Lucene search
+L

2103 matches found

Kitploit
Kitploit
added 2026/09/04 8:43 p.m.7 views

reverse_ssh

Reverse SSH 아트 크레딧: https://www.instagram.com/smart.hedgehog.art/ SSH를 리버스 셸에 사용하고 싶으신가요? 이제 가능합니다. 기본 SSH 구문으로 리버스 셸 관리 및 연결 동적, 로컬 및 원격 포워딩 대상에서 파일을 검색하기 위한 기본 SCP 및 SFTP 구현 전체 윈도우 셸 http, websockets, tls 등 다양한 네트워크 전송 높은 신뢰도의 제어 채널을 위한 상호 클라이언트 및 서버 인증 그 외에도!text +----------------+ +---------+...

6.4AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/04 5:56 p.m.8 views

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler に保存されたパスワードの復号 このリポジトリ内のスクリプトを使用すると、JobScheduler インスタンスの SFTP 設定ファイルに保存されているパスワードを復号できます。 説明 SOS JobScheduler は、ユーザーが Web インターフェースを介してメンテナンススクリプトを呼び出せるようにするリモートシステム管理ツールです。このツールは、SFTP を使用してリモートシステムにメンテナンススクリプトを配置します。ユーザーはこれらの接続のプロファイルを保存でき、その際に SFTP...

7.5CVSS7.1AI score0.07842EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/04 3:46 p.m.3 views

cve-2024-46483

CVE-2024-46483 - Xlight SFTP 서버의 인증 전 힙 오버플로우 영향을 받는 버전 Xlight 32비트 및 64비트 버전 = 3.9.4.2 영향 인증되지 않은 공격자가 Xlight SFTP에 접근하여 코드 실행을 달성하거나 서비스 거부 또는 서비스를 유발할 수 있습니다. 근본 원인 SFTP 프로토콜에서 전송되는 문자열은 4바이트 길이 접두사가 붙습니다. Xlight가 네트워크 패킷에서 이러한 문자열을 읽는 데 사용하는 함수는 길이를 검증하고 필요한 메모리 양을 할당할 때 정수 오버플로우가 발생합니다. 문자열에...

9.8CVSS8.7AI score0.01108EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/04 3:03 p.m.2 views

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 저장소에는 MOVEit CVE-2023-34362의 영향을 추적하는 모든 내용이 포함되어 있습니다. SFTP 헤더 및 쿠키 탐지 방법을 활용하여 잠재적으로 영향을 받은 조직과 도메인이 포함되어 있습니다. 또한 MOVEit에 대한 새로운 기사를 추적하는 뉴스 티커를 구축했으며, https://firehose.kenbuckler.com/moveit 에서 확인할 수 있습니다...

9.8CVSS9AI score0.99934EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/09/04 7:34 a.m.3 views

onetwoseven-writeup

HTB OneTwoSeven — 完全ウォークスルー 退役した HackTheBox の Linux マシン OneTwoSeven の、完全なエンドツーエンドのウォークスルーです。攻撃チェーン全体: 決定的なクレデンシャル生成 → SFTP chroot のシンボリックリンク脱出 → vim スワップファイルの復旧 → ファイアウォールで保護された管理パネルへの SSH ポートフォワーディング → コメントアウトされた Apache RewriteRule の迂回 → RCE → root 権限獲得のための CVE-2024-1086 nftables UAF。 核心:...

7.8CVSS6.9AI score0.28058EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/09/04 7:21 a.m.70 views

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/09/04 6:57 a.m.3 views

CVE-2018-7750

CVE-2018-7750 一种针对CVE-2018-7750的远程命令执行(RCE)方法 Exploit Title: Paramiko 2.4.1 - Remote Code Execution Date: 2018-11-06 Exploit Author: jm33-ng Vendor Homepage: https://www.paramiko.org Software Link: https://github.com/paramiko/paramiko/archive/2.4.0.tar.gz Version: 1.17.6, 1.18.x 1.18.5, 2.0.x...

