Puma6Fail

Puma 6 fail demo Tool to demonstrate issue from this post found by mackey: https://www.dslreports.com/forum/r31377755- Proof of concept code is already public elsewhere. See CVE-2017-5693. DoS occurs in either direction - UDP from LAN to WAN or WAN to LAN. Testing through a local Virgin Media Sup...

monitor

BetterDB Monitor...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, root@kitploit: make pixel For samsung s22, root@kitploit: make s22 How to use the exploit The exploit i...

polkit-0.96-CVE-2021-4034

polkit-0.96-CVE-2021-4034 CentOS 7.x already has an RPM package that fixes the CVE-2021-4034 vulnerability, but I couldn't find one for CentOS 6.x. I created and packaged the RPM myself by referring to the source code Red Hat has already fixed 6.x, but I couldn't find a download location...

PS4-webkit-exploit-6.XX

This repository does not have a README...

npcap

Npcap Npcap is a packet capture and injection library for Windows by the Nmap Project. It is a complete update to the unmaintained WinPcap project with improved speed, reliability, and security. Documentation The complete documentation for Npcap is available in the Npcap Guide on npcap.com. There...

DirtyPipe-Android

DirtyPipe for Android Dirty Pipe CVE-2022-0847 temporary root PoC for Android. Targets Currently only run on Pixel 6 with security patch level from 2022-02-05 to 2022-04-05. Don't use on other devices or other versions. It must crash reboot. Dirty Pipe is finally patched on 2022 May security upda...

CVE-2018-15982

CVE-2018-15982 Flash sources for CVE-2018-15982 used by NK this is a dump of a fully weaponized activex obj used by NK https://threatpost.com/adobe-patches-zero-day-vulnerability-in-flash-player/139629/ Payloads are in Class 6 and 7...

page_inject

pageinject - AFALG aead cross-container escape AFALG aead vulnerability cross-container exploit -- pivot from one compromised container into every sibling container that shares the samelibc.so.6 image layer. This is an escape primitive : it runs from inside an unprivileged container that the...

ABL_ROP

Updating ABL serial with ROP: When ran this notebook will load ABL and attempt to update the device's serial number via ROP chain to call memmove. Derived from eShard's https://github.com/eshard/pixel6-boot/blob/main/runablpublic.ipynb whilst following along with...

CVE-2017-7269

CVE-2017-7269 iis6 exploit 2017...

reconness

Aplicación Web de ReconNess ¿Por qué ReconNess? Bueno, hemos visto a muchos hackers de bugbounty organizando su recon usando archivos txt y haciendo muchos scripts bash para filtrar la salida y mantener todo organizado con la intención de centrarse solo en los objetivos potencialmente vulnerables...

iis6-exploit-2017-CVE-2017-7269

iis6-exploit-2017-CVE-2017-7269 iis6 exploit 2017 CVE-2017-7269...

ServiceNow - Cross-Site Scripting

ServiceNow through San Diego Patch 4b and Patch 6 contains a cross-site scripting vulnerability in the logout functionality, which can enable an unauthenticated remote attacker to execute arbitrary JavaScript. id: CVE-2022-38463 info: name: ServiceNow - Cross-Site Scripting author: amanrawat...

bootmodechecker

bootmodechecker This app checks if your Nexus 6/6P is still vulnerable to CVE-2016-8467 and/or if your bootmode property has been tampered with. Also available under Google Play: https://play.google.com/store/apps/details?id=roeeh.bootmodechecker...

CVE-2022-46395

Exploit para CVE-2022-46395 El artículo completo se puede encontrar aquí. Se trata de un error en el controlador del kernel Arm Mali que reporté en noviembre de 2022. El error puede utilizarse para obtener ejecución arbitraria de código en el kernel desde el dominio de aplicaciones no confiables,...

cve-2023-6931-pipa

CVE-2023-6931 — Xiaomi Pad 6（pipa）提权与关 SELinux 最终在设备上使用的那一版 exploit，单独整理在此目录。 目标 root@kitploit: 设备 Xiaomi Pad 6 / pipa / SM8250 系统 HyperOS OS2.0.20.0.UMZCNXM 内核 4.19.157-perf-g240e1d0a5f52 起点 adb shell（shell 域） 结果 一次性 uid0 + 全局 SELinux permissive（重启失效） 利用链 见 exploit.c 文件头，摘要如下。 root@kitploit: 1...

Intel Active Management - Authentication Bypass

Intel Active Management platforms are susceptible to authentication bypass. A non-privileged network attacker can gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology AMT and Intel Standard Manageability. A non-privileged local attacker can provision...

libX11-6-1.8.13-2.1 on GA media (moderate)

libX11-6-1.8.13-2.1 on GA media Announcement ID: openSUSE-SU-2026:11833-1 Rating: moderate Cross-References: CVE-2026-88806 CVSS scores: CVE-2026-88806 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-88806 SUSE : 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H...

cve-2017-2636-el

cve-2017-2636-el This role installs the workaround documented on https://access.redhat.com/security/cve/CVE-2017-2636 to blacklist the nhdlc module from being loaded. Requirements This role only applies to Red Hat Enterprise Linux versions 6 and 7, and variants CentOS, CloudLinux, etc. License MI...