CVE-2026-6875-PoC-Exploit

CVE-2026-6875 - Framework de explotación y verificador de PoC para RCE sin autenticación en ServiceNow 🔥 Plataforma AI de ServiceNow — Inyección de JavaScript → Escape de sandbox → RCE → Escalada a root Framework de explotación y verificador seguro Solo para pruebas de seguridad autorizadas. ⚖️...

CVE-2020-28018

CVE-2020-28018: Use-after-free UAF en Exim que conduce a RCE Introducción Existe una vulnerabilidad de use-after-free UAF en tls-openssl.c que permite a atacantes remotos no autenticados corromper datos de memoria interna, logrando así, finalmente, ejecución remota de código. Primitivas: Fuga de...

bitcracker

BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...

CVE-2020-16846-Saltstack-Salt-API

CVE-2020-16846-Saltstack-Salt-API Vulnerabilidad explicada: Se descubrió un problema en SaltStack Salt hasta la versión 3002. El envío de solicitudes web manipuladas a la API de Salt, con el cliente SSH habilitado, puede provocar una inyección de shell. Los detalles sobre esta vulnerabilidad se...

Follina

Follina Notas relacionadas con CVE-2022-30190 FOLLINA: CVE-2022-30190 1. Usa la Herramienta de diagnóstico de soporte de Microsoft MSDT 2. Explota la ventana de diagnóstico abierta para el diagnóstico y, cuando se ejecuta correctamente, proporciona una shell inversa al atacante. 3. Github: a...

WAGO-CVE-2023-1698

WAGO-CVE-2023-1698 Vulnerabilidad de ejecución remota de código en el sistema WAGO CVE-2023-1698 Atención He desarrollado una herramienta para pruebas locales y desarrollo de POC, que es solo para referencia de aprendizaje técnico. No la utilice para fines ilegales. Cualquier consecuencia o pérdi...

Dop2Mop

Dop2Mop 一个概念验证的OpenGraph收集器，用于BloodHound，映射从DevOps到MLOps基础设施的攻击路径。 基于Brett Hawkins（@h4wkst3r）的《从DevOps到MLOps基础设施的攻击路径：特权管道》。 目录 致谢 概述 支持的平台 映射的信任边界 安装 可选依赖 快速开始 生成演示数据 导入BloodHound 配置 配置文件 凭据验证 CLI参考 命令概述 全局选项 dop2mop collect dop2mop demo CLI使用示例 基本收集 单一平台收集 多平台收集 GitHub收集示例 Azure DevOps收集示例 Azur...

CVE-2025-24893

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Template Injection SSTI vulnerability via Groovy template injection in the SolrSearch endpoint. Vulnerability Type : Server-Side Template Injection SSTI Component : XWiki SolrSearch RSS feed Impact : Remote Code Execution Affected Version ...

bissap

bissap root@kitploit: %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%. % % % .: % .===% . :: % :%%=====%%%%%%: % %%%= =====%============%%%-% = % = =====-================ % BBBBBBBBBBBBBBBBB IIIIIIIIII SSSSSSSSSSSSSSS SSSSSSSSSSSSSSS AAA PPPPPPPPPPPPPPPPP = : =====================% + B::::::::::::::::B I::::::::I...

twitter-intelligence

Twitter Intelligence A project written in Python for twitter tracking and analysis without using Twitter API. Prerequisites This project is a Python 3.x application. The package dependencies are in the file requirements.txt. Run that command to install the dependencies. root@kitploit: pip3 instal...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

gaia

Gaia：全局 API 完整性评估器 依赖项 安装 opam 以构建测试 API。 安装 git、python3、pip 和 .NET 以构建 RESTler 和 Schemathesis。 安装 cargo 以构建 Gaia。 安装 docker v26.0.1 和 docker compose v2.26.1 以使用 ELK Stack 构建 Gaia（如果不使用则为可选）。 安装 node = v18.0.0 和 npm = v8.6.0 要创建一个 opam 本地切换： root@kitploit: make opam-switch 要安装所有依赖项： root@kitploit...

CVE-2019-11581

CVE-2019-11581 Atlassian JIRA 模板注入漏洞 RCE 演示 python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" 受影响版本下载 https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc root@kitploit:...

emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

asterisk v24.0.0-rc1

The AsteriskR Open Source PBX root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document...

ofp_sniffer

OFPSniffer 是一个用于故障排除和学习的 OpenFlow 嗅探器。 当前版本为 1.2，它能解析所有 OpenFlow 1.0 消息，并与 InfluxDB、Grafana 和 Slack 集成。 OpenFlow 1.3 将在 OFPSniffer 版本 1.3 中提供（即将发布）。 它直接在 Linux shell 上工作，并解析线缆上或来自 libpcap 文件的所有 OpenFlow 消息。使用 OFPSniffer，您可以轻松跟踪 OpenFlow 消息及其关联的错误（如果有），而无需打开 X11 或 Wireshark。OFPSniffer 使用 Python 3....

mose

MOSE（服务器大师） 版权 2020 桑迪亚国家技术与工程解决方案公司（NTESS）。 根据合同 DE-NA0003525 与 NTESS 的规定， 美国政府保留对此软件的某些权利。 MOSE 是一款后利用工具，帮助安全专业人员在入侵后利用配置管理（CM）系统。像 Puppet、Chef、Salt 和 Ansible 这样的 CM 工具可以在大规模主机群上运行命令，但它们的 DSL 和工作流在压力下往往难以快速掌握。MOSE 允许你描述想要执行的操作，然后为你构建 CM 特定的有效载荷。 MOSE 的功能 1. 抽象 CM 特定有效载荷 ，让你专注于意图而非工具特定语法。 2...

gosec

gosec - Go Security Checker Inspects source code for security problems by scanning the Go AST and SSA code representation. Quick links GitHub Action Local installation Quick start Common usage patterns Selecting rules Output formats Features Pattern-based rules for detecting common security issue...

CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2026-92745

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...