9.8CVSS8.9AI score0.27105EPSS
SaveExploits10References2
Kitploit
Kitploit
added 2026/09/04 5:52 a.m.4 views

CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI 및 LFI PoC - 익스플로잇 | CrushFTP CrushFTP의 SSTI Server Side Template Injection 및 LFI Local File Inclusion 취약점에 대한 개념 증명입니다. 특징 CrushFTP 서버의 심각도가 높은 취약점을 SSTI 및 인증 우회를 통해 악용합니다. 이 익스플로잇을 LFI로 승격시킵니다! 이 PoC 익스플로잇은 CrushFTP를 호스팅하는 sFTP 서버 내 취약점 탐지 및 익스플로잇을 자동화하는 목적을 제공합니다. 코드 단계별 설명: ...

10CVSS7.5AI score0.99539EPSS
SaveExploits22
NVD
NVD
added 2026/09/04 3:17 a.m.5 views

CVE-2026-85149

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...

6.9CVSS
SaveExploits0References2
CVE
CVE
added 2026/09/04 2:35 a.m.8 views

CVE-2026-85149

Lightstar SmartIT Desktop Manager is affected by a Use of Hard-coded Credentials vulnerability. The SFTP service credentials for the SmartIT Agent application are embedded in the source code, allowing unauthenticated remote attackers to extract them and gain access to browse the file system of th...

6.9CVSS5.9AI score
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/04 2:35 a.m.8 views

CVE-2026-85149 Lightstar|SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...

6.9CVSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/04 2:35 a.m.6 views

EUVD-2026-70871

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...

6.9CVSS5.9AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/04 2:04 a.m.22 views

Kopia Server 0.23.0 - Remote Code Execution

Kopia before version 0.23.0 allows unauthenticated remote code execution when started in server mode with the --without-password flag. When the /api/v1/repo/exists endpoint is exposed, it enables instantiation of the SFTP storage backend with user-supplied sshArguments. Due to improper argument...

9.8CVSS9.5AI score0.0161EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/03 5:28 p.m.61 views

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/03 4:52 p.m.150 views

flashsploit

Exploitation Framework for ATtiny85 HID Attacks Twitter - Telegram - Blog Available in Flashsploit is an Exploitation Framework for Attacks using ATtiny85 HID Devices such as Digispark USB Development Board, flashsploit generates Arduino IDE Compatible .ino Scripts based on User Input and then...

5.9AI score
SaveExploits0References1
Ubuntu
Ubuntu
added 2026/09/03 12:37 p.m.6 views

USN-8722-1: libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain SFTP server responses. A remote attacker controlling an SSH server could use this issue to cause libssh2 to crash or possibly execute arbitrary code. CVE-2026-66032 It was discovered that libssh2 incorrectly handled AES-GCM cipher...

8.8CVSS7.4AI score0.00583EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 5:46 p.m.5 views

Ssh Mitm

SSH-MITM SSH-MITM は、セキュリティ監査やペネトレーションテストのための中間者攻撃型SSHプロキシです。SSH、SCP、SFTPセッションの傍受、エージェント転送、ポート転送などをサポートします。 このリポジトリはミラーであり、更新は停止しています。 公式リポジトリはこちらです: GitHub: ssh-mitm/ssh-mitm Codeberg: ssh-mitm/ssh-mitm リモートとブックマークを適宜更新してください。 リンク ドキュメント: docs.ssh-mitm.at PyPI: pypi.org/project/ssh-mitm バグ報告と課題:...

5.4AI score
SaveExploits0References4
Rockylinux
Rockylinux
added 2026/09/02 6:01 a.m.6 views

libssh security update

An update is available for libssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list libssh is a library which implements the SSH protocol. It can be used to...

7.5CVSS6.3AI score0.00567EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 2:07 a.m.4 views

watchTowr-vs-progress-moveit_CVE-2024-5806

CVE-2024-5806 Progress MOVEit Transfer CVE-2024-5806 のエクスプロイト。ブログ記事は TBD をご覧ください。 PoCの動作例 --help でヘルプを確認してください。典型的な実行例は次のとおりです: root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...

9.8CVSS8.7AI score0.81474EPSS
SaveExploits3
UbuntuCve
UbuntuCve
added 2026/09/02 12:00 a.m.7 views

CVE-2026-84267

A flaw was found in the SFTP backend in gvfs. When mounting a share, a...

4.3CVSS5.8AI score0.00212EPSS
SaveExploits0References3
Rows per page
Query Builder