CVE-2024-38063-poc

Real POC pubblicato https://github.com/ynwarcs/CVE-2024-38063 e l'ho aggiornato anche nel mio codice, questo può causare un crash nel tuo sistema, quindi usa una VM o solo per imparare, puoi ottenere RCE apportando modifiche al codice. Utilizzo iface Molto probabilmente è abilitato per impostazio...

Priv2Admin

Die Idee ist, Windows-OS-Privilegien in einen Pfad zu "übersetzen", der zu Folgendem führt: 1. Administrator, 2. Integritäts- und/oder Vertraulichkeitsbedrohung, 3. Verfügbarkeitsbedrohung, 4. nur Chaos. Privilegien sind aufgeführt und erklärt unter:...

CVE-2026-77831

AshPaperTrail (an Elixir library from the ash-project ecosystem) contains an inefficient algorithmic complexity vulnerability in its full-diff list change tracking component (AshPaperTrail.ChangeBuilders.FullDiff.ListChange). The root cause is a cubic-time algorithm: when pairing prior array elem...

CVE-2023-21716

CVE-2023-21716 POC Crash RTF Python 3.11 Windows 10...

The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.

The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

esp32_esp8266_attacks

Attacchi Wi-Fi su ESP32/ESP8266 Questo repository fa parte dei risultati di ricerca delASSET Research Group. Questo repository dimostra 3 attacchi Wi-Fi contro i popolari dispositivi IoT ESP32/8266: Zero PMK Installation CVE-2019-12587 - Dirottamento di client ESP32/ESP8266 connessi a reti...

androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

CVE-2017-2751

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:18+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-30 00:00:27+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0...

CVE-2024-27804

CVE-2024-27804 root@kitploit: ./build.sh ./panic.sh root@kitploit: paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3:...

PyFlooder

PyFlooder Uno script Python HTTP Flood che può fermare un normale sito web in 10 secondi Come funziona? Genera un numero configurabile di richieste GET casuali e le invia al bersaglio Utilizzo root@kitploit: pyflooder.py...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

PoC-CVE-2025-8671-MadeYouReset-HTTP-2

PoC-CVE-2025-8671-MadeYouReset-HTTP-2 PoC per validare la vulnerabilità MadeYouReset Questo repository contiene una PoC controllata sviluppata per validare se un'infrastruttura è potenzialmente vulnerabile alla CVE-2025-8671 MadeYouReset. Il codice non è un exploit completo e non esegue un vero D...

slowloris

slowloris.py - Einfacher Slowloris in Python Was ist Slowloris? Slowloris ist im Grunde ein HTTP-Denial-of-Service-Angriff, der threaded Server betrifft. Er funktioniert wie folgt: 1. Wir beginnen, viele HTTP-Anfragen zu stellen. 2. Wir senden periodisch alle 15 Sekunden Header, um die Verbindung...

CVE-2020-0796-PoC

CVE-2020-0796 PoC auch bekannt als CoronaBlue oder SMBGhost Verwendung ./CVE-2020-0796.py servername Dieses Skript verbindet sich mit dem Zielhost und komprimiert die Authentifizierungsanfrage mit einem falsch gesetzten Offset-Feld im Transformations-Header, was dazu führt, dass der Dekomprimiere...

CVE-2021-43224-POC

CVE-2021-43224-POC Windows Common Log File System Driver POC vielleicht CVE-2021-43226 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43226 nur BSOD !!! getestet auf Windows 20H2 Version 19042.1387...

yersinia

Spanning Tree 1: Attacco DoS inviando BPDU di configurazione root@kitploit: Inviamo alcune BPDU di configurazione dichiarandoci root!!! Inviando continuamente BPDU di configurazione con root pathcost 0, un bridge ID generato casualmente e quindi lo stesso root ID, e alcuni valori predefiniti per...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

regexploit

Regexploit Trova regex vulnerabili a Regular Expression Denial of Service ReDoS. Maggiori informazioni sulblog di Doyensec Molti parser di espressioni regolari predefiniti hanno una complessità del caso peggiore illimitata. Il matching delle regex può essere rapido quando viene presentata una...

BlueGate

BlueGate PoC per la vulnerabilità del Remote Desktop Gateway - CVE-2020-0609 & CVE-2020-0610. Grazie a ollypwn per aver segnalato il mio sciocco errore! Installazione Sto usando una versione patchata di pydtls perché il repository originale non si compilava correttamente. root@kitploit: cd pydtls...

sysctl_coalition_get_pid_list-dos

sysctlcoalitiongetpidlist-dos Die Funktion sysctlcoalitiongetpidlist in bsd/kern/syscoalition.c verwendet die Funktion coalitiongetpidlist, um eine Liste von PIDs in einer Koalition zu sammeln. Diese Funktion gibt bei Erfolg die Anzahl der PIDs oder bei Fehlschlag einen negativen errno zurück...