qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2025-55182

Affect Version 组件| 复现推荐使用版本| 易受攻击版本范围 ---|---|--- Node.js| = 20.9.0| 20.9.0 LTS 及以上 Next.js| 15.0.0| 15.x, 16.xApp Router React Core| 19.0.0 或 19.2.0| 19.0.0 到 19.2.0 RSC Bundler| react-server-dom-webpack| 19.0.0 到 19.2.0 Build and Start 1. 强制安装低版本 root@kitploit: cd cve-2025-55182-target npm...

Citrix_CVE-2019-19781

此存储库没有 README。...

CVE-2019-8605

This repository does not have a README...

CVE-2021-1732

CVE-2021-1732 CVE-­2021­-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发 受影响系统及应用版本 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64­based Systems Windows 10 Version 20H2 for 32­bit Systems Windows 10 Version 20H2 for x64­based Systems Windows Server, versi...

CVE-2018-6389-FIX

此存储库没有 README。...

cve-2025-48384-hook

此存储库没有 README。...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC...

cve-2016-9838

CVE-2016-9838 这是Cved的一部分： 一个管理易受攻击的Docker容器的工具。 Cved: https://github.com/git-rep-src/cved 图片来源：https://github.com/cved-sources/cve-2016-9838 图片作者：https://github.com/cved-sources/cve-2016-9838...

cve-2021-21974

此存储库没有 README。...

Nuxeo-CVE-2018-16341

This repository does not have a README...

CVE-2018-15961

CVE-2018-15961.py CVE-2018-15961 的漏洞利用...

AutoPiff

AutoPiff Automated Patch Intelligence and Finding Framework A semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches. AutoPiff uses conservative YAML rules to identify security-relevant code changes with high precision and explainability. Overview AutoPiff...

rekono

Automate the recon, keep your time for the part that actually needs a hacker Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against...

fuzzable

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as ...

comission

CoMisSion - WhiteBox CMS analysis CoMisSion is a tool to quickly analyze a CMS setup. The tool: checks for the core version; checks for modifications made on the core additions, alterations, deletions with a fresh archive downloaded from CMS official website; looks for the last core version; look...

shellshock

shellshock Shelly 是一款轻量高效的漏洞扫描器，旨在识别和缓解 Bash 环境中的 Shellshock（CVE-2014-6271 和 CVE-2014-7169）漏洞。 安装： 克隆仓库：git clone https://github.com/ajansha/shellshock.git 进入目录：cd shellshock 运行工具：./shelly.sh 许可证： Shelly 采用 MIT 许可证发布。 免责声明： 本工具仅用于授权的安全评估和渗透测试活动。用户在使用前应确保遵守适用的法律法规。...

cve-2017-1000486

CVE-2017-1000486 这是Cved的一部分： 一个管理易受攻击Docker容器的工具。 Cved：https://github.com/git-rep-src/cved 图片来源：https://github.com/cved-sources/cve-2017-1000486 图片作者：https://github.com/pimps/CVE-2017-1000486...

CVE-2020-3952

此存储库没有 README。...

SSI-CVE-2022-21661

SSI-CVE-2022-21661 信息系统安全第二次作业 研究并利用 CVE-2022-21661 漏洞，该漏洞允许通过插件 POST 请求对 5.8.3 以下版本的 WordPress 进行 SQL 注入。 配置环境 要启动并配置环境，只需运行： root@kitploit: docker-compose run --rm wordpress-cli 系统要求 Docker Docker-Compose Python 3.9+ Argparser Hashcat 运行示例 在 example.md 文件中，您可以跟随一个小教程，其中包含一些示例，帮助您开始利用此漏洞。 漏洞利用本身...