baochip-1x

Baochip 1x This repo contains the open source elements of the Baochip 1x. This repo focuses on the hardware elements of the Baochip 1x. Developers are referred to the official Rust SDK, located in the Xous repo. There is a vscode extension named baochip which can automate build & flash for...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

axios-redos

Axios Regular Expression Denial Of Service Attack This repo hold a POC of CVE-2021-3749. Overview A ReDoS regular expression denial of service flaw was found in the axios package. An attacker that is able to provide crafted input to the trim function may cause an application to consume an excessi...

massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

lvi-lfb-attack-poc

PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0551 This repository holds the sources for the LVI-LFB Control Flow Hijacking attack PoC. Contents lvi-cfh-poc - hijack the control flow of another process via line-fill buffer spraying whitepaper Prerequisites 1. Visual Studio 2015 2. A...

fprobe

FProbe FProbe - Fast HTTP Probe Installation root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format...

unicorn

ユニコーンエンジン コントリビュータ募集中！ 詳細はこちら。 Unicornは、QEMUをベースとした、軽量でマルチプラットフォーム、マルチアーキテクチャのCPUエミュレータフレームワークです。 Unicornには、以下のような比類のない機能があります。 マルチアーキテクチャ: ARM、ARM64 ARMv8、M68K、MIPS、PowerPC、RISCV、SPARC、S390X、TriCore、X86（16、32、64ビット） クリーン/シンプル/軽量/直感的なアーキテクチャ非依存のAPI 純粋なC言語で実装されており、Crystal、Clojure、Visual...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

CVE-2022-38725

CVE-2022-38725 CVE-2022-38725 es una vulnerabilidad de Denegación de Servicio no autenticada en versiones de syslog-ng anteriores a la 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Pasos para reproducir 1...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 & CVE-2025-48976 About This project runs a simple file upload endpoint with Tomcat 10.1.41 and a Jakarta Servlet. The exploit runs, by default, 1000 parallelized multipart requests with 1000 parts and 50 headers by part, from 50 workers. Run POC Build and run the Docker container:...

CVE-2022-0778

CVE-2022-0778 Description We refer to the concept of drago-96 and then rewrite a PoC based on the P12 and PEM format. You can use it to verify the CVE-2022-0778 vulns, i.e., a dangerous SSL certificate without any private password, leave it empty. If the device is affected, it may cause the CPU o...

rosenbridge

项目：rosenbridge ：x86 CPU中的硬件后门 github.com/xoreaxeaxeax/rosenbridge // domas // @xoreaxeaxeax 概述 项目：rosenbridge 揭示了某些台式机、笔记本电脑和嵌入式 x86 处理器中的硬件后门。 该后门允许 ring 3（用户态）代码绕过处理器保护，自由读写 ring 0（内核态）数据。虽然该后门通常处于禁用状态（需要 ring 0 执行才能启用），但我们发现它在某些系统上 默认启用 。 此仓库包含用于检查您的处理器是否受影响、关闭后门（如果存在）的实用程序，以及用于发现和分析后门的研究和工具。 ...

CVE-2026-64560-Analysis

CVE-2026-64560 — Linux Kernel posix-cpu-timers 非 leader exec 竞争 UAF Reproducer / PoC（触发验证型） ：Linux & Android NDK 本仓库仅用于在自有测试设备 上验证补丁状态与研究学习，不包含任何提权/利用原语。 1. 漏洞概述 字段| 内容 ---|--- CVE ID| CVE-2026-64560 标题| posix-cpu-timers: Prevent UAF caused by non-leader exec race 类型| Use-After-Free（CWE-416），竞态条件...

Intel-Linux-Processor-Microcode-Data-Files

适用于 Linux 的英特尔处理器微码软件包 关于 英特尔处理器微码更新（MCU）软件包提供了一种针对安全公告和功能问题（包括勘误）发布更新的机制。此外，MCU 还负责启动 SGX 飞地（在支持 SGX 功能的处理器上）、实现复杂行为（例如 assists）等。应用 MCU 的首选方法是使用系统 BIOS。对于英特尔的某些处理器，还可以使用操作系统在运行时更新 MCU。此处共享的英特尔微码软件包包含针对那些支持操作系统加载 MCU 的处理器的更新。 为什么要更新微码？ 更新微码有助于缓解 CPU...

2022-LPE-UAF

2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...

viper

Viper Frank4DD, @ May 2000 Viper is a prute force UNIX-style password cracker for passwords encrypt with crypt. It has been developed from Hale's viper 1.4 Perl program. While there are other more powerful crack programs out, this one is about studying the safety of passwords while hardware speed...

cargo-fuzz

cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation root@kitploit: $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly...

CVE-2026-56741

A flaw was found in the JLine3 Telnet server's remote-telnet module. An unauthenticated remote attacker can exploit this vulnerability by repeatedly sending large terminal dimension values through the Telnet Negotiate About Window Size NAWS option. This action triggers continuous,...

CVE-2022-2588

CVE-2022-2588 Code adapted for one cpu, and with a vagrant file provided to boot up a vulnerable machine used for educational purposes. To create a vulnerable machine, you need to have Vagrant installed on your machine, then execute on the repository root: root@kitploit: Vagrant up Wait for...

EUVD-2026-72386

commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. Attackers can submit Markdown with numerous distinct attribute names to cause quadratic-time attribute merging and filtering, consuming...