AzureAD-Attack-Defense

Microsoft Entra ID - Attack and Defense Playbook This publication is a collection of various common attack scenarios on Microsoft Entra and how they can be mitigated or detected. All of the included scenarios, insights and comments are based on experiences from the contributors during their attac...

CVE-2025-26788

CVE-2025-26788 Environment Setup Step 1 - Verify Docker Desktop is running docker version Step 2 - Build Image cd C:\Users\jhcho\Desktop\passkey\CVE-2025-26788 docker build -t skfs . Step 3 - Run Container docker run -d --name skfs --hostname skfs.localdomain --privileged --cgroupns=host -v...

CVE-2026-33017

CVE-2026-33017 Langflow RCE ★ CVE-2026-33017 Langflow Remote Code Execution PoC ★ https://github.com/user-attachments/assets/562fc637-6be1-4ab9-a396-bfad56447af7 Environment Setup Use the following commands to build and run the vulnerable Langflow environment: root@kitploit: docker build -t...

ASSAMEE

ASSAMEE ASSAMEE is a free advanced encryption tool that can be used to encrypt files and directories and store them on Anonfiles.com. It uses AES-256 encryption, which is a strong and secure encryption method. To access the encrypted files, a download ID is required to decrypt and download the da...

FOXCMS-CVE-2025-29306-POC

FOXCMS Parameter Injection RCE – CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection → Code...

CVE-2023-29489

Introductoin An exploitable reflected cross-site scripting XSS vulnerability has been discovered in certain versions of cPanel and was assigned with CVE-2023-29489. This vulnerability allows attackers to execute arbitrary JavaScript code without requiring authentication. The XSS vulnerability can...

bucky

Bucky An S3 account ID enumeration and bucket discovery tool Given a single accessible S3 bucket, bucky extracts the 12-digit AWS account ID that owns it, then discovers additional buckets belonging to the same account by fuzzing bucket names against a wordlist — all in one command. What It Does ...

iDictPy

iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...

secretive

Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...

BrowserBox

BrowserBox by DOSAYGO Secure, modern Remote Browser Isolation RBI with a clientless experience 🔐 NEW in v18.0.1 — Passkey authentication on macOS: sign in to websites with real passkeys inside your remote browser. Passkeys are created and stored on your Mac's Secure Enclave and unlocked with Touc...

CVE-2025-51865

CVE-2025-51865 Vulnerability description Ai2 is a Seattle based non-profit AI research institute. Ai2 provide a playground web application to chat with their LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to tamper other...

CVE-2023-6329

CVE-2023-6329 — Control iD iDSecure Authentication Bypass A Python proof-of-concept exploit for CVE-2023-6329 , an improper access control vulnerability in Control iD iDSecure versions 4.7.43.0 and below. The flaw allows an unauthenticated remote attacker to reconstruct valid login credentials by...

CredSpy

CredSpy Enumerate Microsoft Entra ID authentication methods for email addresses using the public GetCredentialType API. This is the same endpoint the Microsoft login page uses when you enter a username. In contrast to most tools using the GetCredentialType method, CredSpy also shows the...

EvilMist

EvilMist EvilMist is a collection of scripts and utilities designed to support cloud security configuration audit, cloud penetration testing & cloud red teaming. The toolkit helps identify misconfigurations, assess privilege-escalation paths, and simulate attack techniques. EvilMist aims to...

IkeAbuser

IkeAbuser A simple tool wrapper to automate the enumeration, fingerprinting, and PSK extraction of an IPSec VPN gateway. Nothing fancy here, just a script I put together to save time during CTFs and while studying for the CPENT. It chains together ike-scan, nmap and hashcat so I don't have to typ...

CVE-2026-0300-POC

🛡️ CVE-2026-0300: PAN-OS User-ID™ Portal RCE Analysis Research Proof-of-Concept: CWE-787 Out-of-bounds Write 📌 Overview CVE-2026-0300 is a high-severity buffer overflow vulnerability identified in the Palo Alto Networks PAN-OS User-ID™ Authentication Portal Captive Portal. This research repository...

CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Batch Scanning Tool How to use root@kitploit: options: -h, --help show this help message and exit -t, --target TARGET Target IP/CIDR or comma-separated list repeatable -f, --file FILE File with targets IP/CIDR, one per line or comma-separated -p, --port PORT Target...

GHSA-JQHH-CJMQ-VMV6 Open WebUI: Any authenticated user can hang the server via a cyclic chat message history

Summary Chat histories are stored as an unvalidated JSON object. The walk that reconstructs a chat's message chain detected repeats using each message's own id field while moving through the history by map key, so a message that simply omitted id was never recorded as visited. A history whose...

CVE-2025-6783

Inyecta una condición siempre verdadera en la cláusula WHERE para que todas las filas coincidan: root@kitploit: curl -i -X POST \ -H "Content-Type: application/json" \ -H "forms-id: poc-001' OR '1'='1' -- " \ -H "domain-id: example.com" \ -d ' "emabedtype":"iframe", "shortcodetitle":"INJECTED",...

offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...