bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

CVE-2019-8656

CVE-2019-8656 CVE-2019-8656 GateKeeper Bypass https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypass...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

davscan

DAVScan DAVScan is a quick and lightweight webdav scanner designed to discover hidden files and folders on DAV enabled webservers. The scanner works by taking advantage of overly privileged/misconfigured WebDAV servers or servers vulnerable to various disclosure or authentication bypass...

fastjson-1.2.61-RCE

fastjson-1.2.61-RCE Nota： En el archivo https://github.com/alibaba/fastjson/blob/master/src/main/java/com/alibaba/fastjson/parser/ParserConfig.java, el equipo oficial añadió 0x7bddd363ad3998c6L es decir, 1.2.61 8925522461579647174 0x7bddd363ad3998c6L...

fastjson-1.2.60-rce

Vulnerabilidad de deserialización en Fastjson = 1.2.60 Bypass de la lista de bloqueo de autoType con 2 gadgets JNDIConfiguration, OracleManagedConnectionFactory Gadgets root@kitploit: 经过测试，命中的4个文件都是可以利用的。 不过其中HikariConfig类就是前文提到的类，在最新版本被加入黑名单，JNDIConnectionPool类在42版本前就被加入黑名单了。...

e-cology

Ejecución remota de código en el componente Beanshell de 泛微 e-cology OA Windows Linux Ps root@kitploit: 检测目标系统os.name（因为目标系统是windows的话，执行set等命令，需要手动敲cmd.exe /c set） 使用Unicode绕过exec过滤，部分站点 Payload root@kitploit: bsh.script=exec'whoami'; unicode bypass bsh.script=\u0065\u0078\u0065\u0063"whoami";...

cve-2020-13933

cve-2020-13933 cve-2020-13933 Apache Shiro privilege bypass vulnerability This reproduction is very simple. First, set up the environment using IDEA + Shiro Reference: https://www.cnblogs.com/ph4nt0mer/p/13535999.html Then run, access, and capture packets...

gitlab-SSRF-redis-RCE

gitlab-SSRF+CRLF-Redis-RCE GitLab 11.4.7 SSRF + inyección CRLF combinado con ejecución remota de código en Redis 0x00 Entorno de vulnerabilidad root@kitploit: root@kali: cd gitlab-docker root@kali: docker-compose up -d root@kali: docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES...

VMInjector

V M I n j e c t o r root@kitploit: c 2012 by Marco Batista Licensed under GPLv3 see LICENSE file Overview: VMInjector is a tool designed to bypass OS login authentication screens of major operating systems running on VMware Workstation/Player, by using direct memory manipulation. Description:...

CVE-2024-27348-Apache-HugeGraph-RCE

Remote Code Execution vulnerability in Apache HugeGraph Server CVE-2024–27348 CVE-2024-27348 is a critical Remote Command Execution RCE vulnerability in Apache HugeGraph Server, a popular graph database system. The flaw resides in the Gremlin traversal language interface, which allows users to...

mimikat_ssp

mimikatssp captura de contraseñas de Windows evadiendo antivirus...

CVE-2018-10933

CVE-2018-10933 to test this code: get vulnerable version of libssh at homepage: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz uncompress and build, then go to example directory, there's a simple sshd server using libssh name: samplesshd-cb run this simple sshd by command: $ samplesshd-cb...

Chankro

Chankro Tu herramienta favorita para evadir disablefunctions y openbasedir en tus pentests. Cómo funciona PHP en Linux llama a un binario sendmail cuando se ejecuta la función mail. Si tenemos permitido putenv, podemos establecer la variable de entorno "LDPRELOAD", para poder precargar un objeto...

Python-Rootkit

python-rootkit This is a full undetectable python RAT which can bypass almost all antivirus and open a backdoor inside any windows machine which will establish a reverse https Metasploit connection to your listening machine. ViRu5 life cycle Bypass all anti-virus. Inject a malicius powershell...

CVE-2019-2215-HuaweiP20Lite

Port CVE-2019-2215 bad binder to Huawei P20lite Android 8.0.0 Description This project is an exploit for CVE-2019-2215 on Huawei P20lite in version Android 8.0.0. Kernel is in version 4.4.23. This vulnerability is probably the most documented one tutorials, real port on physical phone on this top...

pixload

pixload -- Image Payload Creating tools DESCRIPTION Set of tools for hiding backdoors creating/injecting payload into images. The following image types are currently supported: BMP, GIF, JPG, PNG, WebP. about Useful references for better understanding of pixload and its use-cases: Bypassing CSP...

vpwn

vpwn by qwertyoruiop generic xnu heap overflow exploitation. demo output: $ ./pwn i Preparing payload... i broke out of kaslr, kaslrslide = 0000000001a00000 + Payload successfully crafted. i Manipulating the heap... i Exploit loaded. + got r00t sh-3.2 uname -a Darwin qwertyoruiops-iMac.local 14.3...

objection

📱objection - 运行时移动探索工具 objection 是一个运行时移动探索工具包，基于 Frida，旨在帮助你评估移动应用的安全状况，无需越狱。 支持 iOS 和 Android。 检查并交互容器文件系统。 绕过 SSL 证书固定。 导出钥匙串。 执行内存相关任务，例如转储与修补。 探索并操作堆上的对象。 还有更多更多功能... 截图可在wiki中查看。 安装 安装非常简单，只需执行 pip3 install objection。这将为你提供 objection 命令。你可以通过 pip3 install --upgrade objection 更新现有的 objection...

CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080 – Omisión de verificación de firma DKIM fallo de canonización de cabeceras Código del programa simulación de análisis de correo electrónico en Python root@kitploit: dkimverifiersim.py - Flawed DKIM verifier import re, hashlib Simulated email with DKIM signature rawemail = b"""From:...