kygocera

kygocera（CVE-2022-1026） Rapid7 の PoC（CVE-2022-1026）の改良された Go 言語バージョン（https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/） クレジット: Aaron Herndon / https://twitter.com/ac3lives 挨拶: https://github.com/D4RKMATT3R CVE-2022-1026 インストール root@kitploit: git clo...

CVE-2026-73742

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP远程代码执行漏洞 EXP&POC 复现 forforever：https://www.cnblogs.com/forforever/p/13846077.html poc CVE-2020-16898Checker-poc 命令： 管理员启动powershell/CMD root@kitploit: Powershell.exe -ExecutionPolicy UnRestricted -File .\CVE-2020-16898-poc.ps1 exp cve-2020-16898-exp2...

CVE-2015-6086

クラッシュからエクスプロイトへ: CVE-2015-6086 - 境界外読み取り/ASLR バイパス root@kitploit: $$$$$$\ $$\ $$\ $$$$$$$$\ $$$$$$\ $$$$$$\ $$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$\ $$ $$\ $$ | $$ |$$ | $$ $$\ $$$ $$\ $$$$ | $$ | $$ $$\ $$$ $$\ $$ $$\ $$ / |$$ | $$ |$$ | / $$ |$$$$\ $$ |$$ | $$ | $$ / |$$$$\ $$ |$$ / $$ | $$ |...

EUVD-2026-69469

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...

CVE-2026-73742 Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...

CVE-2026-73742 Improper Client Address Validation allows Request Attribution Spoofing in Fabric Composer API Endpoint

A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to spoof the source address attributed to their requests. Successful exploitation could allow an attacker to cause inaccurate attribution information to be recorded on the...

CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS

CVE-2021-27190 - PEEL Shopping、eコマースショッピングカート - 'Address' における格納型クロスサイトスクリプティング脆弱性 日付 2021-02-11 脆弱性発見者 Anmol K Sachan ベンダーホームページ https://www.peel.fr/ ソフトウェアリンク https://www.peel.fr/nos-offres-1/peel-shopping-31.html https://sourceforge.net/projects/peel-shopping/ 脆弱性のあるソフトウェアリンク...

CVE-2023-36427

CVE-2023-36427 このリポジトリには、Windows のルートパーティションから任意の物理アドレスに対するメモリ破損を引き起こす CVE-2023-36427 のレポートとエクスプロイトが含まれています。脆弱性の詳細とエクスプロイトは、Microsoft に送信した レポート に記載されています。 タイムライン 7月2日 - Microsoft に勤める友人にレポートを送信しました。 7月11日 - 本脆弱性を担当するチームのメンバーから返信を受け取りました。 8月8日 - 開示日を11月14日にする提案を受け取りました。 8月9日 - 提案に同意しました。 11月14日 -...

r4ven

If you find this GitHub repo useful, please consider giving it a star! ⭐️ ▶️ Watch Video - How To Use! This project is a security research and awareness tool designed to demonstrate how modern web browsers may expose location data, camera access, IP address, and device information when users...

CVE-2024-26160

CVE-2024-26160 cldflt.sys 情報漏えいの脆弱性 CVE-2024-26160 に関する小規模な解説です。この脆弱性は2月のパッチ（KB5034765 、Windows 11 22H2、Windows 11 23H2）に存在し、3月のパッチ（KB5035853 ）で修正されました。 分析 この脆弱性は CldiPortProcessGetRangeInfo 関数にあり、ユーザーアプリケーションから渡されたバッファサイズをチェックしていません。サイズはユーザーが制御できるため、返された情報をコピーする memmove...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

Vol3xp

Vol3xp、Volatility 3 エクスプローラ プラグイン WinObj - Windowsカーネルオブジェクトエクスプローラ、https://github.com/kslgroup/WinObj の改良版 volatility 3用、winobj.py WinObj（WinObj sysinternals と非常に類似）は、Struct Analyzer と VolExp の WinObjGui もサポートします。 RAMMap - 物理アドレスマッピング pfn.py RAMMap（Rammap SysInternals...

patriot

Patriot Small research project for detecting various kinds of in-memory stealth techniques. Download the latest release here. The current version supports the following detections: Suspicious CONTEXT structures pointing to VirtualProtect functions. Targets research by Austin Hudson Foliage and Ek...

hostintel

hostintel This tool is used to collect various intelligence sources for hosts. Hostintel is written in a modular fashion so new intelligence sources can be easily added. Hosts are identified by FQDN host name, Domain, or IP address. This tool only supports IPv4 at the moment. The output is in CSV...

pymultitor

PyMultiTor Python Multi Threaded Tor Proxy, Did you ever want to be at two different places at the same time? When I asked myself this question, I actually started developing this solution in my mind. While performing penetration tests there are often problems caused by security devices that bloc...

shocker

Shocker A tool to find and exploit servers vulnerable to Shellshock Ref: https://en.wikipedia.org/wiki/Shellshocksoftwarebug Released as open source by NCC Group Plc - https://www.nccgroup.trust/ Developed By: Tom Watson, tom dot watson at nccgroup dot trust https://github.com/nccgroup/shocker...