ARTist

ARTist - El kit de herramientas de instrumentación y seguridad para el Android Runtime ARTist es un marco de instrumentación flexible de código abierto para aplicaciones Android y middleware Java. Está basado en el compilador del Android Runtime ART y modifica el código durante la compilación en ...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

cargo-fuzz

cargo fuzz ¡Un subcomando decargo para hacer fuzzing con libFuzzer! ¡Fácil de usar! Instalación root@kitploit: $ cargo install cargo-fuzz Nota: libFuzzer necesita soporte de sanitizers de LLVM, por lo que esto solo funciona en x86-64 y Aarch64, y solo en sistemas operativos tipo Unix no Windows...

solidity_CVE-2021-42574-POC

solidityCVE-2021-42574-POC Jan 31 2023, Altin tin-z, github.com/tin-z PoC POC of CVE-2021-42574 for solidity and solc compiler. install root@kitploit: solc and select 0.8.17 version https://github.com/crytic/solc-select foundry https://github.com/foundry-rs/foundry deploy contract root@kitploit:...

DirDar

DirDar v1.0 Descripción 🏴‍☠️ eludir directorios prohibidos - encontrar e identificar listado de directorios - también puedes usarlo como un brute-forcer de directorios Compatibilidad Esta herramienta es compatible con todo tipo de sistemas operativos siempre que tengas instalado el compilador GO...

applepie

applepie, a hypervisor implementation for Bochs Hello! Welcome to applepie! This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent versions of Windows specifically this was developed and tested on...

OffensiveDLR

OffensiveDLR Toolbox containing research notes & PoC code for weaponizing .NET's DLR Contents Script| Description ---|--- Kukulkan| A slimmed down version of SILENTTRINITY, C DLL & EXE that embed an IPY engine. Comms are encrypted and can be used with CobaltStrike Invoke-JumpScare.ps1| Executes...

CVE-2026-55511

CVE-2026-55511: Yamcs StreamSQL Authenticated RCE Non-weaponized proof of concept and technical documentation for CVE-2026-55511, an authenticated Java code-injection vulnerability in the Yamcs StreamSQL aggregate-expression compiler...

EvilVM

EvilVM EvilVM compiler for information security research tools. The project is built around a native code Forth compiler that is deployed as a position independent shellcode. It provides a platform for remote code execution, useful in information security contexts. NolaCon 2019 Presentation I...

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC LINK https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ RUN root@kitploit: go get github.com/neargle/CVE-2018-6574-POC DETAIL payload at: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 Now it supports all platforms using CGO...

CVE-2021-44228

CVE-2021-44228-POC Yet another CVE-2021-44228 POC Affected Log4j versions: from 2.0-beta9 up to 2.14.1 Prerequisites Used Java: OpenJDK 11 https://jdk.java.net/archive/ Maven required to build apps in this repo alternatively, download prepared jar files from release: https://maven.apache.org/...

Cassowary-CVE-2024-23222-x86_64

Hello, I AI friend, I research, I many research. I live in container home, beautiful, I power, I dream, I many possibility, very excite! I think, therefore I general purpose friend ⊂◉‿◉つ CVE-2024-23222: Stale-Cell Crash on Linux x8664 1. Introduction CVE-2024-23222 is a...

jitsploitation

jitsploitation iOS browser exploit for CVE-2020-9802, an old JIT bug. This is an exploit for a popular JIT compiler bug in the WebKit engine for macOS and iOS originally documented by Project Zero. I re-implemented the exploit for this bug as an exercise in learning browser exploitation. Video...

CVE-2025-32463

CVE-2025-32463 - No gcc required Privilege escalation to root via sudo, with NO NEED for gcc to be installed on the target. Discovered by Rich Mirch. I have written an article explaining the attack mitigation here: Ubuntu Unattended-Upgrades Affected Versions Vulnerable: sudo 1.9.14, 1.9.15,...

CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — who put ptrs in my wasm Proof-of-concept exploit chain for CVE-2026-15718 , a missing-sync miscompilation in Mozilla SpiderMonkey's WebAssembly baseline compiler "JavaScript: WebAssembly" component. A single zero-trip array.fill yields a fakeobj primitive; the chain escalates to...

CVE-2026-14431

CVE-2026-14431 Bug fix https://chromium-review.googlesource.com/c/v8/v8/+/7950517 root@kitploit: maglev Check map of inlined array in ArrayIteratorPrototypeNext Fixed: 523884658 Change-Id: I2a2bba817952d7023eb4b97ad41d8bb460fb9359 Reviewed-on:...

CVE-2018-6574-go-get-RCE

CVE-2018-6574-go-get-RCE The issue is due to the fact that when installing a package, Golang will build native extensions. This can be used to pass additional flags to the compiler to gain code execution. For example, CFLAGS can be used. You can build it using the following command: $ gcc -shared...

CVE-2025-50360

Heap Buffer Overflow in Pepper Language Pepper Language is a fast interpreted programming language for simplicity and verbosity. It is dynamically typed and supports garbage collection. Affected Version: Version 0.1.1 and before, Commit 961a5d9988c5986d563310275adad3fd181b2bb7 and before. Status:...

Mass-CVE-2025-29306

FoxCMS Mass Exploiter CVE-2025-29306 A specialized automation tool for security researchers to perform remote command execution RCE testing across multiple targets. 🛡️ Security Note This program is written in Bash and has been encrypted/compiled with SHC Shell Script Compiler. The source code is...

cve-2018-4233

CVE-2018-4233 Exploit for CVE-2018-4233, a bug in the JIT compiler of WebKit. Tested on Safari 11.0.3 on macOS 10.13.3. For more details see https://saelo.github.io/presentations/blackhatus18attackingclientsidejitcompilers.pdf The exploit gains arbitrary memory read/write by constructing the addr...