CVE-2019-2215-HuaweiP20Lite

Port CVE-2019-2215 bad binder to Huawei P20lite Android 8.0.0 Description This project is an exploit for CVE-2019-2215 on Huawei P20lite in version Android 8.0.0. Kernel is in version 4.4.23. This vulnerability is probably the most documented one tutorials, real port on physical phone on this top...

pixload

pixload -- Image Payload Creating tools DESCRIPTION Set of tools for hiding backdoors creating/injecting payload into images. The following image types are currently supported: BMP, GIF, JPG, PNG, WebP. about Useful references for better understanding of pixload and its use-cases: Bypassing CSP...

vpwn

vpwn by qwertyoruiop generic xnu heap overflow exploitation. demo output: $ ./pwn i Preparing payload... i broke out of kaslr, kaslrslide = 0000000001a00000 + Payload successfully crafted. i Manipulating the heap... i Exploit loaded. + got r00t sh-3.2 uname -a Darwin qwertyoruiops-iMac.local 14.3...

objection

📱objection - 运行时移动探索工具 objection 是一个运行时移动探索工具包，基于 Frida，旨在帮助你评估移动应用的安全状况，无需越狱。 支持 iOS 和 Android。 检查并交互容器文件系统。 绕过 SSL 证书固定。 导出钥匙串。 执行内存相关任务，例如转储与修补。 探索并操作堆上的对象。 还有更多更多功能... 截图可在wiki中查看。 安装 安装非常简单，只需执行 pip3 install objection。这将为你提供 objection 命令。你可以通过 pip3 install --upgrade objection 更新现有的 objection...

CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080 – Omisión de verificación de firma DKIM fallo de canonización de cabeceras Código del programa simulación de análisis de correo electrónico en Python root@kitploit: dkimverifiersim.py - Flawed DKIM verifier import re, hashlib Simulated email with DKIM signature rawemail = b"""From:...

CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter

CVE-2026-5050 – Blind LDAP Injection via Unescaped Filter Program Code Python with ldap3 simulation root@kitploit: ldapserversim.py - Simulated LDAP authentication server from flask import Flask, request, jsonify app = Flaskname Fake user database USERS = 'admin': 'password': 'secret', 'role':...

CheeseTools

CheeseTools This repository has been made basing onto the already existing MiscTool, so big shout-out to rasta-mouse for releasing them and for giving me the right motivation to work on them. CheeseExec Command Exec / Lateral movement via PsExec-like functionality. Must be running in the context ...

CVE-2019-16278

Exploits for CVE-2019-16278 and CVE-2019-16279 Nostromo httpd is prone to 2 cricital vulnerabilities for versions &1 This bug is due to an incomplete fix for CVE-2011-0751. We can bypass a check for which allows us to execute with arbitrary arguments...

CVE-2023-2982

CVE-2023-2982 WordPress Social Login and Register Discord, Google, Twitter, LinkedIn = 7.6.4 - Bypass de Autenticación Información El plugin de WordPress Social Login and Register Discord, Google, Twitter, LinkedIn es vulnerable a un bypass de autenticación en versiones hasta la 7.6.4 inclusive...

CVE-2025-52399-SQLi-Institute-of-Current-Students

CVE-2025-52399 - SQL Injection in Institute of Current Students Summary The loginlinkfaculty endpoint in the Institute-of-Current-Students application is vulnerable to SQL Injection via the fid POST parameter. The parameter is not properly sanitized before being used in a SQL query, allowing remo...

CVE-2026-65591

CVE-2026-65591 Nombre del software vulnerable y versiones afectadas Versiones de n8n anteriores a la 1.123.64 Versiones de n8n anteriores a la 2.29.8 Versiones de n8n anteriores a la 2.30.1 Descripción Existe una omisión del saneador sanitizer en el manejador de miembros calculados del evaluador ...

CVE-2024-42850

CVE-2024-42850 An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements. Writeup When changing your password, upon submission of the new password, the password is first sent in a POST request to an endpoint which checks t...

about_cobaltstrike4.5_cdf

aboutcobaltstrike4.5cdf CobaltStrike 4.5 version cracked, removed checksum8 feature, bypass BeaconEye, fixed error path leaking stage, added TOTP two-factor authentication, fixed CVE-2022-39197, etc. If you are looking for this project: cobaltstrike4.5cdf Yes, it has been taken down again:...

CVE-2023-23752

CVE-2023-23752 Exploit for CVE-2023-23752 4.0.0 GET /api/index.php/v1/config/application?public=true HTTP/1.1 Host: 10.9.49.205 User-Agent: curl/7.68.0 Accept: / Mark bundle as not supporting multiuse HTTP/1.1 200 OK Date: Mon, 20 Mar 2023 15:14:05 GMT Server: Apache/2.4.41 Ubuntu x-frame-options...

Atlas

Atlas - Quick SQLMap Tamper Suggester v1.0 Atlas is an open source tool that can suggest sqlmap tampers to bypass WAF/IDS/IPS, the tool is based on returned status code. Screen Installation root@kitploit: $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $ python atlas.py python3+...

SigFlip

What is it ? SigFlip is a tool for patching authenticode signed PE files exe, dll, sys ..etc in a way that doesn't affect or break the existing authenticode signature, in other words you can change PE file checksum/hash by embedding data i.e shellcode without breaking the file signature, integrit...

CVE-2026-18963-Exploit

CVE-2026-18963 — Bypass de reset-credentials en Keycloak → toma de control de cuenta no autenticada Conociendo solo un nombre de usuario o dirección de correo electrónico , un atacante no autenticado establece una contraseña arbitraria en cualquier cuenta de Keycloak. El correo de restablecimient...

cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. reemplaza zbxsignedsession por cookie 2. inicia sesión con Single Sign-On SAML autor: @random-robbie、@jweny y @Mr-xn link: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

Amsi-Bypass-Powershell

Sponsored by Amsi-Bypass-Powershell This repo contains some Antimalware Scan Interface AMSI bypass / avoidance methods i found on different Blog Posts. Most of the scripts are detected by AMSI itself. So you have to find the trigger and change the signature at the part via variable/function...

DFShell

root@kitploit: ██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝...