CMD_Bypass_Assessment

Análisis de métodos de bypass de CMD CMD Bypass Method Analysis es un script de PowerShell que prueba automáticamente métodos de bypass de CMD en sistemas Windows y evalúa los resultados. El script verifica varios métodos de bypass de CMD y guarda los resultados en un archivo de texto,...

CVE-2024-23692

CVE-2024-23692 BURP POC root@kitploit: GET /?n=%0A&cmd=ipconfig+/all&search=%25xxx%25url:%password%.exec|.?cmd.|timeout=15|out=abc..?n..?n.RESULT:.?n..^abc.====.?n. HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept:...

CVE-2025-24813-apache-tomcat

CVE-2025-24813 Nuclei Template CVE-2025–24813 root@kitploit: nuclei -l list.txt -t CVE-2025–24813.yaml executar shell root@kitploit: http://target.com/updates.jsp?cmd=whoami...

CVE-2021-21551

利用CVE-2021-21551通过创建系统命令行进行本地权限提升 已在Windows 11 21H2 22000.1335上测试。...

CVE-2024-48208

CVE-2024-48208 O repositório contém todo o trabalho relacionado ao desenvolvimento do PoC para demonstrar como uma simples leitura OOB Out-of-Bound pode resultar em fugas de jail e quebra de controle de acesso. Sobre a Vulnerabilidade A descrição original do CVE é a seguinte: O PR no GitHub no...

CVE-2017-0213-

CVE-2017-0213 per ottenere privilegi di amministratore dal CMD Vulnerabili Product| Version| Update| Tested ---|---|---|--- Windows 10| | | √ Windows 10| 1511| | Windows 10| 1607| | Windows 10| 1703| | √ Windows 7| | SP1| √ Windows 8.1| | | Windows RT 8.1| | | Windows Server 2008| | SP2| Windows...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python POC سريع للثغرة الأمنية المُعلن عنها هنا https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ بعد تشغيل السكربت، سيطلب منك تمرير وسيط arg إلى ملف BAT. في لقطة الشاشة يمكنك أن ترى أنه بإضافة " يمكن تجاوز واجهة برمجة التطبيقات API...

Flerken

Flerken Einleitung Command Line Obfuscation CLOB hat sich als ein nicht zu vernachlässigender Faktor bei dateiloser Malware oder bösartigen Akteuren erwiesen, die sich "von der vorhandenen Infrastruktur ernähren". Während Dutzende von Verschleierungswerkzeugen in der Praxis zu finden sind, gibt e...

CVE-2019-8014

CVE-2019-8014 的一点简单分析。 包含 Poc 和 exp Shellcode 是弹出计算器 or CMD 窗口，不记得了。 注意： my.7z 是触发漏洞需要的 bmp 图片 ，文件太大了，我压缩了一下。...

CVE-2022-25226

ThinVNC 1.0b1 - Bypass dell'autenticazione per esecuzione remota di codice CVE-2022-25226 Autore: krill-x7 Riferimento: https://fluidattacks.com/advisories/sinatra Panoramica ThinVNC 1.0b1 contiene una vulnerabilità di bypass dell'autenticazione CVE-2022-25226 che consente a malintenzionati remot...

CVE-2023-21752

CVE-2023-21752 PoC per la vulnerabilità di eliminazione arbitraria di file nel servizio Windows Backup. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 Questo repository contiene due exploit: v1 - Esegue semplicemente l'eliminazione di un file a scelta dell'utente v2 - Tenta ...

K8tools

K8tools Dichiarazione: lo strumento è solo per ricerca di sicurezza o penetration test autorizzato; l'uso illegale è di tua responsabilità. Download: https://github.com/k8gege/K8tools Documentazione: http://k8gege.org/p/72f1fea6.html PS: Aggiornamenti irregolari, file grandi, scarica solo ciò di...

CVE-2024-23692_Exploit

CVE-2024-23692 / Exploit-Code In HFS Version 2.3 und darunter wurde eine Schwachstelle entdeckt, die es ermöglicht, CMD-Befehle an den Server zu senden und auszuführen. Detail: https://asec.ahnlab.com/ko/74113/ Dieser Code dient nur zu Bildungszwecken; die rechtliche Verantwortung für Missbrauch...

CyberResponders

CyberResponders: لعبة طرفية CyberResponders هي لعبة تدريبية في الأمن السيبراني تعمل في الطرفية، تمكن اللاعبين من الاستجابة لسيناريوهات مختلفة من الحوادث السيبرانية. في هذه اللعبة، لديهم خمس فرص لإدخال الأمر الصحيح قبل أن يتم اختراق النظام بالكامل، مما يؤدي إلى انتهاء اللعبة! الهدف من اللعبة هو...

CVE-2024-29269-EXPLOIT

CVE-2024-29269 - Telesquare TLR-2005KSH Execução Remota de Código RCE Um problema foi identificado nas versões 1.0.0 e 1.1.4 do Telesquare TLR-2005Ksh que pode permitir que atacantes executem comandos arbitrários do sistema explorando o parâmetro Cmd. Essa vulnerabilidade pode potencialmente...

zeek-netsupport-detector

NetSupport Contexto https://unit42.paloaltonetworks.com/cortex-xdr-detects-netsupport-manager-rat-campaign/ PCAP de teste: https://app.any.run/tasks/b5d9853f-0dca-45ef-9532-83feeedcbf42 Exemplo: root@kitploit: $ zeek -Cr b5d9853f-0dca-45ef-9532-83feeedcbf42.pcap $ cat notice.log separator \x09...

xz

xz — distribuzione binaria portabile Include xz-utils @ 5.8.3 post-CVE-2024-3094 — distribuzione binaria portabile per l'ecosistema di pacchetti x-cmd. Installazione root@kitploit: macOS / Linux ovunque sia disponibile x: x eget x-cmd-build/xz --to /usr/local/bin/xz Manuale: 1. Vai su...

Teldat-Router-CVE-2022-POC

Teldat Router CVE-2022-39996 e CVE-2022-39997 POC Proof of Concept per due vulnerabilità scoperte nei router Teldat RS123 / RS123w. Panoramica CVE ID| Tipo| CWE| CVSS| Gravità ---|---|---|---|--- CVE-2022-39996| XSS Riflesso| CWE-79| 6.1| Media CVE-2022-39997| Password Debole| CWE-521| 9.8| Criti...

cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack

A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link symlink with one of these predictable...

cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy

A flaw was found in the Go command cmd/go. A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the go command may then download and execute without proper verification...