-48907

CVE-2026-48907 - Proof of Concept PoC ⚠️ Disclaimer This repository is created for educational and security research purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments where you have explicit permission to test security...

SAP_CVE-2020-6287_find_mandate

SAPCVE-2020-6287findmandate 作成されたアカウントを確認したり、そのマンデートを見つけるためのチェッカーです。 このスクリプトを使用すると、エクスプロイトRECON.pyを使用した際にアカウントが作成されたかどうかを確認したり、作成されたアカウントのマンデートを見つけることができます。 Exploit: https://github.com/chipik/SAPRECON Quick start: chmod +x ./checkerCVE-2020-6287.sh root@kitploit: - : first value of mandate for...

secveri-cve-2026-50011-negative

This repository does not have a README...

Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-

Informe de Respuesta a Incidentes: Compromiso de TeamCity CVE-2024-27198 Analista: Belal Abdelsalam Fecha: Julio de 2026 Laboratorio/Entorno: CyberDefenders JetBrains 📄 Resumen Ejecutivo Este documento documenta el análisis forense de un servidor JetBrains TeamCity comprometido versión 2023.11.3...

CVE-2025-4428

CVE-2025-4427 & CVE-2025-4428 Scanner de Vulnerabilidades Herramienta avanzada de detección para identificar sistemas vulnerables a la cadena de explotación CVE-2025-4427 y CVE-2025-4428. Este escáner de seguridad ayuda a identificar endpoints vulnerables y demuestra la explotación de prueba de...

log4j-exploit-fork-bomb

log4j-exploit-with-fork-bomb 💣💥💀 Proof of Concept: example of launching a fork bomb on a remote server due to vulnerability CVE-2021-44228 1. Create an attacker's LDAP server server module that will serve string and code payloads payload module 2. Create a victim example victim module and pass a...

CVE-2025-54236

Adobe Magento SessionReaper LFI PoC A simple Python proof-of-concept demonstrating the CVE-2025-54236 SessionReaper vulnerability affecting vulnerable Adobe Magento versions. Educational and authorized security testing only. Features Automatic target URL normalization Random formkey generation Fi...

hello-ReGrade-security

hello-ReGrade-security Una demostración práctica de descubrimiento de vulnerabilidades de día cero conReGrade. Apuntarás una suite de pruebas ordinaria a ReGrade, la grabarás contra un pequeño servicio, la reproducirás contra una segunda copia del mismo servicio , y usarás Claude Code + las...

Vulnerability-scanner

With the increasing reliance of organizations on digital technologies to carry out communication, data storage, and business operations, the threats to cybersecurity have significantly increased. Given the critical role that endpoint security software plays in securing networks and systems, such...

Ubiquiti-CVE

Ubiquiti-CVE ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual...

cve-2017-7494

CVE-2017-7494 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-7494 Image author: https://github.com/opsxcq/exploit-CVE-2017-7494...

Hack-The-Box-Nexus-Findings-Report

🛡️ Hack The Box - Nexus Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Nexus. 🔍 Key Findings Exposed Credentials in Gitea Commit History - Medium Severity Krayin CRM Unrestricted File Upload CVE-2026-38526 - High Severity...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Lab This repository contains a local lab for studying CVE-2026-34197 in Apache ActiveMQ Classic and for comparing a vulnerable instance against a patched build. The repository is organized to support two goals: Reproduce the issue in a tightly controlled, isolated...

cve-2025-24054-lab

CVE-2025-24054 — Detection & Mitigation Lab Project log for a defensive security lab on CVE-2025-24054 , the Windows New Technology LAN Manager NTLM Hash Disclosure Spoofing vulnerability, under the assumption that the affected system cannot be patched short-term. Blue-team educational project...

Cybersecurity-Capstone-Project

Cybersecurity-Capstone-Project Overview This repository contains my Cybersecurity Capstone Project completed as part of NCSC Nashama CyberCamp 11 , delivered in collaboration with IT Security C &T. The project demonstrates a complete vulnerability assessment workflow for two enterprise-level...

vsftpd-cve-2011-2523-lab

Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands-on penetration testing lab demonstrating the identification and exploitation of the VSFTPD 2.3.4 backdoor CVE-2011-2523 on the intentionally vulnerable Metasploitable2 virtual machine using the Metasploit Framework. Disclaimer This proje...

Java-Example

Seal Security — Java Maven Example A minimal, intentionally vulnerable Spring Boot application used to demonstrate, end‑to‑end, how Seal Security remediates a known CVE by replacing a vulnerable dependency with a sealed backported, drop‑in version — with no change to your declared coordinates or...