CVE-2021-20294-POC

CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc download and compile root@kitploit: wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so...

catsploit

CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...

CVE-2025-7840

Exploit XSS para CVE-2025-7840 Autor : Byte Reaper @ByteReaper0 Descripción Exploit de prueba de concepto para CVE-2025-7840 , dirigido a un endpoint de aplicación web vulnerable que no sanitiza la entrada del usuario en el parámetro Firstname de un formulario de reserva. Al construir una solicit...

CVE-2025-7769

CVE-2025-7769 – Inyección Remota de Comandos en mobileapi Descripción : Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE‑2025‑7769 , una vulnerabilidad crítica de Inyección de Comandos remota encontrada en dispositivos Tigo Energy CCA que exponen el endpoint...

CVE-2025-8550

CVE-2025-8550 – Exploit XSS en atjiu pybbs Descripción Este repositorio alberga un exploit automatizado de Prueba de Concepto PoC para CVE-2025-8550 , una vulnerabilidad de Cross‑Site Scripting XSS reflejado en atjiu pybbs ≤ v6.0.0. Ataca el parámetro username del endpoint /admin/topic/list, el...

OFFAT

OWASP OFFAT OWASP OFFAT OFFensive Api Tester está creado para probar automáticamente APIs en busca de vulnerabilidades comunes después de generar pruebas a partir de un archivo de especificación OpenAPI. Ofrece la funcionalidad de fuzzing automático de entradas y el uso de entradas proporcionadas...

payday

Payday Payload generator that uses Metasploit and Veil. Takes IP address input and then builds payloads automatically. Calls Veil framework with supplied IP address and creates binaries and handlers. Uses msfvenom to create payloads and writes resource handler files in the same way that Veil does...

PrettyTrusts

PrettyTrusts Pruébalo en:http://peewpw.github.io/PrettyTrusts Visualiza la salida de PowerView's Get-DomainTrustMapping | Export-CSV -NoTypeInformation trusts.csv. Dale el archivo csv y obtén un bonito diagrama para jugar. Debería funcionar con salidas de PowerView antiguas y nuevas. Todo se...

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

CVE-2024-6768

CVE-2024-6768: Improper validation of specified quantity in input produces an unrecoverable state in CLFS.sys causing a BSoD. Introduction: CVE-2024-6768 is a vulnerability in the Common Log File System CLFS.sys driver of Windows, caused by improper validation of specified quantities in input dat...

whatsfoto

WhatsFoto Herramienta sencilla para descargar múltiples fotos de perfil de WhatsApp. Es una extensión para Chrome. Instalación Descarga el zip o la carpeta y arrastra a tus extensiones. Asegúrate de activar el modo desarrollador. O usa un archivo zip. Cómo usar Inicia sesión en web.whatsapp.com H...

CVE-2024-46878-TikiCMS-XSS

CVE-2024-46878 - Tiki CMS Reflected Cross-Site Scripting XSS Vulnerability Tiki CMS - 'page' Parameter Reflected Cross-Site Scripting XSS Vulnerability Disclaimer Intended only for educational, research, and defensive purposes. Unauthorized use against systems without permission is illegal. Summa...

LFiFreak

LFI Freak Características Funciona con Windows, Linux y OS X Incluye bind y reverse shell tanto para Windows como para Linux Escrito en Python 2.7 ¿De qué se trata todo esto? Una herramienta única para explotar inclusiones de archivos locales usando los métodos PHP Input, PHP Filter y Data URI...

kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

naabu

Features • Installation • Usage • Running naabu • Config • NMAP integration • CDN/WAF Exclusion • Discord Naabu is a port scanning tool written in Go that allows you to enumerate valid ports for hosts in a fast and reliable manner. It is a really simple tool that does fast SYN/CONNECT/UDP scans o...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...

CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...

webscreenshot

webscreenshot Description A simple script to screenshot a list of websites, based on the url-to-image PhantomJS script. Features Integrating url-to-image 'lazy-rendering' for AJAX resources Fully functional on Windows and Linux systems Cookie and custom HTTP header definition support for the...