ReverseTCPShell

ReverseTCP Shell 프레임워크 root@kitploit: | \ | / | \ / | | | | | | | | | | | | | | | | | | | || | | | | | // \ \ / / \ '/ |/ \ | | | | / \ | |/ \ | | | | \ \ /\ V / / | \ \ / | | || | | | | | / | | || \| / || |/|| || |/|| ||||| - By: @ZHacker13 - | Modules | - Show C2-Server Modules. - | Info |...

CVE-2023-26360

CVE-2023-26360 使用方法 Usage: python3 script.py endpoint proxyurl ファイルの読み取り...

CVE-2017-7269-exploit

根据 https://github.com/edwardz246003/IISexploit.git 修改得来 用法 root@kitploit: -h ：选择主机（默认127.0.0.1） -p ：选择端口（默认80） 末尾跟上 command 命令（默认regedit，目前该脚本只支持最多8个字符）...

powershell-reverse-tcp

PowerShell Reverse TCP PowerShell scripts for communicating with a remote host. Remote host will have a full control over the client and all the underlying system commands. Check shells based on: Invoke-Expression PowerShell command here, process pipes here. Tested with PowerShell v5.1.19041.2673...

CVE-2023-24078

描述 此脚本是我为 CVE-2023-24078 开发的概念验证（PoC）漏洞利用。在尝试了公开可用的 PoC 却发现它们无法正常工作，并且排查问题时感到沮丧之后，我干脆自己编写了这个脚本。 使用 root@kitploit: usage: python3 CVE-2023-24078.py -h -lh LHOST -lp LPORT -th RHOST -tp RPORT 用于利用 CVE-2023-24078 的 PoC 脚本。 必选参数： -lh LHOST, --lhost LHOST 监听主机 -lp LPORT, --lport LPORT 监听端口 -th RHOST,...

cornershot

What is CornerShot In warfare, CornerShot is a weapon that allows a soldier to look past a corner and possibly take a shot, without risking exposure. Similarly, the CornerShot package allows one to look at a remote host’s network access without the need to have any special privileges on that host...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in the solariszone module from the Ansible Community modules. When setting the name of a zone on the Solaris host, the zone name is checked by listing the process using the ‘ps’ command on the remote machine. An attacker could exploit this flaw by creating a fake zone name a...

Amazon Linux 2 : docker, --advisory ALAS2NITRO-ENCLAVES-2026-116 (ALASNITRO-ENCLAVES-2026-116)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-116 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...

Mozilla Firefox ESR < 115.39

The version of Firefox ESR installed on the remote Windows host is prior to 115.39. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-75 advisory. - Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some ...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-54542)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54542 advisory. 10.0.111-1.0.1 - Add support for Oracle Linux 10.0.111-1 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235478 Tenable has extract...

Oracle Linux 10 : .NET / 9.0 (ELSA-2026-54590)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54590 advisory. 9.0.120-1.0.1 - Add support for Oracle Linux 9.0.120-1 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235477 Tenable has extracted...

Oracle Linux 10 : .NET / 8.0 (ELSA-2026-54541)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54541 advisory. 8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235472 Tenable has extracted...

Apache Tomcat 9.0.13 < 9.0.117 Insertion of Sensitive Information Vulnerability

The version of Tomcat installed on the remote host is 9.0.13 prior to 9.0.117. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.117security-9 advisory. - Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering...

Fedora 44 : kernel (2026-d232156d86)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d232156d86 advisory. The 7.1.8 stable kernel updates contain a number of important fixes across the tree. We are now specifying all kernel updates as security because upstream wi...

SUSE SLES15: rsyslog / rsyslog-module-gssapi / rsyslog-module-gtls / etc (SUSE-SU-2026:3518-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3518-1 advisory. - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - input sequence during oversize-frame...

RHEL 9 : systemd (RHSA-2026:51134)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51134 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...

Malicious code in com.db.dbk.ui-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74649b28994f970d4972ffb8708378b355186eb729bf2e4c45d6acd16346e5d [email protected] is a version-inflated package published to the public npm registry under a scope that resembles an internal namespace. Its...

Malicious code in pfp-forms-mobile-sme-group-tiles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a17b2afbbc0ab147312c16ab39ed32f31061c185ff2dedbea76bdf5940dd2a On require, polyfill.js selects a platform-specific path, retrieves an opaque binary over HTTPS from one of several .workers.dev hosts whose names ar...

Malicious code in tinkoff-test-app-child-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ce48be2d5927c06822c9e9497869a7da10c7b183b18df3c87c983863838ec8 On require of this package, platform.js reconstructs endpoint hostnames from split string arrays via.join"", downloads a platform-specific binary fro...

MAL-2026-12237 Malicious code in tinkoff-codeceptjs-storyshots-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3112d2ca5a8472fa34cd7ca06332803889f72a195a05b3f98592e43decd66631 The package's index.js unconditionally requires bootstrap.js on load. bootstrap.js selects a platform-specific path linuxx64, linuxarm64, darwin,...