attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

CVE-2022-4262

CVE-2022-4262 Full Analysis including root cause, PoC, exploit and slides of CVE-2022-4262. Disclaimer This repository is intended solely for educational purposes and must not be used for any malicious activities...

CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 Proof of concept Writeup: https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ The python script abuses the upload function that is availible unauthenticated at /admin/files-upload/ The script locally creates a bin folder and a file named...

lpe-toolkit

Kit de Escalada de Privilegios Local para Linux Kit de herramientas de escalada de privilegios multiarquitectura con 24 exploits amd64 precompilado; otras arquitecturas compiladas mediante gcc en tiempo de ejecución. Soporta amd64, arm64, 386, mips, mipsle, mips64, y mips64le. Detecta la versión...

Exploiting-a-Linux-kernel-vulnerability

Exploiting-a-Linux-kernel-vulnerability - IT19159140 Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same...

0days-in-the-wild

0-days explotados en la naturaleza Este repositorio es una referencia de documentos sobre vulnerabilidades de día cero detectadas como explotadas en la naturaleza. Incluye tanto análisis de causa raíz RCA para cada exploit de día cero como una tabla que rastrea cada día cero. Estos documentos est...

CVE-2026-31787

XSA-487 / CVE-2026-31787 Doble liberación en el kernel de Linux en el controladorprivcmd de Xen Una doble liberación de memoria del kernel en el controlador privcmd de Xen del kernel de Linux permite eludir el bloqueo del kernel arranque seguro. La explotación requiere acceso a nivel de root, lo...

omae-wa-cheese-da

omae-wa-cheese-da Image L/E física arbitraria de GPU CVE-2025-21479 - filtración de KASLR - SELinux permisivo - servidor root de gancho de inicio seguro de RKP & bypass de DEFEX ejecución de binario personalizado LDPRELOAD Tarda unos 6 minutos.. Ten paciencia. Lo optimizaré después. Dispositivos...

omae-wa-cheese-da

omae-wa-cheese-da Image GPU arbitrary physical R/W CVE-2025-21479 - KASLR leak - SELinux permissive - RKP-safe init-hook root server & DEFEX bypass custom binary exec LDPRELOAD It takes about 6 mins.. Be patient. I'll optimize it later. Tested devices Galaxy Z Flip 5 SM-F731N Firmware:...

CVE-2019-3396_EXP

CVE-2019-3396EXP CVE-2019-3396 confluence SSTI RCE 1、put the cmd.vm on your website must use ftp or https ,http doesn't work 2、modify RCEexp.py ，change the filename = 'ftp://1.1.1.1/cmd.vm' （python -m pyftpdlib -p 21） 3、python RECexp.py http://test.wikitest.cc:8080 "whoami" $ python RECexp.py...

CVE-2025-32463

CVE-2025-32463 Local Privilege Escalation to Root via Sudo chroot in Linux 🛑 Vulnerability Summary CVE-2025-32463 is a local privilege escalation vulnerability in the Sudo binary. The flaw allows a local user to escalate privileges to root under specific misconfigurations or with crafted inputs...

IoT-Vulnerability-Research-Public

Hardware Security & Vulnerability Research This repository serves as a centralized public archive for my independent vulnerability research, hardware audits, and Coordinated Vulnerability Disclosures CVD. All proof-of-concept scripts, firmware extractions, and hardware teardowns are published her...

CVE-2025-6019

CVE-2025-6019 Proof of Concept PoC This repository contains a Proof of Concept PoC script for CVE-2025-6019 , a Local Privilege Escalation LPE vulnerability in libblockdev and udisks. The script creates an XFS filesystem image with an SUID bash binary and exploits the vulnerability to mount it...

yersinia

生成树 1: 发送配置BPDU的DoS攻击 root@kitploit: 让我们发送一些配置BPDU，声称自己是根！！！通过持续发送根路径开销为0、桥ID随机生成（因此根ID相同）以及其余字段使用默认值的配置BPDU，我们试图干扰附近的交换机，导致其STP引擎在解析和重新计算时发生DoS。 源MAC：随机生成。 目的MAC：01:80:c2:00:00:00 桥ID：8000:sourcemac 根ID：8000:sourcemac Hello时间：2 转发延迟：15 最大老化时间：20 根路径开销：0 01:20:26: STP: VLAN0001 heard root...

Silent-Call

Silent;Call Root remoto sin autenticación previa en Cisco Unified Communications Manager 15.x Tres solicitudes HTTP. Cero credenciales. Acceso root. Cada llamada ahora es tuya. Kill Chain Paso| Componente| Descripción ---|---|--- 1| Spoofhack| La suplantación de la cabecera X-Forwarded-For elude ...

CVE-2022-0997

Fidelis Network and Deception - CVE-2022-0997 - Insecure File Permissions Privilege Escalation Releasability and Acknowledgements The exploit was approved for public release by the United States Government. Special thanks to the servicemen and government liaisons tasked with approving the...

CVE-2025-64155

CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution Proof of concept exploit for Fortinet FortiSIEM which abuses an argument injection to write a file to gain code execution as root Blog Post Deep-dive analysis here: Horizon3.ai - CVE-2025-64155: Three Years of Remotely...

exploit_CVE-2021-3560

CVE-2021-3560 Exploit Script This script exploits CVE-2021-3560, a vulnerability in polkit that allows privilege escalation to root. Usage After cloning the repository, grant execution permissions and run the script: root@kitploit: chmod +x exploit.sh ./exploit.sh Expected Outcome After running t...