CVE-2024-38063_PoC

Warning: This vulnerability's remote code execution exploit is potentially volatile! 🚀 Windows TCP/IP Remote Code Execution Vulnerability CVE-2024-38063 Packet Sender 🎭 Are you ready to unleash chaos in a controlled environment? Look no further! This program is your ticket to sending custom-craft...

cve-2023-22527

Executing Arbitrary Code In Confluence Memory CVE-2023-22527 is a widely known vulnerability affecting Atlassian Confluence. Most exploits for this vulnerability use freemarker.template.utility.Execute to execute an operating system command, but they can do so much better. In this repository you'...

SPIP-CVE-2024-23659-

SPIP-CVE-2024-23659- Script en Python 3 para validación/explotación de RCE no autenticado en SPIP BigUp Descripción cve.py automatiza: 1. Descubrimiento de formulario SPIP formulaireaction y formulaireactionargs. 2. Envío de payload multipart para ejecutar comandos en el servidor objetivo. 3...

Log4Pot

Log4Pot A honeypot for the Log4Shell vulnerability CVE-2021-44228. License: GPLv3.0 Features Listen on various ports for Log4Shell exploitation. Detect exploitation in request line and headers. Download exploit payloads recursively. Log to file and Azure blob storage. Usage 1. Install Poetry: cur...

kavanoz

🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation root@kitploit: pip install kavanoz To install from sourc...

Payload_CVE_2013_2186

PayloadCVE20132186 Código que genera el payload de CVE-2013-2186...

Dropper

Dropper sigiloso JPEG/PNG Este proyecto es una herramienta para incrustar payloads en imágenes con formato JPG/PNG, lo que permite realizar ciertas acciones al abrirlas. 🚫 Aviso legal Este repositorio se proporciona únicamente con fines educativos y está destinado a la investigación de seguridad...

blenny

Blenny is a proof-of-concept payload obfuscation tool for Windows which hides executable payload data within the icon of the executable. It is named after the sabre-toothed blenny fish, which mimmicks the behavior and looks of cleaner fish to prey on unsuspecting fish. Why? I can't recall exactly...

Mystikal

Mystikal macOS Initial Access Payload Generator Intended to be used with https://github.com/its-a-feature/Mythic Related Blog Post: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Usage: 1. Install Xcode on build machine Required for Installer Package w/ Installer Plugin 2. Install...

PowerShell-for-Hackers

2022 Hak5 hacker of the Year Table of Contents 1. Description 2. The Functions 3. Contact 4. Acknowledgments PowerShell Functions For Hackers 🤓💻 I am currently the 1 ranked payload contributor to Hak5. I decided to make this repository to share all of the functions I have come up with to develop ...

CVE-2021-40444--CABless

CVE-2021-40444--CABless version Update: Modified code so that we don´t need to rely on CAB archives the file "index.html" that triggers payload execution will contain 1 line of code only, inside 'script' tag: An article in PDF format is provided. Update: link to video demo -...

CVE-2019-2729-Exploit

CVE-2019-2729-Exploit usage: oracle-weblogic-deserialize.py -h -u TARGET -c COMMAND -h, --help : Show help message and exit -u TARGET : Target URL -c COMMAND : Command to execute Example Usage python oracle-weblogic-deserialize.py -u http://192.168.1.1:8080 -c whoami Credit for YSS Payload...

RedLine-Stealer-C2-Defender-Bypass-Payload-Analysis

1. C2 Connection – IP 198.46.86.63 Network analysis reveals that RedLine Stealer establishes a connection to the remote IP address 198.46.86.63. This IP is likely the malware's Command & Control C2 server, used for data exfiltration and command delivery. Key Observations: IP Address: 198.46.86.63...

acunetix_0day

Acunetix 0day RCE - SYSTEM Acunetix 0day RCE Usage Run script with root@kitploit: dzonerzy:dvm dzonerzy$ python /Users/dzonerzy/PycharmProjects/natbypass/acu0day.py 9999 172.16.24.1 Acunetix WVS 10 - SYSTEM Remote Command Execution Daniele Linguaglossa Payload: Meterpreter reverse TCP 4444 Exploi...

CVE-2026-10832 Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a specially crafted DER Distinguished Encoding Rules payload. The decoder attempts to allocate excessive memory based on an inflated length value...

CVE-2026-10832

A resource exhaustion flaw in the DERDecoder class within wildfly-elytron-asn1 allows a remote attacker to cause JVM memory exhaustion by sending a specially crafted DER payload with an inflated length value that is allocated without proper validation. This leads to a remote Denial of Service for...

sparkplugFuzzer

Sparkplug B MQTT Security Fuzzer A comprehensive security assessment tool for testing Sparkplug B MQTT protocol implementations. The fuzzer systematically tests all protocol fields across all 9 message types, discovers live devices on the network, and produces detailed logs for analysis...

Blind-XSS-Manager

Blind-XSS-Manager Never forget where you inject. Description A Chrome extension that keeps track of the injected URL with Blind XSS payloads. It adds a unique value for each payload assigned to the URL and recorded by the extension when it gets coppied. The payloads are almost the same as the...

PatchlessCLRLoader

PatchlessCLRLoader PatchlessCLRLoader is a fork of InlineExecute-Assembly to load .NET assembly and direct the output to mailslot. I rewrites it to a standalone loader with the following implementation: AES encryption payload Fileless payload support Patchless AMSI and ETW bypass using hardware...

DCOMUploadExec

DCOM Upload & Execute DCOM Lateral movement POC abusing the IMsiServer interface https://www.deepinstinct.com/blog/forget-psexec-dcom-upload-execute-backdoor The solution contains 2 projects DCOMUploadExec - A C++ project which hosts the lateral movement attack code AssemblyPayload - A .NET DLL...