CVE-2024-9464

CVE-2024-9464: Palo Alto Expedition Authenticated Command Injection Proof of concept to exploit CVE-2024-9464 on vulnerable devices. This script chains the admin reset of CVE-2024-5910 to achieve "unauthenticated" arbitrary command execution. Blog Post Root cause and indicators of compromise here...

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

MakeMeEnterpriseAdmin

Example of successful execution: root@kitploit: ====================================================================== /\ Elevated domain admins to Enterprise admins - version 1.0 || /||\ Require: domain admin right |:||:| or more specifically DS-Replication-Get-Changes-All |/||| Vincent LE TOUX...

FastJsonAutoTypeBypass

What's this This project is used for studying how to bypass fastJSON AutoType check. Gadget Info Mapping just for fastjson 1.2.47: root@kitploit: package com.FastJson1242; import com.alibaba.fastjson.JSONObject; public class Poc public static void mainString argv String payload ="\n" + " "a": \n"...

CVE-2021-38603

CVE-2021-38603 Una vulnerabilidad de Cross-Site Scripting almacenado está presente en la página de edición de perfil en el campo Información: para cada usuario. http:///core/admin/profil.php Campos Vulnerables: Información: Una vez insertado, el XSS se puede activar visitando cualquier...

MAL-2026-15925 Malicious code in tailwind-contact-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec029f2c6cc211c953394dfe89a4ba0921f1a526ca2b0235672f6fdeca10c50 tailwind-contact-forms ships src/index.js containing the legitimate @tailwindcss/forms plugin source concatenated with an obfuscator.io-style payload...

Malicious code in tailwind-contact-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec029f2c6cc211c953394dfe89a4ba0921f1a526ca2b0235672f6fdeca10c50 tailwind-contact-forms ships src/index.js containing the legitimate @tailwindcss/forms plugin source concatenated with an obfuscator.io-style payload...

CVE-2022-30190

CVE-2022-30190 Este repositorio habla sobre el Follina MSDT desde la perspectiva de Defender Índice Acerca de Cronología Entendiendo el Exploit Lista de IOCs Estrategia de Detección Pruebas e Investigación Planes de Mitigación Referencias About El bug es una vulnerabilidad de ejecución remota de...

CVE-2024-6769

Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...

dnschef-ng

!NOTE This is an updated version of DNSChef originally written by @iphelix root@kitploit: | | v0.7 | | / | | | | | | | / | ' / |/ | ' \ / \ || ' \ / | | | | | | \ \ | | | | / | | | | | | | ,|| ||/|| |||| || ||, | / | |/ D O C U M E N T A T I O N DNSChef is a highly configurable DNS proxy for...

CVE-2020-0753-and-CVE-2020-0754

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six unfixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned...

otp-bot

SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...

OpenSSL-1_0_1g_CVE-2015-3195

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

ARTist

ARTist - The Android Runtime instrumentation and security toolkit ARTist is a flexible open source instrumentation framework for Android's apps and Java middleware. It is based on the Android Runtime’s ART compiler and modifies code during on-device compilation. In contrast to existing...

SMSBotBypass

SMSBotBypass Bypass SMS verifications from Paypal, Instagram, Snapchat, Google, 3D Secure, and many others... using a Discord Bot or the private API. It's really simple. Imagine that your friend got a Snapchat account, you try to reset his password using the sms system : he's gonna receive the sm...

CVE-2024-9264

CVE-2024-9264 Authenticated RCE in Grafana v11.0 via SQL Expressions - PoC Exploit CVE-2024-9264 - Grafana v11.0 Authenticated Remote Code Execution RCE PoC Introduction CVE-2024-9264 is a critical remote-code-execution and local-file-inclusion flaw introduced in Grafana 11’s experimental “SQL...

test-your-sysadmin-skills

:star: "Un gran Administrador no necesita saberlo todo, pero debería ser capaz de encontrar soluciones asombrosas para proyectos imposibles. " - cwheeler33 ServerFault :star: "Mis habilidades son hacer que las cosas funcionen, no saber mil millones de hechos. ... Si necesito arreglar un sistema,...

JWT_Brute

JWTBrute Example eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9.56wwCrB9tIgmUnYpLPxkO8GYj1soCjuuskTlbHGg8 root@kitploit: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9 base64 decode "alg":"HS256","typ":"JWT" eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9 base64 decode...

MAL-2026-15921 Malicious code in box-sign-client-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc47a8e8a147ec412ecc05d666655b675a36b9eec0823e278767a286993e7e0d package.json declares a preinstall hook that runs index.js on npm install. The script reads the installer's hostname and OS username, embeds them...

Malicious code in box-sign-client-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc47a8e8a147ec412ecc05d666655b675a36b9eec0823e278767a286993e7e0d package.json declares a preinstall hook that runs index.js on npm install. The script reads the installer's hostname and OS username, embeds them...