CVE-2017-6640-POC

CVE-2017-6640-POC Proof of concept for CVE-2017-6640 as burp extension Cisco Prime Data Center Network Manager DCNM implements a static credentials. See also: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2 More specifically, the Web UI requires users...

kernel-exploits

Exploits del kernel de Linux Fecha| Enlace| Descripción| Vector| Impacto ---|---|---|---|--- 02.2016| CVE-2016-2384| Double-free en el controlador USB MIDI| USB + Local| LPE 03.2016| prefetch-side-channel| Bypass de KASLR mediante prefetch| Local| Fuga de información 12.2016| CVE-2016-9793|...

hakoriginfinder

hakoriginfinder 用于发现反向代理背后的原始主机的工具。可用于绕过 WAF 及其他反向代理。 工作原理 此工具首先向您提供的主机名/URL 发起 HTTP 请求并存储响应，然后向您提供的每个 IP 地址通过 HTTP（80）和 HTTPS（443）默认发起请求（更多端口可通过选项指定），并将 Host 头设置为原始主机:port。随后使用 Levenshtein 算法将每个响应与原始响应进行比较，以确定相似度。如果响应相似，则视为匹配。 用法 通过 stdin 提供 IP 地址列表，并通过 -h 选项提供原始主机名。例如： root@kitploit: prips...

Nidhogg

Nidhogg Nidhogg is a multi-functional rootkit to showcase the variety of operations that can be done from kernel space. The goal of Nidhogg is to provide an all-in-one and easy-to-use rootkit with multiple helpful functionalities for operations. Besides that, it can also easily be integrated with...

CVE-2026-82744

Not Failing Securely Failing Open vulnerability in ash-project ash skips an Ash.Reactor change when the guard controlling it raises, so a change meant to run does not. An Ash.Reactor change step can be gated by where validations that decide whether the change runs. Ash.Reactor.ChangeStep...

CVE-2026-82746

Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic path of Ash.updatemany/4. Ash.updatemany/4 runs as a single atomic statement a data-layer updatemany, for example a SQL MERGE whenever an atomic strategy is...

CVE-2026-82740

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

CVE-2026-82736

Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-project ash lets an attacker store a case-insensitive string value that violates its length or match constraints. Ash.Type.CiString.applyconstraints/2 lib/ash/type/cistring.ex validated the maxlength, minlength, and match...

CVE-2026-82741

Improper Validation of Specified Type of Input vulnerability in ash-project ash lets an attacker confuse the stored type tag of an Ash.Type.Union value that uses storage: :mapwithtag, bypassing that member's validation and any tag-based authorization. For a union with storage: :mapwithtag, each...

CVE-2026-82734

Improper Validation of Specified Quantity in Input vulnerability in ash-project ash allows an attacker to submit a non-finite decimal value that bypasses numeric bounds constraints or fails later operations on the value. Ash.Type.Decimal cast input through Ecto's decimal cast in castinput/2 and...

CVE-2017-14322

CVE-2017-14322 Interspire Email Marketer emailmarketer Exploit Google Dork root@kitploit: intitle:"Control Panel" + emailmarketer Exploit using Burp Suit Add a Match and Replace for Request header like below: root@kitploit: Match: ^Cookie.$ Replace: Cookie:...

dirty_sock

dirtysock: Escalada de Privilegios en Linux a través de snapd En enero de 2019, se descubrió que las versiones actuales de Ubuntu Linux eran vulnerables a la escalada de privilegios locales debido a un error en la API de snapd. Este repositorio contiene el POC original del exploit, que se pone a...

CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Technical Analysis A technical root cause analysis of the vulnerability, indicators of compromise, and internet exposure can be found on our blog: https://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...

CVE-2000-0979

CVE-2000-0979 CVE-2000-0979.rb is the standalone tool to exploit CVE-2000-0979 against Windows 95 SMB service. msf20000979.rb is the Metasploit module. You can copy this to ⁨metasploit-framework⁩ ▸ ⁨modules⁩ ▸ ⁨auxiliary⁩ ▸ scanner⁩ ▸ ⁨smb⁩ More documentation coming soon! Original advisory NSFOCU...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

Ninja

Quick Update to include Follina Exploitation 01/06/2022 - NinjaC2 will generate the document and serve the HTML payload . More information : https://www.linkedin.com/posts/ahmed-khlief-499321a7i-just-pushed-a-quick-update-to-ninjac2-to-activity-6937661951007170560-Tmps Ninja V2.2 Released...

singularity

Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...

CVE-2019-14974-bypass

This repository does not have a README...

403bypasser

403bypasser 土耳其语 403bypasser 自动化了用于绕过目标页面访问控制限制的技术。此工具将继续开发，欢迎贡献。 英文 403bypasser 自动化了用于绕过目标页面访问控制限制的技术。403bypasser 将持续改进，并欢迎贡献。 安装 1. 将仓库克隆到本地机器。git clone https://github.com/yunemse48/403bypasser.git 2. 通过运行代码 pip install -r requirements.txt 安装所需模块。 3. 就绪！ 用法 参数：...