1305446 matches found
cupspot-2024-47177
Honeypot de CUPS Resumen Este proyecto implementa un honeypot para capturar intentos de explotación de vulnerabilidades en CUPS Common UNIX Printing System. Específicamente, está diseñado para monitorear intentos de explotación relacionados con CVE-2024-47177. Esta vulnerabilidad permite la...
perf-exploiter
perf-exploiter CVE-2014-2630 In one of our recent penetration tests we have abused a vulnerability affecting a suid binary called "xglance-bin". Part of HP Performance Monitoring solution , it allowed us to escalate our local unprivileged sessions on some Linux RHEL 7.x/8.x systems to root. To be...
MongoDeepDive
🌊 MongoDeepDive Exploit del Protocolo Wire de MongoDB Consciente del Contexto CVE-2025-14847 Analizador Avanzado de Heurísticas para Operaciones de Red Team 💀 Descripción general MongoDeepDive es un escáner de vulnerabilidades asíncrono y analizador forense de alto rendimiento diseñado para...
CVE-2019-19781
CVE-2019-19781 CVE-2019-19781 Attack Triage Script The script can be run on your affected Citrix ADC devices to assist in determining if a compromise has occured. It will quicky capture any associated commands or files that were used as part of the attack unless cleanup has occured: $...
CVE-2021-25646-GUI
CVE-2021-25646-GUI A small demo implemented while learning the C language, with some code referenced from the internet...
adups-get-super-serial
adups-get-super-serial CVE-2015-2231 Proof of Concept The POC I was using to demonstrate CVE-2015-2231 'Get Super Serial'. Was asked by a few people to post it so they could use similar things on other ADUPS firmware based devices which have this vulnerability. Cleaning up the laptop and posting...
vuln_spring_log4j2
vulnspringlog4j2 Vulnerable spring application for testing the log4j2 CVE-2021-44228 Java Version: 1.8 Spring Boot Version: 2.4.0 Spring Core Version: 5.3.1 Log4j Version: 2.13.3 Burp Log...
cve-2018-6574
Este repositorio no tiene un README...
CVE-2021-3560_Polkit
CVE-2021-3560 Polkit Local Privilege Escalation root@kitploit: .--. .-" "-. .--. / .. / .-. .-. / .. \ | | '| / Y \ |' | | | \ \ \ 0 | 0 / / / | \ '- ,.-" "-./, -' / '-' / ^ ^ \ '-' .--'| . ./ |'--. / \ \ / / \ / '. '---' .' \ / '---' \ / \ An automated exploit for the CVE-2021-3560...
external_expact_AOSP10_r33_CVE-2022-25314
Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...
lvi-lfb-attack-poc
PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0551 This repository holds the sources for the LVI-LFB Control Flow Hijacking attack PoC. Contents lvi-cfh-poc - hijack the control flow of another process via line-fill buffer spraying whitepaper Prerequisites 1. Visual Studio 2015 2. A...
n8n_CVE-2025-68613_exploit_payloads
n8nCVE-2025-68613exploitpayloads Expression injection payloads for n8n CVE-2025-68613 RCE LEGAL DISCLAIMER: This content is for educational purposes only. Author bears no responsibility for damages, misuse, or unauthorized exploitation of CVE-2025-68613. Test solely in isolated lab environments o...
docker-cve-2021-41773
CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build root@kitploit: ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh root@kitploit:...
system_bt_AOSP10_r33_CVE-2020-0380
Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...
wordpress-cve-2024-10924-exploit
WordPress CVE-2024-10924 Exploit 📌 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication 2FA. Attackers can exploit this flaw to log in as any user with a valid...
cve-2013-2094
= CVE-2013-2094 code for http://timetobleed.com/a-closer-look-at-a-recent-privilege-escalation-bug-in-linux-cve-2013-2094/ == How to build You need to build the C file of your choice like this: gcc -O2 file-name.c -O2 is required due to how the exploit actually works see the blog post for more...
dirtypipetester
Dirty Pipe Vulnerability Check Dirty Pipe CVE-2022-0847 vulnerability check -Run directly to check the vulnerability status of the system you are testing. -To check the vulnerability status of other kernel versions, run by appending x.xx.xxx at the end...
bpnd-libssh
bpnd-libssh blueintel bpnd-libssh es un escáner remoto multi-hilo para CVE-2018-10933. Requisitos python3 Módulo paramiko Instalación Ejemplo: root@kitploit: apt-get update apt-get install -y libffi-dev libssl-dev pip3 install paramiko Instalación con Docker Para construir el contenedor Docker:...
cve-2024-21762-checker
FortiGate cve-2024-21762-checker This script is used to check for vulnerabilities in Fortigate SSL VPNs based on CVE-2024-21762. It uses Shodan to find vulnerable devices and test their vulnerability. Features Uses Shodan API to find Fortigate devices running SSL VPN on port 10443. Checks the...