EUVD-2026-81858

In the Linux kernel, the following vulnerability has been resolved: btrfs: defrag: fix deadlock between defrag and delalloc space reservation While running fsstress with autodefrag and flushoncommit, hit a deadlock due to the fact that defrag reserves delalloc space while it's holding dirty and...

Lfi-Space

🪐 LFI-SPACE TOOL 🪐 Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💫 How to use 💫 👇...

PF_RING

PFRING™ Introduction PFRING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications. Who needs PFRING™? Basically everyone who has to handle many packets per second. The term ‘many’...

dive

dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: root@kitploit: dive or you can dive with Docker directly: root@kitploit: alias dive="docker run -ti --...

Cairn

Cairn More Than Just AI Penetration Testing — Towards General State-Space Search Cairn is a general-purpose problem-solving engine. It defines no roles, no workflows. Given an origin and a goal, it searches for a path through an unknown state space. AI Penetration Testing is one such problem — an...

litefuzz

litefuzz Un fuzzer multiplataforma para probar binarios en espacio de usuario, clientes y servidores. Ha encontrado errores en más de 50 aplicaciones y bibliotecas de empresas importantes y código abierto. Configuración simple para comenzar a fuzzear en Linux, Mac y Windows. litefuzz intro why ho...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

usbpcap

USBPcap - USB Packet capture for Windows End-user installer is available at: http://desowin.org/usbpcap Following informations are intended for developers and power users only. Directory overview: USBPcapCMD - sample user space application USBPcapDriver - filter driver used to capture data Build...

LogFileParser

Features Decode and dump $LogFile records and transaction entries. Decode NTFS attribute changes. Optionally resolve all datarun list information available in $LogFile. Option: "Reconstruct data runs". Recover transactions from slack space within $LogFile. Choose to reconstruct missing or damaged...

CVE-2024-46635

CVE-2024-46635 Background The GongZhiDao System is a platform developed by GongZhiDao. It provides enterprise solutions including user management, data analysis, and operational functionalities. However, a security vulnerability was discovered in one of the API endpoints that could potentially le...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

pbscan

概要 polarbearscan は、より高速かつ効率的なバナー取得とポートスキャンを目指したツールです。2 つの異なるアイデアを組み合わせており、皆様の注目と時間に値するものになることを願っています。 1 つ目のアイデアは、暗号学的に保護されたクッキーを使用したステートレス SYN スキャンを用いて、受信した ACK を解析することです。著者の知る限り、この手法は Dan Kaminsky が scanrand で先駆的に導入しました。scanrand 自体は Paketto Keiretsu（スキャンユーティリティ集）の一部であり、2001 年から 2002...

azazel

Azazel V 0.1 全地はアザゼルによって教えられた業を通して堕落した。すべての罪は彼に帰せよ。 -- 1エノク書2:8 Azazelは、Jynx rootkit由来のオリジナルのLDPRELOAD技術に基づいたユーザーランドルートキットです。より堅牢で追加機能を持ち、アンチデバッグとアンチ検出に重点を置いています。 特徴 アンチデバッグ unhide、lsof、ps、lddの検出を回避 ファイルとディレクトリを隠蔽 リモート接続を隠蔽 プロセスを隠蔽 ログインを隠蔽 PCAPフックによりローカルスニッフィングを防止 2種類のacceptバックドア。 Crypthook...

vLLM 0.8.3 - 0.14.0 - Information Disclosure

vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap address in error messages from the multimodal endpoint when processing invalid images, letting remote attackers reduce ASLR entropy, exploit requires sending invalid images. id: CVE-2026-22778 info: name: vLLM 0.8....

KillChain

KillChain ?? Disclaimer: This project is intended strictly for educational and security research purposes. The author is not responsible for any misuse, damage, or illegal activity caused by this tool. Use only in isolated lab environments with explicit permission. Overview KillChain is a user-mo...

cve-2024-23113-poc

CVE-2024-23113-poc CVE-2024-23113 is a vulnerability discovered in the Linux Kernel , classified as an arbitrary code execution vulnerability that affects the bpf Berkeley Packet Filter subsystem. Specifically, this vulnerability affects objects of the bpfprog type in bpf programs, and can allow ...

CVE-2021-30955-POC

CVE-2021-30955 POC Proof of concept wrapped into an iOS app for CVE-2021-30955 All credit to Jake James. His POC code used in this project can be found here. What is this? This demonstrates CVE-2021-30955, an iOS bug which allows an app in userspace to gain kernel-level permissions. In order to...

blankspace

Blank Space Blank Space is a refactoring of James Forshaw's original proof of concept for CVE-2021-43893, EFSRPC arbitrary file upload privilege escalation. Blank Space can create arbitrary files on a remote host that is using unconstrained delegation if it isn't patched for CVE-2021-43893. File...

CVE-2021-40449-NtGdiResetDC-UAF

CVE-2021-40449-NtGdiResetDC-UAF A POC for CVE-2021-40449. Only tested on 1809, the code is a bit rough, but it's a good experience for me. Instead of using the ThreadName method, user-space memory allocation is used...

binviz

binviz Binary visualiser & triage tool: linked interactive views entropy, histograms, image/dot-plot surfaces, control-flow graphs over a single shared address-space model. root@kitploit: pipx install binviz && binviz serve What it does Open a file and every view is looking at the same address...