shard

shard A command line tool to detect shared passwords Usage List options: root@kitploit: Shard 1.5 can run in 3 modes: 1 Single user single password - Use -u and -p 2 Single user multiple passwords - Use -u and -f 3 Multiple users and multple passwords - Use -f only For more detailed usage example...

nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 pure no deps shared library .so Tested with "Reflective SO injection". A library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process...

CVE-2025-32463

README - sudo-chwoot.sh 説明 このスクリプトは、sudo の理論上の脆弱性（例: CVE-2025-32463）を悪用した権限昇格手法を示す proof of concept PoC です。 この PoC は、sudo に '-R'（chroot）オプションとカスタマイズされた nsswitch.conf 設定を利用して、改ざんされた .so ライブラリを強制的に読み込ませます。 注意: このスクリプトは研究または管理された環境でのテストのみを目的としています。プロダクション環境や、自分が所有・管理していないマシンでは実行しないでください。 目的 カスタマイズされ...

AutoPwn-Titanic.htb

Titanic AutoPWN - HTB Machine This is an automated exploitation script for the Hack The Box machine Titanic. A full exploitation automation script for the Titanic HTB Linux machine on Hack The Box. Full write Up - WriteUp.md 📋 Description It performs the following actions: Phase 1: Retrieve and...

jenkinsci__workflow-cps-global-lib-plugin_CVE-2022-25174_544-vff04fa68714d

Pipeline Shared Libraries When you have multiple Pipeline jobs, you often want to share some parts of the Pipeline scripts between them to keep Pipeline scripts DRY. A very common use case is that you have many projects that are built in the similar way. This plugin adds that functionality by...

pmkidcracker

PMKID WPA2 クラッカー このプログラムはPythonで書かれたツールで、WPA2 WiFiネットワークの事前共有鍵を、認証解除やネットワーク上のクライアントを必要とせずに回復します。特定のアクセスポイントがEAPOLメッセージ1でPMKID値を広告する脆弱性を標的にしています。 プログラムの使用法 root@kitploit: python pmkidcracker.py -s -ap -c -p -w -t 注意: apmac、clientmac、pmkid は16進文字列でなければなりません。例: b8621f50edd9 PMKIDの計算方法...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

Characterization-and-Detection-of-Cross-Router-Covert-Channels

Characterization and Detection of Cross-Router Covert Channels This repository contains the source code used in the paper "Characterization and Detection of Cross-Router Covert Channels". To access the paper, go to Dr. Oren's laboratory website: orenlab. The full data used in the paper is...

cve-2017-7494

Basic Setup Install Samba version 4.5.9 https://download.samba.org/pub/samba/stable/samba-4.5.9.tar.gz https://wiki.samba.org/index.php/BuildSambafromSource Get patched version of Impacket pip install -r requirements.txt Usage 1. Start Samba server in interactive mode + debug print sudo...

CVE-2021-4034

Proof of Concept PoC: CVE-2021-4034 PwnKit Note: This repository and its content are part of a Final Degree Project FDP, created solely for educational purposes and academic research. Description This repository contains a proof of concept PoC for the CVE-2021-4034 vulnerability, also known as...

CVE-2026-12513

CVE-2026-12513：Shared Files 快速链接： 探索研究员的官方网络安全作品集或查看 WPScan 已验证公告。 📌 执行摘要与技术元数据 🔍 深入技术分析与根本原因分析 该漏洞源于 Shared Files（ ../ 清理...

CVE-2024-48990

CVE-2024-48990 Exploit for CVE-2024-48990 Local Privilege Escalation in needrestart 3.8 Background Read https://blog.qualys.com/vulnerabilities-threat-research/2024/11/19/qualys-tru-uncovers-five-local-privilege-escalation-vulnerabilities-in-needrestart. Qualys does a great job explaining it. TLD...

POC-IngressNightmare-CVE-2025-1974

POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...

CVE-2021-30862

CVE-2021-30862 In 2021, CodeColorist released his writeups on the Mistuned vulnerabilities, a series of vulnerabilities affecting the iTunes Store allowing for one-click remote code execution. Notably, he demonstrated popping calc with no memory corruption at all, but with just a logic bug. Durin...

Jetleak-Testing-Script

Jetleak Testing Script This tool is intended to provide a quick-and-dirty way for organizations to test whether their Jetty web server versions are vulnerable to JetLeak. Currently, this script does not handle sites with invalid SSL certs. This will be fixed in a future iteration. For additional...

CVE-2017-7494_SambaCry

CVE-2017-7494 SambaCry 漏洞利用 针对 Samba 的 SambaCry CVE-2017-7494 漏洞利用（无需 Metasploit 的绑定 Shell） 如果需要更改端口，只需修改 bindshell-samba.c 的第 68 行并重新编译： root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o libbindshell-samba.so bindshell-samba.o 如何利用： 查看共享（在本例中我们使用匿名用户）： root@kitploit:...

CVE-2025-32463_PoC

CVE-2025-32463 NVD CVE-2025-32463 In most cases, GCC is not installed by default on target servers. This proof of concept provides a precompiled version to ensure it can be executed immediately on affected systems. Usage 1. Compile the woot1337.c file: root@kitploit: gcc -shared -fPIC...

BinGoo

,--="=--, / ." .-. "./ / ,/ : : /\ \ | /o\ :: /o\ | / -'| :=" "=: | \ / .-"-. \ | / .-"-. .--- --| /,.-'-.,\ |-- ---. /-===- / | / | | | | | | ' | | / \ / | | | | | | | | | | | | | || |/| || | || / / '-----v1--------------By-Hood3dRob1n----' root@kitploit: Welcome to the BinGoo README file! This...

CVE-2023-3009

CVE-2023-3009 Stored XSS on item name - Bypassing CVE-2023-2516 in TeamPass 3.0.9 - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the nilsteampassnet/teampass application, which was assigned the CVE-2023-2516 identifier. The vulnerability can be...

CVE-2020-25867

CVE-2020-25867 : SoPlanning Sharing Key Bypass Information Vulnerable Version : 1.46.01 Fixed Version : 1.47 and above CVE : CVE-2020-25867 Timeline 26/06/2020 : This vulnerability report was sent to the vendor 21/07/2020 : The vulnerability is fixed Risks The sharing key system is vulnerable to...