static-analysis

This repository lists static analysis tools for all programming languages, build tools, config files and more. The focus is on tools which improve code quality such as linters and formatters. The official website, analysis-tools.dev is based on this repository and adds rankings, user comments, an...

CVE-2025-29927

CVE-2025-29927: The Next.js Middleware Nightmare This repository is provided strictly for educational purposes only. I did not discover this vulnerability - this is a demonstration and explanation of a publicly disclosed security issue. Using this knowledge to exploit vulnerable systems without...

cve-2026-20896-gitea-poc

CVE-2026-20896 Comprobador de Omisión de Autenticación de Gitea Docker Solo para operaciones autorizadas de red team / pentest. Este repositorio contiene un comprobador mínimo para CVE-2026-20896, una omisión de autenticación en las imágenes oficiales de Gitea Docker hasta 1.26.2 inclusive cuando...

SysTrace

SysTrace 2.0 ptrace-based Linux syscall monitor and sandbox for analyzing ELF binaries. SysTrace runs a target inside an isolated Linux namespace environment, traces its system calls and child processes, applies rule-based detection and weighted risk scoring, then uses a Random Forest classifier ...

CVE-2023-20052

CVE-2023-20052 CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information o...

CGA-QCG7-CXR7-W7V9

Bulletin has no description...

CVE-2024-22120-RCE-with-gopher

Usage root@kitploit: python exploit.py --ip --sid --hostid --phpsessid --falsetime --truetime Summary This exploit was created to exploit an XXE XML External Entity. Through it, I read the backend code of the web service and found an endpoint where I could use gopher to make internal requests on...

xcat

XCat XCatは、ブラインドXPathインジェクションの脆弱性を悪用および調査するためのコマンドラインツールです。 完全なリファレンスについては、ドキュメントを参照してください：https://xcat.readthedocs.io/en/latest/ 多数の機能をサポートしています： インジェクションの自動選択（リストは xcat injections を実行） XPathパーサーのバージョンと機能を検出し、最速の取得方法を選択します 組み込みのアウトオブバウンドHTTPサーバー XXE攻撃を自動化 OOB HTTPリクエストを使用して取得を大幅に高速化可能...

xcat

XCat XCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities. For a complete reference read the documentation here: https://xcat.readthedocs.io/en/latest/ It supports an large number of features: Auto-selects injections run xcat injections for a list Detects t...

CVE-2026-60206-PoC-Exploit

CVE-2026-60206 - Oracle WebLogic SAML 认证绕过利用框架工具包 Oracle WebLogic Server — SAML 认证绕过 → 管理员接管 利用框架及批量扫描器 仅供授权的安全测试使用。 ⚖️ 法律免责声明与负责任使用 本工具仅供教育和授权的渗透测试之用。 作者和贡献者不对因使用本软件而导致的任何误用或损害负责。用户独自负责确保在测试前已获得目标所有者的明确书面许可。未经授权访问计算机系统违反《计算机欺诈和滥用法》CFAA 及全球类似法律。 使用本软件即表示您同意： 仅用于您拥有或已获明确许可进行测试的系统。 遵守所有适用的地方、州和联邦法律。...

CMLoot

CMLoot CMLoot was created to easily find interesting files stored on System Center Configuration Manager SCCM/CM SMB shares. The shares are used for distributing software to Windows clients in Windows enterprise environments and can contains scripts/configuration files with passwords, certificate...

awesome-mobile-security

awesome-mobile-security Maintained by @vaib25vicky with contributions from the security and developer communities. Android General - Blogs, Papers, How To's Android: Gaining access to arbitrary Content Providers Evernote: Universal-XSS, theft of all cookies from all sites, and more Interception o...

memory-poisoning-axis

memory-poisoning-axis 确定性内存投毒 / 提示注入测量 —— 锚定于 CVE-2026-24301 "CoSnitch"（Microsoft Copilot Personal，CVSS 3.1 8.8，于 2026 年 8 月 18 日修补）。 CoSnitch 链式组合了：i 自动提示执行（?q= + 未记录的 ?autorun=1），ii 通过 URL-fetch 从已连接的 Gmail/Drive/Calendar 中拉取数据以实现数据外泄，以及 iii 能够经受 密码修改、会话撤销和设备重新注册的持久性内存投毒 。本包 使用确定性谓词测量阶段 iii ——...

CVE-2024-4040-CrushFTP-File-Read-vulnerability

CVE-2024-4040: CrushFTP File Read Vulnerability Overview On April 19, 2024, a new zero-day vulnerability affecting CrushFTP versions below 10.7.1 and 11.1.0, as well as legacy 9.x versions, was disclosed to a private mailing list by the managed file transfer vendor CrushFTP. Initially, no CVE was...

CVE-2019-1663-Binary-Analysis

Binary Analysis of CVE-2019-1663 Author: Corentin Wolff Origin of the Vulnerability Source of the Vulnerability The vulnerability originates from the function 0x0002BF64, which misuses the strcpy function, making it prone to buffer overflow attacks. For clarity, this function has been renamed to...

CentralizedFirewall

Firewall Manager API Project Installation Follow these steps to set up and run the API project: 1. Clone the Repository root@kitploit: git clone https://github.com/adriyansyah-mf/CentralizedFirewall cd CentralizedFirewall 2. Edit the .env File Update the environment variables in .env according to...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI 混淆代理漏洞（Confused Deputy）- 安全研究验证项目 重要声明 本仓库为衍生编译仓库，与原始主仓库构成附属关系。 角色| 仓库| 说明 ---|---|--- 主仓库| inforcqb/cve-2026-0013-exploit| 原始漏洞研究 本仓库| XiaoBaiLovesStirring/cve-2026-0013-poc| 云端编译产物分发 安全协议 访问本仓库前，请务必阅读并理解 SECURITYPROTOCOL.md。 要点： 本仓库不提供源代码、攻击工具或漏洞利用框架...

enforcement-coverage

强制执行覆盖 查找携带比同级路由更弱的授权控制 的 API 路由。 它仅凭源码就在 Open WebUI 中发现了 CVE-2026-45316，无需任何安全公告信息： root@kitploit: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require hasaccesswrite; this route requires only hasaccessread POST /notes/id/update hasaccesswrite POST...

CVE-2026-39987.py

CVE-2026-39987.py 这个 Python 脚本利用存在漏洞的 marimo /terminal/ws 端点，并返回一个交互式 shell。 使用方法： 唯一需要修改的是脚本中的 HOST 变量。 更改 HOST 变量后，在终端中执行脚本，如下例所示： 使用示例： python3 CVE-2026-39987.py -- 如果目标存在漏洞，交互式 shell 将启动 -- 有关 CVE-2026-39987 的信息，请打开此链接 - https://nvd.nist.gov/vuln/detail/CVE-2026-39987 注意：如果你尚未安装...