DarkLoadLibrary

DarkLoadLibrary LoadLibrary for offensive operations. How does it work? https://www.mdsec.co.uk/2021/06/bypassing-image-load-kernel-callbacks/ Usage root@kitploit: DARKMODULE DarkModule = DarkLoadLibrary LOADLOCALFILE, // control flags L"TestDLL.dll", // local dll path, if loading from disk NULL,...

nacker

Nacker Nacker is a tool to bypass 802.1x Network Access Control NAC on a wired LAN. Nacker will help you locate any non-802.1x configurable hosts on your subnet, and spoof their MAC address so that you appear authenticated to the switch. The name "Nacker" is a derived from the word "knocker" and...

CVE-2020-0728

CVE-2020-0728 Details The TrustedInstaller.exe service is running as NTAUTHORITY\SYSTEM and is hosting the Sxs Store Class 3C6859CE-230B-48A4-BE6C-932C0C202048 COM service along with the interface ISxsStore. The access permissions...

WAF-A-MoLE

WAF-A-MoLE A guided mutation-based fuzzer for ML-based Web Application Firewalls, inspired by AFL and based on the FuzzingBook by Andreas Zeller et al. Given an input SQL injection query, it tries to produce a semantic invariant query that is able to bypass the target WAF. You can use this tool f...

CVE-2025-29927-PoC

CVE-2025-29927: Next.js Middleware Bypass Vulnerability PoC This repository demonstrates the CVE-2025-29927 vulnerability in Next.js, where the internal header x-middleware-subrequest can be used to bypass middleware checks like authentication. Affected Versions Next.js 15.x 15.2.3 Next.js 14.x...

CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite

CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite...

byp4xx

root@kitploit: / / // / / / / / / / // /| |// |// / // / // / // / / 您可以使用的部分 cURL 选项示例： -L 跟随重定向（30X 响应） -x : 设置代理 -m 设置超时 -H 添加新头部。对双引号进行转义。 -d POST 请求体中的数据 -... 内置选项： --all 详细模式（默认只显示 2xx 和 3xx 状态码） -t 或 --thread 设置最大线程数。启用线程时禁用速率限制。请谨慎使用。 --rate 设置最大请求数/秒。仅强制使用单线程，适用于低速率限制。（默认 5 reqs/sec） -xV...

CVE-2026-72585-PoC

CVE-2026-72585 — Grafana: corrección incompleta para CVE-2026-21724 permite al rol Editor eliminar puntos de contacto protegidos Producto: Grafana Grafana Labs — hasta 13.2.0 Archivo: pkg/services/ngalert/provisioning/contactpoints.go CWE: CWE-284 — Control de acceso inadecuado CVSS 3.1:...

Papers

This repository is intended to host my research papers. Put it on watch if you would like to read more from me. Bypassing XSS Detection Mechanisms Download PDF A Phonetic Approach to Calculate Linguistic Information in Text Download PDF...

XIP

XIP Description XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc. asciicast Further explaination on our blog post article Usage root@kitploit: python3 xip.py --help Docker alternative Official image You c...

PRISM-AP

PRISM-AP ACERCA DE: PRISM-AP es un framework automatizado de ataque MITM con RogueAP inalámbrico. CARACTERÍSTICAS: Fácil de configurar y usar, y totalmente automatizado Aprovecha el ataque wifi MANA para atraer conexiones de clientes Bypass parcial de HSTS mediante bettercap Intercepta y visualiz...

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805CVE-2024-21887 The script in this repository checks and exploits CVE-2023-46805 Auth Bypass and CVE-2024-21887 Remote Code Execution vulnerabilities specified in the Ivanti Connect Secure product exist. You can check vulnerability details this link...

OWASSRF-CVE-2022-41082-POC

CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OWASSRF Vulnerability Effecting Microsoft Exchange Servers This is Post-Auth RCE for ProxyNotShell OWASSRF, valid cardentials are needed for command execution. Added the Powershell PoC script for TabShell Vulnerability CVE-2022-41076 The...

CVE-2018-14442

Foxit Reader CPDFParser::mpCryptoHandler Use After Free 1. Antecedentes del formato PDF 2. Diccionarios de cifrado 3. Detalles de la vulnerabilidad 4. Omisión de ASLR y DEP 5. Detalles del entorno 6. Disparador 7. Autor Antecedentes del formato PDF PDF es un formato de archivo utilizado para...

CVE-2025-2594

CVE-2025-2594 Registro de Usuario y Membresía = 4.1.2 - Bypass de Autenticación ¡Descargo de responsabilidad! La información presentada en este informe de CVE Common Vulnerabilities and Exposures es solo con fines educativos e informativos. Los detalles proporcionados se basan en recursos...

CVE-2019-1215

CVE-20190-1215 ws2ifsl.sys UAF exploit for Windows 10 19H1 x64 This exploit uses the recently patched use after free vulnerability CVE-2019-1215 in ws2ifsl.sys to achieve local privilege escalation. The exploit targets Windows 10 19H1 1901 x64 and demonstrates how to bypass kASLR, kCFG and SMEP...

CVE-2023-49547

CVE-2023-49547 Customer Support System 1.0 - SQL Injection Login Bypass Description : Customer Support System is vulnerable 1.0 to SQL Injection. A SQL injection vulnerability in Customer Support System 1.0 enables remote, unauthenticated attackers to bypass the authentication process by exploiti...

CVE-2023-4911

Proof of concept for CVE-2023-4911 Looney Tunables This vulnerability has been discovered by Qualys Threat Research Unit. Here you can read the advisory they published; it explains the vulnerability in depth. The exploit has been tested on Ubuntu 22.04.2 LTS with GLIBC 2.35-0ubuntu3.1. Testing th...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Wordpress Really Simple Security authentication bypass flaw in Docker Description The Really Simple Security plugins Free, Pro, and Pro Multisite for WordPress, versions 9.0.0 to 9.1.1.1, are affected by an authentication bypass vulnerability. This issue arises from improper erro...

Nextjs-middleware-vulnerable-appdemo-CVE-2025-29927

Vulnerable Next.js App for Pentesting Practice This is a Next.js application intentionally designed to be vulnerable to CVE-2025-29927: The Next.js Middleware Authorization Bypass Vulnerability. ⚠️ Disclaimer This application is for educational and ethical hacking purposes only. Do not deploy it t...