I-See-You

I-See-You ISeeYou es una herramienta Bash y Javascript para encontrar la ubicación exacta de los usuarios durante actividades de ingeniería social o phishing. Usando coordenadas de ubicación exactas, un atacante puede realizar un reconocimiento preliminar que le ayudará a llevar a cabo ataques má...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the process ID in...

CVE-2023-34830---Reflected-XSS-found-in-I-doit-Open-v24-and-below

CVE-2023-34830 - Reflected XSS found in i-doit Open v24 and below i-doit Open v24 and below are vulnerable to Reflected XSS vulnerability. These vulnerabilities could allows remote authenticated attackers to inject arbitrary web script or HTML. Description of product : i-doit is a web based Open...

portabilis-ieducar-user-type-privilege-escalation

Portabilis i-Educar = 2.1.13 Privilege Escalation Through Arbitrary Request to User Type Change Endpoint Proof of concept for exploitation of the vulnerability described in CVE-2025-11554, which concerns the possibility of a privilege escalation during arbitrary requests to user types endpoints i...

CVE-2026-31431-cleaned

copyFail.py — Relatório de Análise de Exploração de CVE Resumo copyFail.py é um exploit de prova de conceito PoC que demonstra uma vulnerabilidade de escalonamento de privilégios local no kernel Linux. Ao abusar da chamada de sistema splice em combinação com opções de socket manipuladas, o exploi...

EUVD-2026-66493

In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fbioread In fbioread, if copytouser performs a partial copy e.g., due to a faulty user buffer, the loop adjusts the chunk size 'c' and updates the remaining 'count'. However, the...

i-Panel Administration System 2.0 - Cross-Site Scripting

i-Panel Administration System 2.0 contains a cross-site scripting vulnerability that enables an attacker to execute arbitrary JavaScript code in the browser-based web console. id: CVE-2021-41878 info: name: i-Panel Administration System 2.0 - Cross-Site Scripting author: madrobot severity: medium...

WordPress WHMCS Bridge <6.4b - Cross-Site Scripting

WordPress WHMCS Bridge plugin before 6.4b contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the error parameter before outputting it back in the admin dashboard. id: CVE-2021-25112 info: name: WordPress WHMCS Bridge 6.4b - Cross-Site Scripting author:...

mimikatz-detector-condrv

Mimikatz Detector - ConDrv + ConsoleMonitor Dieses Projekt basiert auf der Forschung, die für die Mimikatz-Erkennungstechnik Phase 2 durchgeführt wurde. Es enthält mehrere Projekte in der Projektmappe: ConsoleMonitor - Eine GUI-Anwendung in C zum Abgreifen des Konsolenverkehrs Ein- und Ausgabe üb...

CVE-2026-14960-CVE-2026-14961

Vulnerabilidades de Escalonamento de Privilégios no Driver TdeIo64 da Pegatron tdeio64.sys | ---|--- IDs de CVE| CVE-2026-14960, CVE-2026-14961 Fornecedor| Pegatron Corporation Produto| Driver TdeIo tdeio64.sys Interface de Dispositivo| \.\TdeIo Tipos de Vulnerabilidade| Controlo de Acesso...

MSI_FeatureManager_CVE

KernCoreLib64.sys Vulnerability PoC फिजिकल मेमोरी और I/O पोर्ट दुरुपयोग: विशेषाधिकार वृद्धि के लिए...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Lectura/escritura arbitraria de memoria física y puertos de E/S a través del controlador ThrottleStop ThrottleStop es una pequeña aplicación legítima utilizada para monitorear y corregir la limitación de la CPU. Tiene un controlador que facilita estas tareas y, en ...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2+ This PoC is using the HackSysExtremeVulnerableDriver. The PoC supports both arbitrary write and arbitrary increment, controlled through a flag passed...

Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Local Privilege Escalation POC authors: chompie & b33f For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Write primitive works on all vulnerable systems. Usage: root@kitploit: WindowsAFDLPECVE-2023-21768.exe where is the process ID in...

should-i-trust

should-i-trust Resumen should-i-trust es una herramienta para evaluar señales OSINT de un dominio. Requisitos should-i-trust requiere claves API de las siguientes fuentes: Censys.io - Gratis para las primeras 250 consultas al mes VirusTotal - Gratuito GrayHatWarFare - Gratuito con resultados...

CVE-2023-30990

CVE-2023-30990 Exploits Details finden Sie in unserem Blogbeitrag: https://blog.silentsignal.eu/2025/09/04/Exploit-development-for-IBM-i/ Die Python-Skripte benötigen das ebcdic-Modul: pip install ebcdic DRDA S38CMD Methode root@kitploit: python3 ddm.py "" DRDA SQL Methode root@kitploit: python3...

cve-2023-30990

cve-2023-30990-rce IBM i DDM Unauthenticated RCE - Java Reverse Shell...

can-i-take-over-xyz

Haftungsausschluss ⚠️ Die Autoren dieses Dokuments übernehmen keine Verantwortung für die Richtigkeit. Dieses Projekt dient lediglich dazu, Sicherheitsforscher dabei zu unterstützen, festzustellen, ob etwas angreifbar ist oder nicht, garantiert jedoch keine Genauigkeit. Dieses Projekt ist stark au...

network-monitor

Monitor di Rete Uno strumento di monitoraggio delle connessioni di rete in tempo reale costruito con Rust e GTK4, che mostra le connessioni attive con statistiche I/O in tempo reale in un'interfaccia grafica moderna. Caratteristiche Monitoraggio in tempo reale : Monitora continuamente le...

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Requisito di password debole nell'admin-center che porta al caricamento di plugin dannosi in i-doit Pro 25 e versioni precedenti i-doit Pro 25 e versioni precedenti sono vulnerabili a una vulnerabilità di requisiti di password deboli nell'admin-center e al caricamento di plugin...