CVE-2023-31705

CVE-2023-31705 description A Reflected Cross-site scripting XSS vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. Vulnerability Type Cross Site Scripting XSS Vendor of Product Sourcecodster Affected Produc...

ring3-kit

ring3-kit Hides Process From Task Manager Using NT Hooking NtQuerySystemInformation. A simple Ring-3 user mode rootkit. How Hook the API function NtQuerySystemInformation with our own function that hides a process from task manager Hooked function gets called instead The DLL is injected into...

sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or...

sh00t

root@kitploit: A Testing Environment for Manual Security Testers Sh00t es un gestor de tareas para que te centres en realizar pruebas de seguridad proporciona listas de verificación Por Hacer de casos de prueba ayuda a crear informes de errores con plantillas de errores personalizables...

Shell3er

Shell3er Shell3er PowerShell Reverse Shell The Shell3er Reverse Features Get-RandomProcessName Function The Get-RandomProcessName function generates a random process name by concatenating "PS" with a new GUID. This is used to create unique and seemingly random process names, making it harder to...

SharpMove

SharpMove - .NET authenticated execution for remote hosts Building To compile open Visual Studio project and compile for release. Options WMI SCM DCOM Multiple Task Scheduler Service DLL Hijack DCOM Server Hijack Modify Scheduled Task Modify Service binpath root@kitploit: SharpMove.exe action=que...

pybeacon

PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...

pybeacon

PyBeacon PyBeacon es una colección de scripts para tratar con el tráfico cifrado de Cobalt Strike. Puede cifrar/descifrar metadatos de beacons, así como analizar tareas cifradas simétricamente. Scripts incluidos Hay una pequeña biblioteca que incluye métodos de cifrado/descifrado, sin embargo se...

ShadowClone

ShadowClone ShadowClone を使用すると、長時間実行されるタスクを動的に数千のサーバーレス関数に分散し、通常は完了に数時間かかるところを数秒で結果を得ることができます。 クラウドプロバイダーが提供する無料枠を最大限に活用し、あなたのありふれたCLIツールをシャドウクローン術（ナルトスタイル！）で強化しましょう！ インストール インストールと初期設定の手順については、wiki を参照してください。 使用方法 root@kitploit: ⚡ python shadowclone.py -h usage: shadowclone.py -h -i INPUT -s...

RedPersist

RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...

CVE-2022-31188

CVE-2022-31188 CVE-2022-31188 - OpenCV CVAT Computer Vision Annotation Tool SSRF CVAT is an open source Computer Vision Annotation Tool developed by Intel. Any user with "Task Create" authorization can trigger the SSRF vulnerability by sending a malicious HTTP request and gaining access to other...

CVE-2026-51153

Stored Cross-Site Scripting XSS in TaskRunHandler.post in web/handlers/task.py in QD 20220208 through 20250803. When a task is run via /task//run, the handler renders task log content logtmp into the HTML response using Python % string formatting without HTML encoding. logtmp is populated from th...

GhostTask

Ghost Scheduled Task Inspired by WithSecure's research on Scheduled Task Tampering, they explained the feasibility of creating a scheduled task solely through registry key manipulation. Such an approach can bypass the generation of scheduled task creation event logs, such as 4698 and 106, providi...

CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40032: Simple Task Managing System - 'login' and 'password' SQL Injection Unauthenticated Exploit Title: Simple Task Managing System - 'login' and 'password' SQL Injection Unauthenticated Date: 2022-01-09 Exploit Author: Hamdi Sevben Vendor Homepage:...

remediate_cesa_2019_2091

cesa20192091 Este módulo contiene una tarea de Bolt que remediará las CVE descritas en CESA-2019:2091 y problemas paralelos presentes en otras plataformas Enterprise Linux 7 EL7. Tabla de contenidos 1. Descripción 2. Configuración - Los conceptos básicos para comenzar con cesa20192091 Para comenz...

CVE-2023-23192

CVE-2023-23192 CVE-2023-23192- Userlock - Multi-Factor Authentication MFA Bypass Exploit Title: Userlock - Multi-Factor Authentication MFA Bypass Date: 01/11/2023 Exploit Author: Pinar Sadioglu Vendor Homepage: https://www.isdecisions.com/products/userlock/help/ Version: = 11.0.1.40 Tested on:...

CVE-2011-3192

CVE-2011-3192 Run it using python 3.7 or 3.10 tested on it 1. git clone https://github.com/futurezayka/CVE-2011-3192.git 2. cd ./CVE-2011-3192 3. pip install -r requirements.txt 4. python3 exploit.py host tasks example python3 exploit.py https://example.com 50...

ScheduleRunner

ScheduleRunner - A C tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation Scheduled task is one of the most popular attack technique in the past decade and now it is still commonly used by hackers/red teamers for persistence and...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039: Windows タスクスケジューラの権限昇格の脆弱性 概要 CVE-2024-49039 は、Windows タスクスケジューラの権限昇格 EoP 脆弱性であり、認証された攻撃者が AppContainer サンドボックスを脱出し、Low 整合性 AppContainer から Medium 整合性に昇格することを可能にします。CVSS スコア 8.8 が割り当てられており、この脆弱性は RomCom 脅威グループによって実際に積極的に悪用されています。 CVE ID : CVE-2024-49039 CVSS Score : 8.8 高 CWE :...

Kestra <= 1.3.20 - Remote Code Execution

Kestra = 1.3.20 contains an authentication bypass caused by misclassification of /configs endpoint in REST API filter, letting unauthenticated attackers create and execute root-level tasks, exploit requires unauthenticated access to /configs endpoint. id: CVE-2026-53576 info: name: Kestra = 1.3.2...