Lucene search
+L

71227 matches found

Kitploit
Kitploit
added 2026/09/11 12:48 a.m.10 views

zipbrk

zipbrk 2.2.0 Zip break is a tool to disect, modify, and reassemble zip files for a variety of tasks. It is designed to be cross-platform and as simple as possible to port between varied systems. It has been tested on Windows 9x/2k/XP, Windows Vista/7/8, Fedora 23/24/25/26/27, Kali, Debian 8/9,...

7.8CVSS6.6AI score0.65764EPSS
SaveExploits8
Github Security Blog
Github Security Blog
added 2026/09/10 10:51 p.m.4 views

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

Summary With -l/--links, rclone's local backend recreates a source .rclonelink object as a real symlink at the destination verbatim preserved by design for faithful backups. Directory-metadata application, however, does not go through the os.Root sandbox and does not use NOFOLLOW syscalls. A loca...

7.1CVSS0.00216EPSS
SaveExploits0References6Affected Software1
Kitploit
Kitploit
added 2026/09/10 8:20 p.m.7 views

CTFd

What is CTFd? CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. Features Create your own challenges, categories, hints, and flags from the Admin Interface Dynamic...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 8:04 p.m.5 views

APT-Individual-Combat-Guide

APT-Individual-Combat-Guide Many people think it is difficult to launch an APT attack because they do not know how the APT attack occurs. In fact, with the development of automation tools, the APT attack can be easily launched. 切换 切换到中文版 Background This warehouse is the code and command warehouse...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 5:45 p.m.7 views

MAL-009

MAL-009: Insecure Chaining of Flags T and TT in Zip for Linux In Zip for Linux, the “-TT” flag can be used to run arbitrary system commands. Due to the dangerous nature of this flag, it must always be used at the same time as the “-T” flag. By using a flag chaining attack, attackers that should...

6.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/10 5:38 p.m.8 views

page_table_walk

Captura la Bandera en Memoria Física Has leído sobre paginación. Los diagramas tienen sentido. Cuatro niveles, 9 bits cada uno, marco de página, desplazamiento. Claro. Pero luego te encuentras con un desafío que requiere caminar realmente las tablas de páginas, y te das cuenta de que no lo sabes...

7.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 5:23 p.m.6 views

Debuggable-App-Exploit

CVE-2024-31317 Debuggable App Exploit A Python-based exploit for CVE-2024-31317 Android Zygote Injection that makes any installed Android app debuggable by injecting malicious zygote arguments through the hiddenapiblacklistexemptions setting. Includes optional Frida gadget injection for runtime...

7.8CVSS7.5AI score0.00779EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/10 4:41 p.m.3 views

CVE-2022-0847-eBPF

CVE-2022-0847-eBPF An eBPF program to detect and defense attacks on CVE-2022-0847. In the kernel space, the program detects splice system calls, if such a system call contains a pipe as the output fd, and the flags of the pipe buffer is set to PIPEBUFFLAGCANMERGE , then an event would be submitte...

7.8CVSS7.2AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
added 2026/09/10 4:37 p.m.7 views

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - PoC de Bypass de Confianza de Propiedad de Actualización de Android Un entorno de laboratorio Android completo para reproducir y estudiar CVE-2026-0023. Este repositorio demuestra cómo CVE-2026-0023 permite que un instalador normal influya en una bandera interna de instalación de...

7.8CVSS6.3AI score0.00084EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 2:16 p.m.4 views

Oh365UserFinder

Oh365 User Finder v1.1.2 Oh365UserFinder se utiliza para identificar cuentas y dominios válidos de O365 sin el riesgo de bloqueo de cuentas. La herramienta analiza las respuestas para determinar si la bandera "IfExistsResult" es nula o no, y responde adecuadamente si el usuario es válido. La...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 2:09 p.m.20 views

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 2:00 p.m.4 views

kali-linux-docker

Official Kali Linux Docker This Kali Linux Docker image provides a minimal base install of the latest version of the Kali Linux Rolling Distribution. There are no tools added to this image, so you will need to install them yourself. For details about Kali Linux metapackages, check...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 12:42 p.m.8 views

capture-the-flag

Capture The Flag! Remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit. Requirements You will need the following in order to build the Live CD using the scripts in this project: Linux, with root access using sudo gi...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 10:53 a.m.8 views

page-cache-corruption-lpes

Page Cache Corruption LPEs 3 Linux kernel local privilege escalation exploits. Same bug class as Dirty COW and Dirty Pipe. Root shell in seconds. Every major distro affected. All three corrupt the kernel's page cache — the in-memory copy of files that processes actually read and execute. The...

8.8CVSS6.6AI score0.00583EPSS
SaveExploits19References3
Kitploit
Kitploit
added 2026/09/10 10:51 a.m.10 views

ctf-party

ctf-party Qué es...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 10:44 a.m.4 views

GLUFS

Obteniendo filtraciones usando cadena de formato. root@kitploit: .d8888b. 888 888 888 8888888888 .d8888b. d88P Y88b 888 888 888 888 d88P Y88b 888 888 888 888 888 888 Y88b. 888 888 888 888 8888888 "Y888b. 888 88888 888 888 888 888 "Y88b. 888 888 888 888 888 888 "888 Y88b d88P 888 Y88b. .d88P 888...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 10:26 a.m.5 views

cookiescanner

cookiescanner Tool for check the cookie flag in multiple sites. Intro Tool created to do more easy the process of check the cookie flag when we are analyzing multiple web servers. If you want to know for why could be useful this tools? https://www.owasp.org/index.php/SecureFlag...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 9:24 a.m.9 views

CVE-2026-24061-lab

CVE-2026-24061 — Reproduction Lab ⚠️ For educational purposes only. Isolated lab environment. Français ci-dessous Summary Critical authentication bypass CVSS 9.8 in GNU InetUtils telnetd ≤ 2.7. By injecting -f root as the USER variable via the Telnet NEWENVIRON option, an unauthenticated attacker...

9.8CVSS8.2AI score0.97993EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/10 8:37 a.m.7 views

ThreatIngestor

ThreatIngestor Utilities Scripts to improve ThreatIngestor usage and help with minimizing errors. All scripts contain the following optional argument to allow for higher verbosity in stdout: root@kitploit: python3 scripts/ -v A quick list of all available scripts: Script| Example| Description...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 7:32 a.m.6 views

cicd-goat

Entorno CI/CD deliberadamente vulnerable. Hackea pipelines CI/CD, captura las banderas. 🚩 Creado por Cider Security Adquirida por Palo Alto Networks. Tabla de Contenidos...

5.8AI score
SaveExploits0References1
Rows per page
Query Builder