586 matches found
HTB-Season-10
HTB-Season-10 HTB Season 10 — Competiti...
📄 Node.js 25.x Permission Model Sandbox Bypass / Path Traversal
This Metasploit module validates a sandbox escape weakness in the Node.js permission model that allows restricted file access bypass through symlink-based path traversal. When Node.js is executed with the --permission flag and limited filesystem read/write paths, the permission checks rely on...
Context-Aware Offensive Intelligence (CAOI)
This research introduces a new class of post-exploitation intelligence modules for the Metasploit Framework. Unlike traditional modules, these components do not exploit vulnerabilities, escalate privileges, or modify target systems. The modules operate as a contextual intelligence layer that...
Samba-smbd-3.x-4.x-Exploitation-using-Metasploit
Samba smbd 3.x–4.x Exploitation using Metasploit Project...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
⚡ Pentest Automation !Versionhttps://img.shields.io/badg...
red-team-arsenal
🎯 Red Team Arsenal !Versionhttps://img.shields.io/badge/...
ethical-hacking-excersises
Exploitation Techniques – Course Exercises Repository Over...
redamon
Unmask the hidden before the world does An autonomous AI fra...
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
It's getting harder to tell where normal tech ends and malicious intent begins. Attackers are no longer just breaking in — they're blending in, hijacking everyday tools, trusted apps, and even AI assistants. What used to feel like clear-cut "hacker stories" now looks more like a mirror of the...
Athena
Athena Athena is an all in one...
📄 dotCMS 24.04.24 Vulnerability Scanner
dotCMS version 24.04.24 advanced exploitation python scanning script that looks for local file inclusion, data exposure, SQL injection, and more. ============================================================================================================================================= | Title :...
Exploit for Deserialization of Untrusted Data in Facebook React
🚀 R2S - Next.js RSC Exploit Framework !Versionhttps://im...
Hunting for Mythic in network traffic
Post-exploitation frameworks Threat actors frequently employ post-exploitation frameworks in cyberattacks to maintain control over compromised hosts and move laterally within the organization's network. While they once favored closed-source frameworks, such as Cobalt Strike and Brute Ratel C4,...
📄 ClipBucket 5.5.2 Build 90 Practical Exploitation Tool
An enhanced Python penetration testing tool designed specifically for ClipBucket video sharing platform vulnerability assessment and exploitation. It checks for remote command execution, file upload, SQL injection, local file inclusion, and more. It affects ClipBucket version 5.5.2 Build 90...
Exploit for CVE-2025-9074
CVE-2025-9074 Exploit Tool A sophisticated exploitation frame...
wp_exploitation_framework
🚀 WordPress PWN Framework v5.0 - AI-Powered Edition !Python...
Meterpreter Reverse TCP
Advanced Meterpreter-like reverse TCP listener with post-exploitation capabilities !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import socket import threading import time import struct class ModuleListener: """Meterpreter reverse TCP listener with advanced post-exploitation...
List running processes
List running processes from kittysploit import class ModulePost: info = "name": "List running processes", "description": "List running processes", "arch": Arch.PHP, 'agent': 'risk': 'intrusive', 'effects': 'activeexploitation', 'expectedrequests': 2, 'reversible': False, 'approvalrequired': True,...