2599 matches found
CVE-2024-23742
CVE-2024-23742 An issue in Loom through 0.196.1 on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. With this tool, we can check if the App is Vulnerable: After validation, we can inject our code, and get a shell Enjoy Your She...
BRC4-BOF-Artillery
Generic This repository includes a collection of generic BOFs I wrote over a period of time. This repository solely focuses on porting and execution, without modifying the original source for stability. While I may conduct further testing in the future, this is not officially supported. Contact...
CVE-2023-3079
Exploit for CVE-2023-3079 Shoutout to @clem1 for finding the ITW exploit. Shoutout to @alisaesage for her prior RCA on the bug. Shoutout to @buptsb for his notes on the bug. Resources Writeups and other resources. https://issues.chromium.org/issues/40065138...
log4j-log4shell-playground
About A playground for poking at the critical log4j aka Log4Shell CVE-2021-44228 vulnerability mitigations. This particular problem lies within the JndiLookup feature and the log4j ability to interpret ALL the arguments of a logging call. I would expect it to only interpret the format message the...
CVE-2024-24576.jl
CVE-2024-24576 PoC in Julia root@kitploit: λ julia main.jl Enter arguments: hello Output: Argument received: hello root@kitploit: λ julia main.jl Enter arguments: hello & whoami Output: Argument received: "hello & whoami" root@kitploit: λ julia main.jl Enter arguments: hello" & whoami Output:...
ics-forensics-tools
ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...
CVE-2024-4577
Este es el POC de CVE 2024-4577 Este exploit permite al atacante realizar RCE en versiones de PHP como PHP 8.3 8.3.8, PHP 8.2 8.2.20, PHP 8.1 8.1.29 ¡Puedes consultar los argumentos en el código! Para leer más sobre este exploit en particular, consulta nist.gov...
Symfony Profiler - Remote Access via Injected Arguments
symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...
wuzz
wuzz Herramienta CLI interactiva para inspección HTTP. Los argumentos de línea de comandos de Wuzz son similares a los argumentos de cURL, por lo que puede usarse para inspeccionar/modificar peticiones copiadas desde el inspector de red del navegador con la función "copy as cURL". Instalación y u...
NoArgs
NoArgs: Manipulación y Ocultación de Argumentos de Procesos Twitter: @AzizWho Aviso: Solo para Fines Educativos Esta herramienta está destinada únicamente a fines educativos. No soy responsable de ningún uso indebido y todos los usuarios deben cumplir con las leyes aplicables. El uso ilegal está...
CVE-2018-20162-digi-lr54-restricted-shell-escape
layout: post title: "CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape" author: sgo category: security The Digi TransPort LR54 is a high speed LTE router commonly used by industry, infrastructure, retail and public transportation. It supports running python scripts in a restricted...
spyse.py
spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...
PT-2026-90720
CVE ID: CVE-2026-90560 Severity: HIGH | CVSS Score: 8.2/10 Severity and score come from CVSS ratings in the National Vulnerability Database NVD, the NIST repository of standardized vulnerability data. zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the...
CVE-2026-87985
Mistral Vibe contains an arbitrary code execution vulnerability caused by ANSI-C quoted arguments that bypass command permission checks. Because these arguments are not properly inspected, an attacker can craft an allowlisted command to execute arbitrary code on the user's system without requirin...
Xjar_tips
Xjartips Introduction: root@kitploit: Spring Boot JAR 安全加密运行工具, 同时支持的原生JAR. 基于对JAR包内资源的加密以及拓展ClassLoader来构建的一套程序加密启动, 动态解密运行的方案, 避免源码泄露以及反编译. 功能特性 无代码侵入, 只需要把编译好的JAR包通过工具加密即可. 完全内存解密, 降低源码以及字节码泄露或反编译的风险. 支持所有JDK内置加解密算法. 可选择需要加解密的字节码或其他资源文件. 支持Maven插件, 加密更加便捷. 动态生成Go启动器, 保护密码不泄露. 其中xjar...
dumpscan
Public development on this tool has been paused but is still being worked on privately. Expect a massive update Q3/Q4 2024. Dumpscan is a command-line tool designed to extract and dump secrets from kernel and Windows Minidump formats. Kernel-dump parsing is provided by volatility3. Features x509...
osinteye
This will not receive any further updates. Instagram is deprecated, so I decided to just archive it. Username enumeration & reconnaisance suite Supported sites PyPI Github TestPypi About.me Instagram DockerHub Installation Clone project: root@kitploit: $ git clone...
CVE-2018-6789-Python3
CVE-2018-6789 Exim 4.90.1 Vulnerabilidad RCE Exim 4.90.1 Vulnerabilidad RCE remezcla para Python3 con argumentos pasados desde la línea de comandos Uso: python3 exim.py -t localhost -p 25 -lh 192.168.0.159 -lp 1337...
CVE-2024-28085
Wall-Escape CVE-2024-28085 The util-linux wall command does not filter escape sequences from command line arguments. The vulnerable code was introduced in commit cdd3cc7fa4 2013. Every version since has been vulnerable. A full report can be found here. I have nicknamed this bug "WallEscape". This...
