Lucene search
+L

90 matches found

Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

Zero-Day-Legacy

🎓 Projeto de Graduação — Universidade Nacional de Ajloun ANU Faculdade de TI · Cibersegurança e Computação em Nuvem · Ano Acadêmico 2026 🏆 Maior nota da universidade: 97% 📖 Visão Geral Zero-Day Legacy é uma máquina de laboratório Boot-to-Root CTF Capture The Flag realista e intencionalmente vul...

8.8CVSS6.9AI score0.49166EPSS
SaveExploits28References2
Kitploit
Kitploit
added 2026/08/26 5:52 a.m.2 views

CyberStrikeAI

CyberStrikeAI 中文 | English AI-नेटिव साइबर सुरक्षा के लिए कार्रवाई की प्रणाली—जहाँ इरादा नियंत्रित निष्पादन बन जाता है, साक्ष्य परिचालन स्मृति बन जाता है, और हर ऑपरेशन अगले को बेहतर बनाता है। CyberStrikeAI योजना, निष्पादन, मानवीय निगरानी, साक्ष्य और रीप्ले को एक लेखापरीक्षण-योग्य कार्यक्षेत्र में...

6.5AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/08/25 11:54 p.m.1 views

CVE-2025-58434-AND-59528-POC

Flowise डुअल CVE PoC — CVE-2025-58434 + CVE-2025-59528 ⚠️ केवल शैक्षिक और अधिकृत सुरक्षा अनुसंधान के लिए। इस टूल को उन सिस्टमों के विरुद्ध चलाना जिनके स्वामी आप नहीं हैं या जिनके परीक्षण के लिए आपके पास लिखित अनुमति नहीं है, अवैध है। विषय-सूची अवलोकन कमजोरियों का विवरण CVE-2025-58434 — खाता...

10CVSS6.9AI score0.8737EPSS
SaveExploits30
Kitploit
Kitploit
added 2026/08/25 11:06 p.m.5 views

ad-autopwn

AD AutoPwn من الصفر إلى مدير المجال — سلسلة هجوم آلية على Active Directory أداة اختبار اختراق آلية بالكامل تربط أكثر من 25 تقنية هجوم لاختراق بيئات Active Directory. مصممة لتقييمات الأمن المصرح بها. root@kitploit: /\ | \ /\ | | | \ / | | | / \ || | / \ /\ V V / ' \ // \/ // \,|\/| //|||| ⚡ من...

9CVSS7.9AI score0.835EPSS
SaveExploits18References1
Kitploit
Kitploit
added 2026/08/25 7:11 p.m.1 views

soc-investigation-powershell-edrfreeze

تحقيق في أداة PowerShell EDRFreeze دراسة حالة LetsDefend يحتوي هذا المستودع على تحقيق موثّق في SOC استنادًا إلى سيناريو LetsDefend يتضمن نشاط PowerShell مشبوهًا وحمولة مستضافة على GitHub وتنفيذ أداة EDRFreeze. ما يتضمنه هذا المستودع التقرير الكامل: report.md الخط الزمني: timeline.md مؤشرات...

5.4AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/25 11:23 a.m.2 views

CVE-2021-3456

CVE-2021-3456 एक व्यावहारिक श्रृंखला जो एक हानिरहित PDF फ़ाइल से शुरू होती है और AWS EC2 इंस्टेंस पर रिवर्स शेल पर समाप्त होती है शुरुआत: PDF पेलोड तैयार करना यह सब हमले के फ्रंट एंड से शुरू होता है। PowerShell के अंतर्निहित WScript ऑब्जेक्ट का उपयोग करके, हम एक PDF के अंदर एक स्क्रिप्ट एम्बेड कर...

7.1CVSS7.1AI score0.00202EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 5:49 a.m.1 views

SniperRoost

SniperRoost CVE-2017-11774 का शोषण करने के लिए एक वैध हमला श्रृंखला उत्पन्न करने हेतु प्रयुक्त, ईरानी APT से जुड़ा, केवल अनुसंधान PoC है; कृपया हानि के लिए उपयोग न करें।...

