182381 matches found
mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header
A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...
gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
staekka
Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...
CVE-2021-25461
CVE-2021-25461 This is a repo with the Proof of Concept for the CVE discovered for the SAUSAGE Security Analysis of Unix domain Socket usAGE in Android paper that was accepted to EuroS&P 2022. I worked on this paper with Mounir Elgharabawy, the one who discovered the vuln and wrote the Proof of...
reverse-shell
reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...
viper
Viper Frank4DD, @ 2000年5月 Viperは、cryptで暗号化されたパスワードを解読するブルートフォースUNIXスタイルのパスワードクラッカーです。これは、Haleのviper 1.4...
uac
Unix系アーティファクトコレクター UAC 概要 • ドキュメント • 主な機能 • 対応OS • 使用方法 • コントリビューション • サポート • ライセンス 🔎 UACについて UAC（Unix系アーティファクトコレクター）は、フォレンジック調査担当者、セキュリティアナリスト、ITプロフェッショナル向けに設計された、強力で拡張性の高いインシデントレスポンスツールです。AIX、ESXi、FreeBSD、Linux、macOS、NetBSD、NetScaler、OpenBSD、Solarisなど、幅広いUnix系システムからアーティファクトの収集を自動化します。...
uac
Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...
suricata_exporter
Suricata Prometheus Exporter 这是一个用于 Suricata 的 Prometheus Exporter，通过 unix socket 使用 dump-counters 来查询指标。 使用方法 root@kitploit: $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default "/var/run/suricata.socket" -version Output...
twiga
Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...
sublert
root@kitploit: / / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Author: Yassine Aboukir Version: 1.4.7 What's this about? Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new...
[SECURITY] Fedora 43 Update: php-pecl-mongodb2-2.1.9-1.fc43
The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver...
[SECURITY] Fedora 43 Update: roundcubemail-1.6.19-1.fc43
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
pwnKit
pwnKit 关于： 标题：pwnKit 描述：Unix 类操作系统中的权限提升 作者：drapl0n 版本：1.0 类别：权限提升 目标：Unix 类操作系统 攻击模式：HID pwnKit 是一个权限提升 USB-Rubber-Ducky 载荷，可在 10 秒内利用 CVE-2021-4034 并为你生成 root shell。 感谢 https://github.com/berdav 提供的漏洞利用代码。 仅用于教育目的。 变体： 1. 在线：payload.txt（需要受害者机器连接互联网）。 2. 离线：payload2.txt（不需要受害者机器连接互联网）。 工作流程： 1...
radare2
Radare2: Unix ギークのためのリブレリバースエンジニアリングフレームワーク 現在の git master ブランチは 6.2.2 で、次のリリースは 6.2.4 になります。 説明 r2 は radare の完全な書き直しです。リバースエンジニアリングのタスクを容易にするためのライブラリ、ツール、プラグインのセットを提供します。LGPLv3 の下で配布されていますが、各プラグインは異なるライセンスを持つことができます（詳細は r2 -Lj を参照）。 radare...
pkexec-exploit
pkexec-exploit polkit 的 pkexec 中的本地权限提升漏洞（CVE-2021-4034） 概述 Polkit（原 PolicyKit）是类 Unix 操作系统中用于控制系统级权限的组件。它提供了一种有序的方式，让非特权进程能够与特权进程进行通信。 漏洞利用代码作者 Ahmad Almorabea @almorabea 使用方法 root@kitploit: test@ubuntu:/Desktop$ python3 CVE-2021-4034.py 致谢 原始研究由 Qualys 完成...
lynis
Documentation Do you like this software? Star the project and become a stargazer. lynis Lynis - Security auditing and hardening tool, for UNIX-based systems. Lynis is a security auditing tool for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and...
CVE-2026-91710
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91749
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...