8779 matches found
cryptohackapp
cryptohackapp Getting started To make it easy for you to get started with GitLab, here's a list of recommended next steps. Already a pro? Just edit this README.md and make it your own. Want to make it easy? Use the template at the bottom! Add your files Create or upload files Add files using the...
Setup IPsec VPN
English | 简体中文 | 繁體中文 | 日本語 | Русский IPsec VPN Server Auto Setup Scripts Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. An IPsec VPN encrypts your network traffic, so that nobody between you and the VPN server can eavesdrop on your data as it...
CVE-2023-39063
CVE-2023-39063 This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3. Exploit Details Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This...
CVE-2023-22518
CVE-2023-22518 Exploit Description This repository contains an exploit script for CVE-2023-22518. The script allows for unauthorized file uploads, potentially leading to remote code execution or other security vulnerabilities. Disclaimer This repository is for educational and informational purpos...
dnspython
dnspython INTRODUCTION dnspython is a DNS toolkit for Python. It supports almost all record types. It can be used for queries, zone transfers, and dynamic updates. It supports TSIG-authenticated messages and EDNS0. dnspython provides both high- and low-level access to DNS. The high-level classes...
CVE-2023-32315
CVE-2023-32315 - Ignite Realtime Openfire Path Traversal Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author phith0n and K3ysTr0K3R Description Openfire is an XMPP server licensed under the Open Source...
CVE-2026-94218
A flaw was found in the authentication session management of Keycloak, an identity and access management solution. The issue occurs when an administrator enforces a stronger authentication flow, such as mandatory two-factor authentication 2FA setup, through a client policy. A user can bypass this...
CVE-2026-18577
cve-id 捐赠 通过 PayPal 或扫描下方二维码来支持本项目的维护。 ⚡ 简单使用 请仅在安全且经授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 经授权的渗透测试环境 示例设置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windo...
Metabase-Pre-Auth-RCE-POC
CVE-2023-38646 — Metabase Remote Code Execution RCE Proof-of-Concept Overview This repository documents a Proof-of-Concept PoC security research project analysing CVE-2023-38646 , a critical pre-authentication Remote Code Execution RCE vulnerability affecting vulnerable versions of Metabase. The...
kernel-debug-lab-for-virtual-box
如何使用 Windbg 设置 VirtualBox 实验室来调试内核驱动程序 这里我们假设计算机 A 上已安装 windbg，计算机 B 上已安装 Visual Studio、SDK 和 WDK。 1. 打开 Host Network Manager，创建或设置一个新的 Virtual Box Host-Only Ethernet adapter 2. 创建或选择一个 Virtual Box Host-Only Ethernet adapter，并勾选 DHCP Server 的 Enable 复选框 3. 对于计算机 A 和计算机 B，进入 Settings - Network，在...
CVE-2024-4577
CVE-2024-4577 Environment Setup Files and PHP Files --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...
CVE-2024-52429
CVE-2024-52429 WP Quick Setup history.pushState'', '', '/'; document.forms0.submit;...
CVE-2021-41773
CVE-2021-41773 Setup vulnerable enviornment...
crackerjack
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...
Security_incident_report
01. 基础设施构成 该项目的基础设施并未通过 IaC（Terraform 等）代码进行管理，而是采用安装 pfSense·Wazuh 后，在管理界面（GUI）中直接修改配置 的方式构建。因此，这里记录的并非"代码"，而是网络拓扑图、各配置界面的截图，以及更改了哪些值、为何更改，以便能够复现。 网络构成 以 pfSense 为基准，将外部（WAN）与内部（LAN）分离，并通过交换机将内部网络进一步划分为 4 个区域。...
CVE-2026-45332-PoC
CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...
CVE-2020-16125-Reproduction
CVE-2020-16125-Reproduction This repository is aimed at reproducing the attack . Description : Its original name is “Ubuntu gdm3 privilege escalation” , and it is found by a Github security researcher named Kevin Backhouse . Its CVSS score is 4.6/10 medium and the affected environment is Ubuntu...
CVE-2023-38646
CVE-2023-38646 Original script from securezeron During testing, I found that the reverse shell generated by this POC failed due to the trailing '=' character after base64 encoding. I made a slight modification to fix this issue. root@kitploit: Original reverse shell payload generation code...
SVPT_CW_2
CVE-2024-21413 https://github.com/KartheekKandalam99/SVPTCW2 CVE-2024-21413 Setup for CW TRYHACKME provided room for working on this vulnerability. Below is the link to access the room https://tryhackme.com/r/room/monikerlink To access room through RDP we have to connect to TryHackMe VPN. Click...