doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

donutCS

donutCS .NET Core version of donut shellcode generator. https://vimeo.com/369739318 Note: I simply glued a bunch of things together for a more personally useable version. TheWover and Odzhan did all the hard work. Install Confirmed working on Linux, Mac and Windows Kali Install Instructions Usage...

SharpFtpC2

SharpFtpC2 PoC SharpFtpC2 is a small, experimental project aimed at exploring the possibility of using FTPS for relaying commands and responses between two remote computers. It employs the FTP protocol as a makeshift tunnel through which the computers, both acting as clients connected to an FTP...

dvcsharp-api

极度脆弱的C应用程序（仅API） 开始使用 注意： 这是一个故意设计的脆弱应用，请不要将其部署在生产环境或面向公网的服务器上。请谨慎使用。 Docker root@kitploit: docker-compose up 手动部署 安装 .NET Core 2.x SDK Microsoft .NET Core SDK 安装依赖并迁移数据库： root@kitploit: dotnet restore dotnet ef database update 启动应用服务器： root@kitploit: dotnet run 启动应用服务器并启用文件监控以自动重载： root@kitploit...

simple-maven

极度易受攻击的 C 应用程序（仅 API） 开始 注意： 这是一个故意设计为易受攻击的应用程序，请不要将其托管在生产环境或面向互联网/公共的服务器上。请谨慎使用。 kk Docker test root@kitploit: docker-compose up tets 手动安装 安装 .NET Core 2.x SDK Microsoft .NET Core SDK 安装依赖项并迁移数据库： root@kitploit: dotnet restore dotnet ef database update 启动应用服务器： root@kitploit: dotnet run...

Elite

Obsoleto Temporalmente El proyecto padre Covenant ya no requiere una aplicación de cliente. Elite ha quedado temporalmente obsoleto. Utilice en su lugar la interfaz web incluida con el proyecto Covenant. Es posible que Elite se actualice eventualmente para ponerse al día con el proyecto Covenant...

SSCMS_Decrypt

sscms siteserver cms database decrypt Introduction: SSCMS is based on .NET Core, enabling you to set up a fully functional, high-performance, large-scale, and easy-to-maintain website platform in the shortest time, at the lowest cost, and with the least manpower. Project address:...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

AVIator

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About ://name AV : AntiVirus Ator : Is a swordsman, alchemist, scientist, magician, scholar, and engineer, with the ability to sometimes produce objects out of thin air https://en.wikipedia.org/wiki/Ator About ://purpose AV|Ator is a backdoor...

Security Update for Microsoft .NET Core SDK (September 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges ove...

Microsoft .NET Core SDK Information Disclosure Vulnerability

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Security Update for Microsoft .NET Core (September 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...

BearFTP

BearFTP ¿Te atreves a hackear a un oso? BearFTP es un servidor FTP honeypot, diseñado para registrar los intentos de los hackers y reportarlos a bases de datos públicas de listas negras de IP. Características: Soporte de configuración sin necesidad de recompilar Edita archivos y el contenido de l...

CVE-2025-55315-repro

CVE-2025-55315-repro 此仓库包含一个小型 ASP.NET Core 控制台应用程序，用于复现和测试 HTTP 分块传输与换行解析行为。 更多信息请参见 CVE-2025-55315。 内容 Repro/Program.cs - 控制台应用程序，启动本地 Kestrel 服务器并运行两个基于 TCP 的测试。这些测试通过 TcpClient 发送原始 HTTP 字节，以测试跨碎片读取中的分块传输解析和无效换行处理。 如果这些测试失败，说明您受到 CVE-2025-55315 漏洞影响，需要更新您的 .NET 版本（8、9 和 10），或从 HeroDevs 获取...

The vulnerability of the sock_ops_convert_ctx_access() function in the net/core/filter.c module allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information within Linux’s kernel-based networking functions.

The vulnerability of the sockopsconvertctxaccess function in the net/core/filter.c module relates to the execution of operations outside of buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the xdp_master_redirect() function in the net/core/filter.c module exposes network functions of the Linux kernel, allowing a hacker to cause a service failure.

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerabilities of the functions qdisc_pkt_len_segs_init() and __dev_queue_xmit() in the net/core/dev.c module of the Linux kernel allow an attacker to access protected information or cause service failures.

The vulnerabilities of the functions qdiscpktlensegsinit and devqueuexmit in the net/core/dev.c module of the Linux kernel are related to incorrect assumptions about the organization of data or memory. Exploiting these vulnerabilities can allow an attacker to access protected information or cause...

BIT-DOTNET-SDK-2026-70354 .NET Core Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

BIT-DOTNET-2026-70354 .NET Core Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101983)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101983 advisory. In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdiscpktlensegsinit Most ndostartxmit methods expects headers of gso packet...