gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

powercat

powercat Netcat: The powershell version. Powershell Version 2 and Later Supported Installation powercat is a powershell function. First you need to load the function before you can execute it. You can put one of the below commands into your powershell profile so powercat is automatically loaded...

replica

REPLICA DOMA AL DRAGÓN ✨Características ⚡ Desensamblar instrucciones omitidas – Definir código que el análisis automático de Ghidra omitió ⚡ Detectar y corregir funciones omitidas – Definir funciones que el análisis automático de Ghidra omitió ⚡ Corregir tipos de datos 'undefinedN' – Mejorar el...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 checker - Golang Ps.: This version supports dpkg, rpm, pacman and MacOS Install root@kitploit: ▶ go install github.com/gustavorobertux/CVE-2024-2093@latest Basic Usage root@kitploit: ./CVE-2024-2093 Checking system for CVE-2024-3094 Vulnerability...

FstHook

FstHook A library for intercepting native functions by hooking KiFastSystemCall Note: KiFastSystemCall hooking only works on the following systems: Windows XP Service Pack 3 32-bit Windows Vista 32-bit Windows 7 32-bit...

CVE-2026-14871

CVE-2026-14871 - BOLA / IDOR in osTicket ajax.tickets.php Broken Object Level Authorization BOLA: Insecure Direct Object Reference IDOR include/ajax.tickets.php → viewField function Reported by @JF0x0r · March 27, 2026 Status: PATCHED - Fix released in osTicket v1.17.8 / v1.18.4 At a Glance...

CVE-2021-2471

CVE-2021-2471 - XXE in MySQL Connector/J Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access ...

CVE-2025-55183_POC

CVE-2025-55183 - Next.js RSC Server Function Source Code Disclosure A source code disclosure vulnerability in Next.js React Server Components RSC. A malicious HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function when the argument is...

xnuspy

xnuspy Output from the kernel log after compiling and running example/open1hook.c xnuspy is a pongoOS module that installs a new system call, xnuspyctl, which allows you to hook kernel functions from userspace. It supports iOS 13.x, iOS 14.x, and iOS 15.x on checkra1n 0.12.2 and up. 4K devices ar...

CVE-2024-48208

CVE-2024-48208 The repo contains all the work surrounding the development of the PoC for how a simple OOBOut-of-bound read can result in jail escapes as well as broken access control. About the Vulnerability The orginial CVE Description is as follows: The Github PR on the official repo details ou...

peach

Peach Fuzz - Marco de escaneo de vulnerabilidades Esta herramienta tiene como objetivo examinar archivos en un directorio dado para detectar llamadas a funciones inseguras, vulnerables o peligrosas. Está diseñada para ser extensible y fácil de entender; puedes "conectar y usar" módulos que...

VulnFanatic-NG

VulnFanatic-NG LLM-assisted vulnerability research for Binary Ninja. VulnFanatic-NG adds a sidebar panel that scans the current binary and asks an LLM — a locally hosted OpenAI-compatible model by default, or Anthropic Claude, Google Gemini, or Azure OpenAI see LLM backends — to judge whether...

SAFE

SAFE : Embedding de Función Auto-Atenta Artículo Este software es el resultado de nuestra investigación académica. Consulte nuestro artículo en arXiv: arxiv Si usas este código, por favor cita nuestro artículo académico como: root@kitploit: @inproceedingsmassarelli2018safe, title=SAFE:...

CVE-2019-6340

CVE-2019-6340 CVE-2019-6340 POC Drupal rce python poc.py url php func command node number Example: python poc.py http://192.168.142.148/drupal-8.6.9/ system ipconfig 200 Twitter: @0w4ys...

MSRKit

MSRKit A tool for calling kernel functions and mapping drivers via a ROP chain through a wrmsr primitive in a vulnerable driver AmdTools64.sys. How it works 1. Loads AmdTools64.sys via NtLoadDriver falls back to PnP devnode + GUID-based device interface if the symlink is unavailable 2. Reads...

CVE-2024-33113

CVE-2024-33113 The D-LINK DIR-845L router is vulnerable to information disclosure via the bscsmsinbox.php file. CVE-2024-33113 is a vulnerability in the D-LINK DIR-845L router that allows information disclosure through the bscsmsinbox.php file. The vulnerability stems from inadequate handling of...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync...

yarasafe

YARASAFE - Verificaciones Automáticas de Similitud de Funciones Binarias con Yara SAFE es una herramienta desarrollada para crear Embeddings de Funciones Binarias por Massarelli L., Di Luna G.A., Petroni F., Querzoni L. y Baldoni R. Puedes usar SAFE para crear tu embedding de funciones para usar...

CVE-2019-16113-PoC

CVE-2019-16113 PoC Bludit = 3.9.2 Remote Code Execution Vulnerability via "Upload function". Simple Python PoC. Discovery by @christasa: https://github.com/bludit/bludit/issues/1081 Usage Edit the script with your URL, username, password and command to execute then run the script: root@kitploit: ...

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - Unauthenticated Arbitrary File Upload CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 Critical 📝 Description The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress is vulnerable to arbitrary file uploads due to...