CVE-2026-90831 GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

cve-2023-38646-poc

Metabase Pre Authentication RCE CVE-2023-38646 CVE-2023-38646 is a remote code execution vulnerability in Metabase. The vulnerability stems from a security flaw in Metabase's handling of JDBC connection strings when processing the unauthenticated API endpoint /api/setup/validate. An attacker can...

ocr-recon

ocr-recon Esta herramienta es útil para encontrar una cadena específica en una lista de URLs utilizando las capacidades de OCR Reconocimiento Óptico de Caracteres de Tesseract. Uso Uso: python3 ocr-recon.py listwithURLs stringtosearch...

ocr-recon

ocr-recon This tool is useful to find a particular string in a list of URLs using tesseract's OCR Optical Character Recognition capabilities Usage Usage: python3 ocr-recon.py listwithURLs stringtosearch...

text4shell-docker

Install maven - maven-linux 1. Maven install to create the fat jar root@kitploit: mvn clean install 2. Docker build root@kitploit: docker build --tag=text4shell . 3. Docker run root@kitploit: docker run -p 80:8080 text4shell 4. Test the app root@kitploit: http://localhost/text4shell/attack?search...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Versión: 0.4 Bytes Revealer es una potente herramienta de ingeniería inversa y análisis binario diseñada para investigadores de seguridad, analistas forenses y desarrolladores. Con funciones como vista hexadecimal,...

wordlistgen

wordlistgen ¿Qué y por qué? wordlistgen es una herramienta para pasar una lista de URLs y obtener una lista de palabras relevantes para tus listas de palabras. Las listas de palabras son mucho más efectivas cuando tomas en cuenta el contexto de la aplicación. wordlistgen extrae componentes de URL...

wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

CVE-2025-30208-PoC

CVE-2025-30208 - Vite Arbitrary File Read PoC This is a Proof-of-Concept PoC script to exploit CVE-2025-30208, allowing arbitrary file reads on Vite development servers. Vulnerability Details Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2,...

CVE-2019-11043-Docker

A docker image with a vulnerable version of PHP-FPM CVE-2019-11043 and nginx. Run docker run --rm -p8080:80 akamajoris/cve-2019-11043 You should be able to access the web application at http://your-ip:8080/. Exploitation Build a binary from https://github.com/neex/phuip-fpizdam, then root@kitploi...

ghostrings

Ghostrings Scripts for recovering string definitions in Go binaries with P-Code analysis. Tested with x86, x86-64, ARM, and ARM64. Scripts Golang These can be found in the Golang category in the Script Manager. GoDynamicStrings.java Analyzes P-Code to find string structures created on the stack...

ida_haru

+OPTIONS: ^: idaharu Scripts/plugins for IDA Pro Note: Old scripts don't work for IDA 8.x, but I leave them just for reference. esetcrackme IDA Pro loader/processor modules for ESET CrackMe driver VM stackstringstatic IDAPython script statically-recovering strings constructed in stack fnfuzzy...

proctools

proctools Small toolkit for extracting information and dumping sensitive strings from Windows processes . Made to accompany FormThief. procsearch - find sensitive strings in target process memory searches for parsed string in readable process memory, if found, displays a range of valid ASCII char...

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

snmp-shell

SNMP Shell Shell Simulation over Net-SNMP with extend functionality Here is a preview : Description If your target has a Net-SNMP instance with the "extend" functionality, and you got a SNMP community string which gives you write access , you can use this tool to automate the process of sending...

CVE-2023-35086-POC

CVE-2023-35086-POC July 25 2023, Altin tin-z, github.com/tin-z Breve descripción Los firmwares de los routers ASUS RT-AX56U V2 y RT-AC86U, con versiones iguales o inferiores a 3.0.0.4.38650460 y 3.0.0.438651529 respectivamente, tienen una vulnerabilidad de formato de cadena en la función detwan.c...

SSH-Remote-Code-Execution

SSH Remote Code Execution SSH Zero-Day | Hecho por ClumsyLulz y Taylor Christian Newsome Resumen Este repositorio contiene un programa en C que acepta parámetros de entrada y genera un paquete para enviarlo a un servidor mediante el protocolo SSH. El programa asigna un búfer para almacenar los...

AMSITrigger

AMSITrigger v3 Hunting for Malicious Strings Usage: root@kitploit: -i, -inputfile=VALUE Powershell filename -u, -url=VALUE URL eg. https://10.1.1.1/Invoke-NinjaCopy.ps1 -f, -format=VALUE Output Format: 1 - Only show Triggers 2 - Show Triggers with Line numbers 3 - Show Triggers inline with code 4...

how-to-check-patch-secure-log4j-CVE-2021-44228

How-to-check-log4j-CVE-2021-44228 What is log4j ? LOG4J is a open-source Java-based Apache Software used for logging services. What is log4j Vulnerability CVE-2021-44228 ? The Log4j vulnerability allows remote code execution by simply typing a specific string into a textbox , works on every progr...

CVE-2019-12189

CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability Information Description:XSS was discovered in ManageEngine ServiceDesk Plus version Versions Affected: 9.3 Researcher: Dang The Tuyen Proof-of-concept The vulnerability stems from the confusion of both single quotes and...