CVE-2018-20555

CVE-2018-20555 The Wordpress Plugin called Social Network Tabs, made by the company Design Chemical, is leaking twice the Twitter accesstoken, accesstokensecret, consumerkey and consumersecret of their user which is leading to a takeover of their Twitter account. This is caused by the following...

reachproof

ReachProof Evidence-backed EU Cyber Resilience Act Article 14...

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...

CVE-2022-4510-WalkingPath

CVE-2022-4510-Binwalk This script allows you to generate exploits for targeting CVE-2022-4510 Binwalk vulnerabilities. The exploits can be used for testing and demonstrations. The supported options include SSH, command execution, and reverse shell. Prerequisites Python 3.x Usage 1. Clone the...

chaps

CHAPS: Configuration Hardening Assessment PowerShell Scripts CHAPS is a set of read-only scripts for checking Windows system security configuration where additional assessment software such as Microsoft Policy Analyzer or commercial tools cannot be installed. It is designed for Industrial Control...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

LogFileParser

Features Decode and dump $LogFile records and transaction entries. Decode NTFS attribute changes. Optionally resolve all datarun list information available in $LogFile. Option: "Reconstruct data runs". Recover transactions from slack space within $LogFile. Choose to reconstruct missing or damaged...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

OffensiveLua

Offensive Lua Offensive Lua is a comprehensive collection of offensive security and red team scripts written in Lua with FFI Foreign Function Interface. These scripts leverage the power and flexibility of LuaJIT on Microsoft Windows to perform advanced penetration testing and red teaming...

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the server. Poc Create a JavaScript file and giv...

0xsp-Mongoose

Apoya el proyecto para el desarrollo continuo ETH 0xf340c15c5e669a4ababab856e9f2bccd659d6e42 0xsp Mongoose RED para Windows Versión actual 2.2.0 La versión roja de 0xsp mongoose se proporciona para ayudar a sus necesidades durante la simulación de ciberseguridad; al usar esta versión, podrá audit...

recon

El proyecto se ha trasladado a monorepo. Consulte https://github.com/pownjs/pown para obtener más información. Recon Recon es un framework de reconocimiento de objetivos impulsado por grafos de conocimiento. El uso de grafos de conocimiento en lugar de representaciones tabulares planas facilita...

dirtcow

dirtcow Dirty Cow Linux Local Privilege Escalation Vulnerability Reproduction CVE-2016-5195 0、 Use the command uname -a to check the Linux kernel information 1、 Download the EXP to local/server 2、 Use the command gcc -pthread dirty.c -o dirty -lcrypt to compile dirty.c, generating an executable...

batondrop_armv7

baton drop for armv7 MSM8960 Given that policyhax aka golden key's fix actually works on Qualcomm systems, I picked up a working but sold for-parts Dell XPS 10 to port baton drop to MSM8960. Here is the result. Extract image.7z to your GPT fat32-formatted USB device, copy your unsigned EFI boot...

CVE-2024-4358_Mass_Exploit

CVE-2024-4358MassExploit Modified tools from @sinsinology to do mass exploit. Requirements Python 3.x Installation root@kitploit: git clone https://github.com/Sk1dr0wz/CVE-2024-4358MassExploit.git cd CVE-2024-4358MassExploit pip intstall -r requirements.txt How To Run root@kitploit: usage: python...

themebleed

ThemeBleed Proof-of-Concept for CVE-2023-38146 "ThemeBleed" root@kitploit: Usage: ThemeBleed.exe Commands: server - Runs the server maketheme - Generates a .theme file referencing the specified host makethemepack - Generates a .themepack file referencing the specified host Data files The binaries...

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

noapi-google-search-mcp

noapi-google-search-mcp [email protected] Si quieres apoyar noapi-google-mcp o gpt-oss-20B/120B-Vision y otros modelos de código abierto en desarrollo, por favor contribuye a mi fondo de cómputo en GPU: se necesitan alrededor de $3000. Si encuentras esto útil, considera apoyar el desarrollo...