struts-pwn_CVE-2017-9805

struts-pwn - CVE-2017-9805 漏洞利用工具 适用于 Apache Struts CVE-2017-9805 的漏洞利用工具 使用方法 检查单个 URL 是否存在漏洞。 python struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' 检查 URL 列表是否存在漏洞。 python struts-pwn.py --list 'urls.txt' 对单个 URL 进行漏洞利用。 python struts-pwn.py --exploit --url...

C2-Pwn

C2-Pwn 使用 Shodan API 拉取 C2 服务器，并在其上运行已知漏洞利用。 需要 Shodan 账户以使用 API。https://www.shodan.io/ Rat 漏洞利用支持 Dark Comet 远程文件下载 https://www.rapid7.com/db/modules/auxiliary/gather/darkcometfiledownloader Gh0st Rat 缓冲区溢出 https://www.rapid7.com/db/modules/exploit/windows/misc/gh0st Net Bus 16.0 认证绕过...

seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

ctf-skills

ctf-skills Agent Skills for solving CTF challenges — web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more. Works with any tool that supports the Agent Skills spec, including Claude Code. インストールbash npx skills add ljagiello/ctf-skills root@kitploit: Friday Studio...

struts-pwn_CVE-2018-11776

struts-pwn - CVE-2018-11776 漏洞利用工具 用于 Apache Struts CVE-2018-11776 的漏洞利用工具 用法 检查单个 URL 是否存在漏洞。 python struts-pwn.py --url 'http://example.com/demo/struts2-showcase/index.action' 检查 URL 列表中的每个地址是否存在漏洞。 python struts-pwn.py --list 'urls.txt' 对单个 URL 执行漏洞利用。 python struts-pwn.py --exploit --url...

2018-QWB-CTF

2018-QWB-CTF 2018强网杯CTF题目整理 root@kitploit: │ ├── 01Misc-4题 │ ├── 题目名称：ai-nimals │ │ └── 题目名称：ai-nimals.mhtml │ ├── 题目名称：welcome │ │ └── 题目名称：welcome.mhtml │ ├── 题目名称：签到 │ │ └── 题目名称：签到.mhtml │ └── 题目名称：问卷调查 │ └── 题目名称：问卷调查.mhtml ├── 02Crypto-5题 │ ├── 题目名称：nextrsa │ │ └──...

elfxtract

ELFXtract ELFXtract 是一款自动化分析工具，用于枚举 ELF 二进制文件 由 Radare2 和 r2ghidra 提供支持 该工具专门为 PWN 挑战开发，具有许多自动化功能 它几乎显示 ELF 的所有详细信息，并使用 r2ghidra 将其 ASM 反编译为 C 代码 在 Ghidra 中反编译 ELF 需要更多时间，但在 elfxtract 中，反编译和显示只需几秒 ELFXtract 的功能 1. 文件信息 2. 共享对象依赖详细信息 3. ELF 安全缓解措施详细信息 / Checksec 4. 字符串详细信息 5. 头部内存映射 6. ROP 小工具 7...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup 这是一个我用 C 语言编写的 CTF pwn 挑战，要求用户利用 CVE-2021-4034 漏洞。玩家会在此仓库的 challenge 目录中获得 2 个二进制文件。chal 二进制实现了该 CTF 挑战，而 shelly.so 是一个辅助二进制。 如何模拟此挑战 在撰写本文时，Dockerfile 尚未完成。Dockerfile 是现场 CTF 中部署此挑战所必需的，但在本地并非必需：你仍然可以通过设置用户权限并安装易受攻击的软件包来在本地模拟此挑战，具体步骤如下： 1. 为了成功利用此漏洞，不在 Linux 机器上的玩家应首先安装...

Challenges_2022_Public

区块链 Challenge| Author| Difficulty| Release Round ---|---|---|--- Solve Me| @bluealder| 入门| 第 1 轮 Crypto Casino| joseph8210| 简单| 第 2 轮 Secret and Ephemeral| @bluealder| 中等| 第 1 轮 Private Log| @bluealder| 困难| 第 1 轮 EVM Vault Mechanism| joseph8210| 困难| 第 1 轮 Web 数字取证（DFIR） Pwn 密码学 杂项 调查问卷 Challenge|...

chall2026-telneted

@Hack 2026: Telneted Escrito por Harsh. Categoría : Pwn Resueltos : 34/120 Etiquetas : beginner Protocolo : telnet El equipo de reconocimiento ha encontrado otro punto final en la red de los Alienígenas, pero parece que no podemos conectarnos a él con nuestras herramientas. Las capturas de red...

GlacierCTF2023_writeups

Glacierctf 2023 描述 CTF 日期： 24.11.2023 - 26.11.2023 时长： 48 小时 CTF 时间： https://ctftime.org/event/1992 GlacierCTF 2023 是由 LosFuzzys 组织的第二届 Jeopardy 式 CTF 赛事。 本次 CTF 涵盖了多种类别的挑战，包括 pwn、rev、web、crypto、智能合约和 misc。 2023 GlacierCTF 仓库包含所有挑战以及题解/writeup。 衷心感谢所有参赛者以及为本次 CTF 提供挑战的人们，正是你们让这场赛事得以成功举办。 祝贺总排名前 1...

CVE-2024-21338-1

CVE-2024-21338 此 PoC 是为 XSS PWN-Day 竞赛开发的。 https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...

EUVD-2026-54565

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...

PT-2026-65944

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

rspwner

RSPWNER RSPWNER is a Rust-based AI-assisted CTF pwn assistant...

CVE-2026-41249

CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow .github/workflows/static.yml uses the pullrequesttarget trigger but dangerously checks out the unverified code from the pull request head ref: $ github.event.pullrequest.head.re...

CVE-2026-45315

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the audio transcription upload endpoint takes the file extension from the user-supplied filename and saves the file under CACHEDIR/audio/transcriptions/.. The /cache/path route serve...

Fedora 42 : kernel (2026-8b4a8d18d2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8b4a8d18d2 advisory. The 6.19.14-104 kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia. --...

Fedora 43 : kernel (2026-03be3dc34b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-03be3dc34b advisory. The 7.0.8 stable kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia...

Fedora 44 : kernel (2026-2aeb7d033a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2aeb7d033a advisory. The 7.0.8 stable kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia...