cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783：Google Chrome Mojo 沙箱逃逸 CVSS 评分： 8.3（高危） 发现者： Kaspersky 状态： 已在野外被积极利用（间谍活动） 概述 CVE-2025-2783 是 Google Chrome 的 Mojo 进程间通信（IPC）框架中的一个 Windows 特定权限提升漏洞。它通过利用 Mojo 消息传递层中不正确的句柄处理方式，允许被攻破的渲染器进程逃逸 Chrome 沙箱。 该 CVE 是作为针对记者和反对派人物的活跃利用链的一部分被发现的。该沙箱逃逸漏洞与另一个独立的渲染器远程代码执行（RCE）漏洞配合使用，以实现对系统的完全控制...

urless

概要 - v2.7 これはURLリストを整理（de-clutter）するためのツールです。 出発点として、Somdev Sangwan氏の素晴らしいツール uro をベースにしました。ただし、いくつかの点を変更し、改善（GUIDへの対応など）を加え、よりカスタマイズ可能にしたいと考えました。 インストール urless は Python 3 をサポートしています。 urless をデフォルト（グローバル）のPython環境にインストールします。 root@kitploit: pip install urless または root@kitploit: pip install...

impersonate-rs

IRS Impersonate-RS 💡 IRSは https://github.com/zblurx/impersonate-rs のライブラリ版です。zblurx Defte の Impersonate を素の Rust で再実装しました。詳細については、この ブログ記事 を参照してください。 トークン偽装のアプローチは Defte Impersonate とは少し異なります。ここでは、プライマリトークンを偽装したい PID を選択する必要があります。その後、irs.exe は次の処理を行います： 1. トークンを複製する 2. 名前付きパイプを生成する（実行出力を取得するため） 3...

bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation root@kitploit: $ sudo...

llm-circuit-finder

llm-circuit-finder Ho replicato il metodo RYS di Ng e ho scoperto che duplicare 3 strati specifici in Qwen2.5-32B migliora il ragionamento del 17% e duplicare gli strati 12-14 in Devstral-24B migliora la deduzione logica da 0.22→0.76 su BBH — nessun addestramento, nessun cambiamento di pesi, solo...

DuplicateDump

DuplicateDump DuplicateDump è un fork di MirrorDump con le seguenti modifiche: Implementazione DInovke Plugin LSA DLL scritto in C++ che può essere ripulito dopo aver dumpato LSASS. MirrorDump compila il plugin LSA come assembly .NET che non può essere scaricato dal processo LSASS. Ecco perché...

nanodump

NanoDump Ein flexibles Tool, das einen Minidump des LSASS-Prozesses erstellt. Inhaltsverzeichnis 1. Verwendung 2. Funktionen 3. Kombination von Techniken 4. Beispiele 5. HTTPS-Weiterleitungen 1. Verwendung root@kitploit: usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid...

CVE-2026-55624

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue...

EUVD-2026-65513

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue...

CVE-2026-55624

MintyItanium Lost-Auction is an auction plugin for Minecraft servers. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8 , players could take items such as barrier blocks or duplicate items from the search GUI, representing an integrity issue with a CVSS 4.0 base score of 5.3 (Medium) . The...

CVE-2026-55624 MintyItanium Lost-Auction takes items like barrier blocks out from search GUI

MintyItanium Lost-Auction is an auction plugin for Minecraft. Prior to commit 88c920b05042929db334ba06d57f052b42d6b3f8, players can take items like barrier blocks or duplicate items from the GUI. Commit 88c920b05042929db334ba06d57f052b42d6b3f8 fixes the issue...

SpawnWith

SpawnWith Um arquivo de objeto Beacon BOF experimental que fornece uma alternativa aos comandos spawnas e inject. Isso expõe um novo comando, spawnwith pid listener, que executa o seguinte: 1. Obtém um handle para o processo de destino. 2. Obtém um handle para o token primário do processo. 3...

LogMeInPoCHandleDup

Duplicazione degli Handle di LogMeIn / GoTo LMIInfo.sys Riepilogo Nel driver LMIInfo.sys fornito da LogMeIn / GoTo RMM esiste una race condition che consente di duplicare un handle arbitrario dal processo SYSTEM. Il problema principale deriva dalla mancanza di un adeguato controllo degli accessi...

nelson

Nelson Encontrando vulnerabilidades através de força bruta burra Inspirado por uma palestra de Nicholas Carlini e pelo Ralph loop, Nelson é uma ferramenta para iterar sobre cada arquivo em um projeto, solicitando que um agente procure por vulnerabilidades. Ele possui um modo de varredura,...

weakpass

Weakpass Here, you can find the list of tools and example of API server from weakpass.com for password and hash cracking in one place. 📂 Folder Structure tools A collection of password and hash cracking tools. Check them out: Kraker-js Lookup Passcheck Passgen libs Links to the libraries used in...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

uddup

UDdup - URLs Deduplication Tool The tool gets a list of URLs, and removes "duplicate" pages in the sense of URL patterns that are probably repetitive and points to the same web template. For example: root@kitploit: https://www.example.com/product/123 https://www.example.com/product/456...

CVE-2026-4245 Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication

The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the duplicatepostpermissions permission callback only verifying the duplicateposts capability without checking whether the requesting user holds publishposts...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

CVE-2026-63003

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.9, page duplication lacks an object-level authorization check on the source page. In cms/admin/forms.py, DuplicatePageForm.source accepts any Page, the AddPageForm constructor...