donutCS

donutCS .NET Core version of donut shellcode generator. https://vimeo.com/369739318 Note: I simply glued a bunch of things together for a more personally useable version. TheWover and Odzhan did all the hard work. Install Confirmed working on Linux, Mac and Windows Kali Install Instructions Usage...

doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

SharpFtpC2

SharpFtpC2 PoC SharpFtpC2 is a small, experimental project aimed at exploring the possibility of using FTPS for relaying commands and responses between two remote computers. It employs the FTP protocol as a makeshift tunnel through which the computers, both acting as clients connected to an FTP...

Elite

Deprecated Temporarily The parent Covenant project no longer requires a client-side application. Elite has temporarily been deprecated. Please instead use the web interface included with the Covenant project. Elite may eventually be brought up-to-date with the Covenant project as an alternative...

dvcsharp-api

Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. Docker root@kitploit: docker-compose up Manual Install .NET Core 2.x SDK Microsoft .NET Core SDK Install...

simple-maven

Damn Vulnerable C Application API Only Getting Started Note: This is a deliberately vulnerable app, please do not host it on production or Internet/public facing servers. Use with caution. kk Docker test root@kitploit: docker-compose up tets Manual Install .NET Core 2.x SDK Microsoft .NET Core SD...

CVE-2025-55315-repro

CVE-2025-55315-repro This repository contains a small ASP.NET Core console app to reproduce and exercise HTTP chunked-transfer and newline parsing behavior. More information on CVE-2025-55315. Contents Repro/Program.cs - Console app that starts a local Kestrel server and runs two TCP-based tests...

SSCMS_Decrypt

sscms siteserver cms database decrypt Introduction: SSCMS is based on .NET Core, enabling you to set up a fully functional, high-performance, large-scale, and easy-to-maintain website platform in the shortest time, at the lowest cost, and with the least manpower. Project address:...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

AVIator

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About ://name AV : AntiVirus Ator : Is a swordsman, alchemist, scientist, magician, scholar, and engineer, with the ability to sometimes produce objects out of thin air https://en.wikipedia.org/wiki/Ator About ://purpose AV|Ator is a backdoor...

The vulnerability of the sock_ops_convert_ctx_access() function in the net/core/filter.c module allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information within Linux’s kernel-based networking functions.

The vulnerability of the sockopsconvertctxaccess function in the net/core/filter.c module relates to the execution of operations outside of buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the xdp_master_redirect() function in the net/core/filter.c module exposes network functions of the Linux kernel, allowing a hacker to cause a service failure.

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerabilities of the functions qdisc_pkt_len_segs_init() and __dev_queue_xmit() in the net/core/dev.c module of the Linux kernel allow an attacker to access protected information or cause service failures.

The vulnerabilities of the functions qdiscpktlensegsinit and devqueuexmit in the net/core/dev.c module of the Linux kernel are related to incorrect assumptions about the organization of data or memory. Exploiting these vulnerabilities can allow an attacker to access protected information or cause...

BearFTP

BearFTP Dare to hack a bear? BearFTP is a honeypot FTP server, designed to log hackers' attempts and report them to public IP blacklist databases. Featuring: Configuration support no need to recompile Edit files and content of files located on server Tested on FileZilla and WinSCP. AntiNmap,...

BIT-DOTNET-2026-70354 .NET Core Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

BIT-DOTNET-SDK-2026-70354 .NET Core Remote Code Execution Vulnerability

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

Linux Distros Unpatched Vulnerability : CVE-2026-74286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: pfcp: allocate per-cpu tstats for PFCP netdevs PFCP uses devgettstats64 as its ndogetstats64 callback, but pfcplinksetup does not request...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

The vulnerability of the net/core/filter.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the net/core/filter.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to cause a service failure...