process_overwriting

Перезапись процесса Перезапись процесса — это техника внедрения PE, тесно связанная с Вытеснением процесса и Перегрузкой модуля. С её помощью вы можете заменить главный исполняемый файл не DLL целевого процесса. Она работает только для только что созданного процесса — внедрение в существующие...

CVE-2026-82634

Frappe Framework development builds contain an authorization flaw in the render_jinja_template endpoint (file: print_format_generator.py). Low-privileged users with print permission on any document can supply raw Jinja template strings, enabling arbitrary SELECT statements against unrelated table...

CVE-2024-7954-RCE

Описание Плагин porteplume, используемый в SPIP до версий 4.30-alpha2, 4.2.13 и 4.1.16, уязвим для выполнения произвольного кода. Удаленный неаутентифицированный злоумышленник может выполнить произвольный PHP-код от имени пользователя SPIP, отправив специально сформированный HTTP-запрос. Эксплойт...

jndi-ldap-test-server

jndi-ldap-test-server 이것은 Java 애플리케이션에서 JNDI+LDAP 인젝션 공격, 특히 CVE-2021-44228에 대한 취약성을 테스트하기 위한 최소한의 LDAP 서버입니다. CVE-2021-44228 취약성 테스트 방법 1. 플랫폼에 맞는 테스트 서버 바이너리를 다운로드합니다 모든 바이너리는 Releases에서 확인 가능. 2. 테스트하려는 애플리케이션에서 접근 가능한 IP 주소에서 테스트 서버를 실행합니다. 서버를 애플리케이션과 동일한 호스트localhost에서 실행할 수 있다면 가장 간편합니다. 3...

cve-2022-26134

CVE-2022-26134 1vere$k 제작 Atlassian Jira 익스플로잇을 위한 간단한 PoC입니다. 인증되지 않은 사용자가 서버에서 코드를 실행할 수 있게 합니다. CVE-2022-26134 - OGNL 인젝션 취약점. Atlassian Confluence 7.18 및 이하 제품에 영향을 미치는 원격 코드 실행 취약점을 악용하는 개념 증명 스크립트입니다. OGNL 인젝션 취약점을 통해 인증되지 않은 사용자가 Confluence Server 또는 Data Center 인스턴스에서 임의 코드를 실행할 수 있습니다...

cve-2022-22947

Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 Build root@kitploit: $ git clone https://github.com/twseptian/cve-2022-22947.git $ cd cve-2022-22947 $ docker build . -t cve-2022-22947 $ docker run -p 9000:9000 --name cve-2022-22947 cve-2022-22947 PoC send the following reques...

CVE-2024-24576-PoC-Python

CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...

CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remote OS Command Injection/Remote Code Execution in TastyIgniter v3.0.7 Sendmail web part CVE-2021-38817 An authenticated remote OS command injection vulnerability exists in the TastyIgniter v3.0.7 Restaurtant CMS Sendmail configuration me...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 확인 및 익스플로잇 설치: root@kitploit: python3 -m pip install -r requirements.txt 사용법 단일 대상: root@kitploit: python3 cve.py s 전체 URL API 명령어 예시 python3 cve.py s http://127.0.0.1:8000/mgmt/tm/util/bash '"command":"run","utilCmdArgs":"-c id"' 다중 대상: root@kitploit: python3 cve.py m...

EUVD-2026-68197

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-82541

A SQL injection vulnerability was identified in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/sup_edit.php through manipulation of the ID argument. The flaw allows a remote attacker with low privileges to inject SQL commands, potentially leading to partial compromi...

NXcrypt

NXcrypt NXcrypt is a polymorphic 'python backdoors' crypter written in python by Hadi Mene h4d3s . The output is fully undetectable . NXcrypt can inject malicious python file into a normal file with multi-threading system . Run it with superuser's permissions . NXcrypt output is Fully undetectabl...

CVE-2026-78691

ash_sql (an Elixir query library from the Ash ecosystem) is vulnerable to LIKE wildcard injection in its contains/2, string_starts_with/2, and string_ends_with/2 filters. The escape helpers prefix % and _ with a backslash but fail to escape a pre-existing backslash in user input, so \% becomes a ...

CVE-2026-78038

ash_oban (an Elixir library bridging Ash and Oban) contains an improperly controlled modification of dynamically-determined object attributes flaw in AshOban.build_trigger/3. The function builds trusted job arguments with atom keys and merges caller-supplied :args underneath, intending trusted va...

CVE-2018-12533

RF-14310 / CVE-2018-12533 payload generator Based on Lucifaer research All credit goes to https://github.com/Lucifaer References https://access.redhat.com/security/cve/cve-2018-12533 richfaces-jboss-poc Easy to deploy proof of concept to practice Richfaces 3.3.4 deserialization + EL injection...

cve-2026-82222-poc

CVE-2026-82222 Unauthenticated PHP object injection to RCE in GiveWP = 4.16.7.1. Patched in 4.16.7.2...

CVE-2023-51385_test

Verify CVE-2023-51385 First, add the following content to /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Command injection exists in the .gitmodules file statement root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar Afte...

Blackbone

Blackbone Biblioteca de hacking de memoria de Windows Características Compatibilidad con x86 y x64 Interacción con procesos Gestionar PEB32/PEB64 Gestionar procesos a través de la barrera WOW64 Memoria de procesos Asignar y liberar memoria virtual Cambiar la protección de memoria Leer/Escribir...

patchkit

patchkit Patches an ELF binary using one or more simple Python scripts. Usage: root@kitploit: patch patchdir|file... patchdir Contains one or more Python patch files, which will be executed in alphabetical order against a binary. Patch Examples Nopping an address, injecting an assembly function,...

PoolParty

PoolParty A collection of fully-undetectable process injection techniques abusing Windows Thread Pools. Presented at Black Hat EU 2023 Briefings under the title - The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools PoolParty Variants Variant ID| Varie...