l2tp-socket-bug

CVE-2014-4943 The PPPoL2TP feature in net/l2tp/l2tpppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket. CVSS v2 Base Score: 6.9 MEDIUM...

CVE-2026-79994

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...

Hulios

Hulios Hardened Universal Linux Invisibility and Onion System Hulios is an eBPF-powered, transparent Tor VPN gateway for Linux. It secures outbound network traffic by redirecting TCP sockets and DNS queries through an embedded Arti Tor client instance and a localized Hickory-based DNS resolver. B...

CVE-2026-79994

CVE-2026-79994 affects the guest-to-host Unix-domain socket (UDS) forwarder in Docker Sandboxes . The relay validates that a socket path resides inside an authorized workspace but later reconnects using the raw pathname. A malicious guest can exploit a symlink race by replacing an intermediate di...

EUVD-2026-79951

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...

CVE-2026-79994 Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname. A malicious guest can replace an intermediate directory with a symlink between validation and connection, causing the host to...

Packet-Sniffer

RootWire A network traffic monitor for GNU/Linux — formerly known as Packet-Sniffer. Frames are captured from one or more network interfaces with a raw socket, timestamped by the kernel itself, decoded layer by layer with the NETProtocols library, and rendered live, written to nanosecond-precisio...

mssqlproxy

mssqlproxy mssqlproxy es un kit de herramientas diseñado para realizar movimiento lateral en entornos restringidos a través de un Microsoft SQL Server comprometido mediante reutilización de sockets. El cliente requiere impacket y privilegios sysadmin en el servidor SQL. Por favor, lea este artícu...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

unisoc-su

unisoc-su A method for CVE-2025-31710 and to connect to cmdskt abstract socket to obtain a root shell on unisoc unpatched models Before everyone screams, Unisoc itself authorized me to publish this after CVE-2025-31710 bullettin, so stay quiet. Let's start with a joke Yes, you are not dreaming,...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

CVE-2024-27398

CVE-2024-27398 CVE-2024-27398 POC 📍 GDB Breakpoints root@kitploit: GNU gdb Ubuntu 12.1-0ubuntu122.04.2 12.1 Copyright C 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the...

CVE-2026-55887

MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server.metadata OCI image label into the broad catalog.Server structure for direct docker:// references and catalog snapshot...

EUVD-2026-78684

MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the attacker-controlled io.docker.server.metadata OCI image label into the broad catalog.Server structure for direct docker:// references and catalog snapshot...

BetterBackdoor

BetterBackdoor Una puerta trasera es una herramienta utilizada para obtener acceso remoto a una máquina. Normalmente, las utilidades de puerta trasera como NetCat tienen dos funciones principales: canalizar la entrada remota a cmd o bash y devolver la respuesta. Esto es útil, pero también es...

suricata_exporter

Suricata Prometheus Exporter This is a Prometheus Exporter for Suricata using dump-counters via the unix socket to query metrics. Usage root@kitploit: $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default...

uptux

uptux Chequeos especializados de escalada de privilegios para sistemas Linux. Implementados hasta ahora: Rutas de systemd, servicios, temporizadores y unidades de socket escribibles Desensambla archivos de unidad systemd buscando: Referencias a ejecutables que son escribibles Referencias a enlace...

CVE-2024-31317

CVE-2024-31317 Preface A couple of days ago, I saw an analysis of the CVE-2024-31317 vulnerability posted on JD's official account. After reading it through, I found it quite interesting. Moreover, the current mainstream solutions for automotive IVI In-Vehicle Infotainment are all based on Androi...

botb

Salir de la Caja BOtB BOtB es una herramienta de análisis y explotación de contenedores diseñada para ser utilizada por pentesters e ingenieros, además de ser compatible con CI/CD usando tecnologías CI/CD comunes. ¿Qué hace? BOtB es una herramienta de línea de comandos que te permite: Explotar...

magisk-renef

MagiskRenef Un módulo de Magisk / KernelSU / APatch que empaqueta y ejecuta automáticamente renef — un kit de instrumentación dinámica para Android. Inspirado por magisk-frida. Requisitos Dispositivo Android rooteado Magisk / KernelSU / KernelSU Next / APatch Solo ARM64 — renef solo soporta Andro...