exploit-CVE-2016-6515

OpenSSH remote DOS Before 7.3 OpenSSH does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service crypt CPU consumption via a long string. This bug resides in auth-passwd.c in authpassword function. Attackers can exploit this issue to...

poc-CVE-2025-38352

Detalles del Exploit Este repositorio solo contiene la prueba de concepto que desencadena la vulnerabilidad. Desde entonces, he escrito un exploit completo para esta vulnerabilidad. Puedes encontrar los detalles en el enlace de abajo. https://github.com/farazsth98/chronomaly Publicaciones de...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

cpu_rec_rs

cpurecrs Determine which CPU architecture is used in a binary file. Example: root@kitploit: $ cpurecrs /bin/bash /usr/lib/firmware/rtlwifi/rtl8821aefw Loading corpus from cpureccorpus/.corpus ---------------------------------------------------------------------------------------- File | Range |...

CVE-2026-64560-Analysis

CVE-2026-64560 — Linux Kernel posix-cpu-timers non-leader exec race UAF Reproducer / PoC trigger verification : Linux & Android NDK This repository is intended solely for verifying patch status and for research/learning on your own test devices. It does not contain any privilege...

syd

Syd Offline AI assistant for penetration testing. Paste your tool output, ask questions in plain English, get answers grounded in your actual data. No internet connection, no API keys, nothing leaves the machine. Runs entirely on CPU. Tested on standard laptop hardware. What it supports Nmap — XM...

CVE-2026-98123

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker can cause a Denial of Service DoS by sending a specially crafted network packet during an active SCTP connection. A discrepancy in how parameter padding is processed causes the syste...

2022-LPE-UAF

2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...

CVE-2022-2588

CVE-2022-2588 Code adapted for one cpu, and with a vagrant file provided to boot up a vulnerable machine used for educational purposes. To create a vulnerable machine, you need to have Vagrant installed on your machine, then execute on the repository root: root@kitploit: Vagrant up Wait for...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

Intel-Linux-Processor-Microcode-Data-Files

Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

baochip-1x

Baochip 1x Este repositorio contiene los elementos de código abierto del Baochip 1x. Este repositorio se centra en los elementos hardware del Baochip 1x. Se remite a los desarrolladores al SDK oficial de Rust, ubicado en el repositorio Xous. Hay una extensión de vscode llamada baochip que puede...

MCExtractor

MCExtractor Herramienta de extracción de microcódigo Intel, AMD, VIA y Freescale Canal de noticias de MC Extractor Tema de discusión de MC Extractor Repositorios de microcódigo de CPU Intel, AMD, VIA y Freescale A. Acerca de MC Extractor MC Extractor es una herramienta que analiza binarios de...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2026-94287

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion...

CVE-2026-94287 Denial of service via unsigned underflow in libXpm's write path

A denial of service via unsigned underflow in libXpm's write path in libXpm before 3.5.19 could be used by local attackers to cause unbounded CPU usage and memory exhaustion...

CVE-2026-94287

The libXpm library (versions before 3.5.19 ) is vulnerable to a denial of service due to an unsigned underflow in its write path. A local attacker can exploit this flaw to trigger unbounded CPU usage and memory exhaustion . No specific exploit information or in-the-wild exploitation details are p...