Amaranth-Project

Amaranth Project 利用 CVE-2025-8088 （WinRAR 路径遍历漏洞，≤ 7.11）实现多阶段后门植入攻击链。 root@kitploit: 诱饵文档 → 恶意RAR → CVE触发 → ADS写入 → Stager执行 → 文件加载 → C2上线 项目结构 目录| 内容 ---|--- Stage01Stage07/| 各历史阶段的攻击链源码与测试脚本 loader/| 自研 PE 内存加载器（C语言） rat-client/| 自研精简 RAT 客户端（C） source/| Quasar RAT / AsyncRAT 上游源码 tools/| Quasa...

LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems

Large Language Model LLM-based agents have demonstrated remarkable capabilities in reasoning, planning, and tool usage. The recently proposed Model Context Protocol MCP has emerged as a unifying framework for integrating external tools into agent systems, enabling a thriving open ecosystem of...

Joomla! 3.4.6 - Remote Code Execution

Exploit Title: Joomla! 3.4.6 - Remote Code Execution Google Dork: N/A Date: 2019-10-02 Exploit Author: Alessandro Groppo Vendor Homepage: https//www.joomla.it/ Software Link: https://downloads.joomla.org/it/cms/joomla3/3-4-6 Version: 3.0.0 -- 3.4.6 Tested on: Linux CVE : N/A Technical details:...