redact

redact Strip credential-like content from free-form strings before they reach logs, telemetry, or any third-party surface Part of thephpboyscout Go toolkit — small, framework-free Go modules extracted from go-tool-base. Docs: redact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact redacts...

proofpoint-CVE-2023-0090

Acerca de Investigador de seguridad: ly1g3, ly1g3attuta.io Huella GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Resumen: Ejecución Remota de Código - RCE sin autenticación CVE: CVE-2023-0090 Cronología: Descubierto - ly1g3 Reportado - ly1g3 Corregido...

intel-me-research

Intel ME Firmware Reverse Engineering — Live CSME 16.x Analysis "Your computer has a secret second computer inside it. We found it, mapped it, and documented what's hiding in there." 🔥 TRY IT YOURSELF — HECI SPY 🔥 One Python script. Zero dependencies. Talk to your Intel Management Engine directly...

New-lib3mf.dll-for-MeshMixer

New lib3mf.dll for MeshMixer Precompiled lib3mf.dll for MeshMixer which includes a backported patch for CVE-2021-21772, and an updated zlib 1.3.1. Replace your original one at C:\Program Files\Autodesk\Meshmixer\ Source code included, if you desire to compile it yourself. CVE-2021-21772:...

WEB-CLI_RCE_React2Shell

REACT2SHELL 🎯 Quick Overview What is this? This tool is a simple Proof-of-Concept PoC exploit for CVE-2025-55182. This is a serious flaw Prototype Pollution found in Next.js applications that use React Server Components. If a target server is vulnerable, this script lets you run operating system...

CVE-2014-6287

Poc exploitbash script bash.webm About the exploit You can get reverse shell with .sh file in Linux You can get reverse shell with .py file in Windows and Linux in windows, you need to install netcat You must specify the url example: http://target.com/ using for .py: python exploit.py using for...

cve-2020-0601-plugin

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: root@kitploit: 1579043477.791522 CHhAvVGS1DHFjwGM9...

CVE-2012-2982

This PoC exploit for CVE-2012-2982 was written as an exercise for the "Intro to PoC scripting" Room on TryHackMe. The room can be found here: https://tryhackme.com/room/intropocscripting I was originally going to use Python to follow along, but decided to practice my Rust skills instead. I also s...

CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection

CVE-2026-7070 – RDP Clipboard Hijacking via Virtual Channel Injection Program Code Python – simulated RDP clipboard root@kitploit: rdpserversim.py - Simulated RDP server with trusted virtual channel from http.server import HTTPServer, BaseHTTPRequestHandler import json, threading clipboard = ""...

PewSWITCH

PewSWITCH A FreeSWITCH specific scanning and exploitation toolkit for CVE-2021-37624 and CVE-2021-41157. Related blog: https://0xinfection.github.io/posts/analyzing-freeswitch-vulns/ Usage The help statement of the tool is as below: root@kitploit: $ ./pewswitch --help . / |\ / /| // / / / - |/|/...

MiniPlasma

MiniPlasma After re-investigating the technique used in GreenPlasma specifically SetPolicyVal, it turns out cldflt!HsmOsBlockPlaceholderAccess is still vulnerable to the exact same issue that was reported to Microsoft 6 years ago. I'm not taking full credit for this, James Forshaw from google...

cve-2024-6387_hassh

CVE-2024-6387 HASSH Fingerprints HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 regreSSHion. The primary goal of this repository is to share the generated HASSH fingerprint database. The scripts use the Shodan API to compile a list of HASSH fingerprints...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

CVE-2019-12180

CVE-2019-12180 Advisory & PoC SoapUI and ReadyAPI allow you to create or add dynamic contents to test cases for example, to calculate a timestamp on the fly using Apache Groovy Language scripts. Execution of these scripts can be triggered in many ways and they are stored inside the XML "Project...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Resources https://vulners.com/cve/CVE-2016-2098 Usage To use this...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

log4shell-exploitation-detection

Log4Shell CVE-2021-44228 Exploitation, Detection & Remediation A hands-on offensive and defensive security project simulating the full lifecycle of the Log4Shell vulnerability: exploitation from an attacker-controlled VM, detection engineering in Splunk, and validated remediation. Why This Projec...

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: Unauthenticated Remote Code Execution RCE in NextGen Mirth Connect This exploit leverages a critical deserialization vulnerability within Mirth Connect's XStream engine. It stems from an incomplete patch for CVE-2023-37679, enabling unauthenticated arbitrary code execution across...

cve-2015-3306-lab

CVE-2015-3306 — ProFTPD modcopy Pre-Auth Arbitrary File Copy A fully reproducible lab and a hand-written exploit for CVE-2015-3306 — built as a learning exercise in vulnerability research: patch diffing, manual triggering, and raw-socket exploit development. The bug ProFTPD's modcopy module...

CVE-2026-48205

camel-dns dns. / term Header Injection Reproducer CVE-2026-48205 This project demonstrates a message-header injection in Apache Camel's camel-dns component, tracked as CVE-2026-48205. The DNS producers read their operation parameters — the resolver to query, the name/domain to look up, the record...