androrat

'm in progress internationalization, Welcome to join. Androrat Fork/Silent Edition Remote Administration Tool for Android Androrat is a client/server application developed in Java Android for the client-side and in Java/Swing for the Server. The name Androrat is a mix of Android and RAT Remote...

CVE-2024-9465

CVE-2024-9465: Palo Alto Expedition 인증되지 않은 SQL Injection 취약한 장치에서 CVE-2024-9465를 악용하기 위한 개념 증명. 블로그 게시물 근본 원인 및 침해 지표: https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/ 사용법 root@kitploit: % python3 CVE-2024-9465.py -h usage: CVE-2024-9465.py -h -u URL...

callstranger-detector

Zeek Package that detects CallStranger CVE-2020-12695 attempts http://callstranger.com/ This package attempts to detect CallStranger CVE-2020-12695 exploitation attempts and data exfiltration. It does so by looking for three key things: 1. UPnP SUBSCRIBE commands with a Notify URL that contains a...

SharpDNSExfil

SharpDNSExfil SharpDNSExfil — это инструмент для эксфильтрации, написанный на C. Основная цель — эксфильтрация любых файлов «на диске» без необходимости беспокоиться об ограниченных исходящих соединениях. Предварительные требования У удалённой машины должна быть возможность разрешать DNS Зачем я...

Pulsar

Pulsar Pulsar is a tool for data exfiltration and covert communication that enable you to create a secure data transfer, a bizarre chat or a network tunnel through different protocols, for example you can receive data from tcp connection and resend it to real destination through DNS packets 🎉...

NetLlix

NetLlix A project created with an aim to emulate and test exfiltration of data over different network protocols. The emulation is performed w/o the usage of native API's. This will help blue teams write correlation rules to detect any type of C2 communication or data exfiltration. Currently, this...

CVE-2026-82874

ToolJet before v3.16.208 suffers from a cross-tenant authorization bypass in its tooljet-db endpoints. The vulnerability stems from a failure to validate that an authenticated user belongs to the organization specified in the organizationId path parameter. This allows any Builder-level user to re...

http-protocol-exfil

http-protocol-exfil HTTP 프로토콜 버전을 사용하여 파일을 비트 단위로 보냅니다"HTTP/1.0"은 0, "HTTP/1.1"은 1을 나타냅니다. GET 요청을 사용하므로 Blue Team은 IP 주소로의 요청만 보게 됩니다. 그러나 큰 파일을 보내는 데 시간이 오래 걸립니다. 예를 들어 200KB를 보내는 데 1시간이 필요하며, 요청 수는 파일 바이트 수의 8배로 매우 많아집니다. 리스너 생성 리스너를 실행하려면 listener.py를 사용하고, 선택적 인자로 수신할 포트를 지정합니다. root@kitploi...

CVE-2026-58301

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

PTP-RAT

PTP-RAT Exfiltrate data over screen interfaces More information about how the tool works can be found at https://www.pentestpartners.com/security-blog/exfiltration-by-encoding-data-in-pixel-colour-values/...

immich-exfiltration-demo

Cybersecurity demo: Immich exfiltration CVE-2026-35455 Proof-of-concept cybersecurity demo for CVE-2026-35455, showcasing automated API key generation and data exfiltration leading to full account hijacking and persistent unauthorized access. Learn more: report, video...

CIMplant

CIMplant C port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command. Introduction CIMplant is a C rewrite and...

procrustes

Procrustes 데이터 유출을 DNS를 통해 자동화하는 bash 스크립트입니다. DNS를 제외한 모든 아웃바운드 연결이 차단된 서버에서 블라인드 명령어 실행이 가능할 때 사용합니다. 현재 이 스크립트는 sh, bash 및 powershell을 지원하며, exec 스타일 명령어 실행예: java.lang.Runtime.exec과 호환됩니다. 비스테이지: 스테이지: 작동 방식은 다음과 같습니다. 스크립트는 대상 서버에서 실행할 명령어를 입력받아, 대상 셸에 맞게 변환하여 출력이 DNS를 통해 유출될 수 있도록 합니다. 명령어가...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

CVE-2025-66516-POC

⚠️ READ DISCLAIMER BEFORE USE ⚠️ Educational/Authorized Testing Only | License | Security Policy About This POC This repository contains a proof-of-concept POC exploit for CVE-2025-66516 , an XML External Entity XXE injection vulnerability in Apache Tika versions prior to 3.2.2. The vulnerability...

aisecplus-week01-danielossai

🔐 AISec Plus — Week 1: Map the Threat Researcher: Daniel Ossai Repo: aisecplus-week01-danielossai Submitted: Week 1 · AISec Plus Bootcamp 📌 Incident Name & Date EchoLeak CVE-2025-32711 Discovered: January 2025 · Disclosed: June 2025 · Patched: June 2025 📝 What Happened Researchers at Aim Security...

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

GeoServer WFS - XXE Processing Vulnerability

GeoServer Web Feature Service WFS is vulnerable to an XML External Entity XXE processing attack due to improper handling of XML input. This vulnerability allows attackers to perform Out-of-Band OOB data exfiltration and Server-Side Request Forgery SSRF by exploiting the GeoTools library. id:...

T24 Web Server - Local File Inclusion

T24 web server is vulnerable to unauthenticated local file inclusion that permits an attacker to exfiltrate data directly from server. id: CVE-2019-14251 info: name: T24 Web Server - Local File Inclusion author: 0xAkoko severity: high description: T24 web server is vulnerable to unauthenticated...

CVE-2025-45809-PoC

CVE-2025-45809 — /key/block을 통한 LiteLLM SQL 삽입시간 기반 블라인드 SQLi LiteLLM v1.65.4v1.81.0 이전 버전의 /key/block 및 /key/unblock 엔드포인트의 key 매개변수에 SQL 삽입 취약점 이 존재합니다. 공격자는 시간 기반 블라인드 삽입 기술을 활용하여 데이터베이스 내용을 탈취하고 서버 파일을 읽을 수 있습니다...