nextdns

NextDNS CLI Client NextDNS CLI es una herramienta de línea de comandos que te permite usar el servicio DNS-over-HTTPS DoH de NextDNS con capacidades avanzadas. Aunque las funciones más avanzadas solo funcionarán con NextDNS, este programa puede funcionar como cliente para cualquier proveedor de D...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

apk.sh

🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla 组件未授权文件上传 RCE 拆分控制器上传绕过 → 直接写入任务 → /downloads/shell.php → RCE 概述 CVE-2026-57827 是 RSFiles! （comrsfiles）中的一个未授权 任意文件上传漏洞，危害等级为严重（CVSS 9.8）。RSFiles! 是 Joomla 一个广泛使用的文件管理与下载组件，受影响版本为 1.17.12。 该漏洞利用了拆分控制器（split-controller）设计缺陷：RSFiles! 将上传过程拆分为两个前端任务——预检检查（权限门禁 +...

PichichiH0ll0wer

PichichiH0ll0wer PichichiH0ll0wer 关于 功能 注入方法 安装 用法 致谢 关于 --== 仅限PE的Nim编写的进程空心化加载器 ==-- 我构建PichichiH0ll0wer是为了学习并做出贡献，当然。但也因为我非常厌倦到处都是shellcode。加载PE可能不那么隐蔽，我知道，但它仍然高效，并且比每次将PE有效载荷转换为shellcode（并不总是顺利）更方便。此外，PichichiH0ll0wer有一些功能来保护你的有效载荷。仅支持x64 EXE。 功能 可配置构建器 有效载荷在空心加载器中加密并压缩（可选分割） 支持使用多个进程进行分割注入...

writeup_split

摘要 CVE-2024-0684 GNU coreutils 的“split”程序存在一个漏洞，允许用户控制的数据引发堆缓冲区溢出。 该漏洞由 40bf1591bb4362fa91e501bcec7c2029c5f65a43 于 2023-03-04 引入。 修复已随 c4c5ed8f4e9cd55a12966d4f520e3a13101637d9 于 2024-01-17 发布。 受影响版本：GNU coreutils v9.4; v9.3; v9.2 概念验证： 此仓库中的 splitme 示例文件可用于在受影响版本上触发崩溃。 root@kitploit: split -C 102...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

MiniPlasma-Runner

MiniPlasma-Runner 修改自 Nightmare-Eclipse/MiniPlasma（CVE-2020-17103）的版本，适配 C2 使用。 原始 PoC 仅从磁盘运行。此版本通过执行程序集完全在内存中运行，采用拆分二进制方法以避免检测。 免责声明 本工具仅用于授权安全测试和教育目的。在未获得明确书面许可的情况下使用本工具攻击系统是非法且不道德的。作者不对因使用本工具而导致的滥用或损害承担责任。进行任何安全测试前请务必获得适当授权。 变更内容 将多进程阶段重构为单进程线程执行（不再通过 Assembly.Location 自行重启动） 移除了会终止宿主进程的...

CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection

CVE-2026-9997 – Evasión del túnel dividido de VPN mediante inyección de opciones DHCP Código del programa servidor DHCP simulado en Python + cliente root@kitploit: !/usr/bin/env python3 roguedhcpserver.py - Injects a static route to bypass VPN split tunnel import socket, struct, threading def...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/EFI: The deferral of freeing boot services memory The efifreebootservices function frees the memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate. There are two issues with this approach:...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwc-qos: Disable split header for Tegra194 There is a long-standing issue with the Synopsys DWC Ethernet driver for Tegra194, where random system crashes have been observed 0. The problem occurs when the split header...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fixed the memory leak related to ‘conf-biosplit’. In the error path of raid10run, ‘conf’ needs to be freed. However, ‘conf-biosplit’ is not freed, resulting in a memory leak. Since there are three places where ‘conf’...

Split

Descripción Divide and Conquer es un algoritmo que se aplica comúnmente en programación para resolver un problema complejo dividiéndolo en muchos subproblemas más simples. Podemos aplicar este enfoque a la seguridad ofensiva con un objetivo diferente: confundir a los EDR para que pierdan el rastr...

MassScanning-CVE-2025-55182

VPS 持续扫描器 一个轻量级的编排器（orchestrator）与工作节点（worker）扫描器设置，用于在拆分后的输入文件上运行大规模/持续扫描。本仓库包含编排脚本、基于 Docker 的工作节点镜像，以及用于重复运行扫描并收集结果的辅助脚本。 仓库结构 root@kitploit: docker-compose.yml orchestrator.py README.md run-continuous-scan.sh setup.sh start-scan.sh output/ generated outputs split/ input files to scan split in...

CVE-2026-83991-writeup-and-poc

El archivo dijo no. Cloud Files dijo que lo reemplazaba. CVE-2026-83991 es una vulnerabilidad de manipulación de Windows Cloud Files cuyo rango afectado publicado comienza con Windows 10 versión 1809, casi ocho años antes de la corrección de septiembre de 2026. Le pedí a Windows que abriera un...

Statement

声明 关于 CVE-2021-36593 和 CVE-2021-36594，我想说明的是，我只提交了一个拆分 CVE-ID 的请求。（两年前） 由于目前没有可用的更新，CVE-ID 将在未来几个月内发布。我们暂时推迟了发布流程。...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053262 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use scratch field in MMIO fragment to hold small write values When exiting to userspace...

Linux Distros Unpatched Vulnerability : CVE-2026-80729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: initialise workingset state before folio split xastrysplit adds GFPACCOUNT for page-cache xanodes, but foliosplit leaves the xastate's xalru unse...

CVE-2026-80729

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: initialise workingset state before folio split xastrysplit adds GFPACCOUNT for page-cache xanodes, but foliosplit leaves the xastate's xalru unset. That lets a live, memcg-charged xanode exist without being linked...