7.8CVSS7.5AI score0.59893EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 2:44 a.m.1 views

whiskeysamlandfriends

WhiskeySAML e Amigos TicketsPlease TicketsPlease: Biblioteca Python para auxiliar na geração de tickets Kerberos, recuperação remota das configurações do ADFS, geração de tokens Golden SAML e recuperação de Tokens de Acesso do Azure. WhiskeySAML WhiskeySAML: Ferramenta de prova de conceito para u...

5.4AI score
SaveExploits0References4
OSV
OSV
added 2026/07/07 4:03 p.m.17 views

PYSEC-2026-1348 Fides' Admin UI User Password Change Does Not Invalidate Current Session

Summary Admin UI user password changes in Fides do not invalidate active user sessions, creating a vulnerability chaining opportunity where attackers who have obtained session tokens through other attack vectors such as XSS can maintain access even after password reset. This issue is not directly...

6.3CVSS5.8AI score0.00298EPSS
SaveExploits1References7
Microsoft Secure
Microsoft Secure
added 2026/06/17 5:00 p.m.25 views

AI is accelerating cyberattacks—here’s how to stay ahead

In March, we wrote that identity security has become the new pressure point for modern cyberattacks. Since then, AI has only increased that pressure. AI helps cyberattackers move faster across the attack chain: personalizing social engineering at scale, automating reconnaissance, analyzing leaked...

5.5AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/05/28 6:40 a.m.191 views

claude-security-scanner

🇨🇳 ⚡ bash git clone https://github.com/290298661...

5.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/05/27 12:00 a.m.20 views

HunterAgent: Neuro-Symbolic Attack Trace Reconstruction under Anti-Forensics

Modern alert-triage systems reduce SOC burden by filtering false positives, but flagging a high-risk alert is only the start of incident response. Threat hunting requires reconstructing causal attack chains across heterogeneous, partially corrupted logs. Against APTs using anti-forensics parent-P...

5.8AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2026/05/07 8:22 p.m.65 views

When prompts become shells: RCE vulnerabilities in AI agent frameworks

In this article 1. A representative case study: Semantic Kernel 2. CVE-2026-26030: In-Memory Vector Store 3. CVE-2026-25592: Arbitrary file write through SessionsPythonPlugin 4. The vulnerability 5. Attack chain overview 6. Defending the agentic edge 7. Not bugs, but developed by design 8. CTF...

9.9CVSS6.6AI score0.03712EPSS
SaveExploits2
Microsoft Secure
Microsoft Secure
added 2026/05/07 8:22 p.m.221 views

When prompts become shells: RCE vulnerabilities in AI agent frameworks

In this article 1. A representative case study: Semantic Kernel 2. CVE-2026-26030: In-Memory Vector Store 3. CVE-2026-25592: Arbitrary file write through SessionsPythonPlugin 4. The vulnerability 5. Attack chain overview 6. Defending the agentic edge 7. Not bugs, but developed by design 8. CTF...

9.9CVSS6.6AI score0.03712EPSS
SaveExploits2
UbuntuCve
UbuntuCve
added 2026/04/10 8:16 p.m.9 views

CVE-2026-40175

Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...

8.1CVSS7AI score0.01882EPSS
SaveExploits5References6
Debian CVE
Debian CVE
added 2026/04/10 7:23 p.m.23 views

CVE-2026-40175

Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This...

8.1CVSS6.8AI score0.01882EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2026/04/06 7:59 p.m.135 views

Multi-Stage-Web-Attack-XSS-to-Admin-Takeover-and-RCE

🛡️ Multi-Stage Web Attack: XSS to Admin Takeover & RCE This p...

6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/03/31 2:06 p.m.169 views

certstrike

CertStrike ADCS exploitation and PKI attack framework with in...

6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/03/23 4:35 p.m.223 views

TGT2Admin-

🎭 RBCDExploit - Resource-Based Constrained Delegation Attack...

6AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/03/09 4:37 p.m.156 views

challenge-yourself-level-1

Attack Path Lab !GitHubhttps://img.shields.io/badge/GitHu...

6.1AI score
SaveExploits0
Rows per page
Query Builder