17981 matches found
abaddon
Abaddon Red team operations involve miscellaneous skills, last several months and are politically sensitive; they require a lot of monitoring, consolidating and caution. Wavestone’s red team operations management software, Abaddon, has been designed to make red team operations faster, more...
SilkETW
SilkETW & SilkService SilkETW e SilkService sono wrapper flessibili in C per ETW, progettati per astrarre le complessità di ETW e fornire alle persone un'interfaccia semplice per effettuare ricerca e introspezione. Sebbene entrambi i progetti abbiano ovvie applicazioni difensive e offensive,...
bst
Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...
pafish
Pafish Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do. The project is free and open source; the code of all the anti-analysis techniques is publicly available. Pafish executables for...
chromebackdoor
VIDEO Install Text V 3.0 Install Video OLD Binder guide Module guide Form grabber plugins Facebook MessengerSpy plugins Jabber Notifier/ Hide Panel Windows infection Rubber Ducky Payload Require: pip install crxmake wine32 Let's go root@kitploit: python chromebackdoor.py user: root pass: toor KAL...
Citrix-Bleed-Buffer-Overread-Demo
Citrix-Bleed-Buffer-Overread-Demo Il presente codice approssima funzionalmente la vulnerabilità Citrix Bleed CVE-2023-4699 dovuta alla gestione impropria del valore di ritorno di snprintf in C...
rats-re
Ricostruzione del codice sorgente di Rats! con LLM locali Questo repository è una ricostruzione in corso d'opera del codice sorgente di RATS.EXE, la versione Windows originale di Rats! 1994 di Sean O'Connor. Compila un eseguibile Win32 con Microsoft Visual C++ 4.1 tramite wibo e può essere testat...
DEBIAN-CVE-2026-55371
OpenEXR is the reference implementation and specification for the EXR high-dynamic-range image file format, widely used in the motion picture industry. Versions 3.4.0 through 3.4.12 contain a NULL pointer dereference in the OpenEXRCore function exrattrsetbytes. The public setter validates the...
darksword-kexploit
DarkSword Kernel Exploit Reimplementado em Objective-C. Supostamente suporta iOS 15.0 - 26.0.1. Offsets hardcoded para 15.x? NOTA: ESTE EXPLOIT NÃO FOI DESCOBERTO / VAZADO POR MIM, A FONTE ORIGINAL DO VAZAMENTO É https://github.com/htimesnine/DarkSword-RCE ESTE EXPLOIT TAMBÉM É COMPLETAMENTE NÃO...
SharpPolarBear
SharpPolarBear Questa è una versione armata per uno degli Exploit pubblicati da SandboxEscaper da qui https://github.com/SandboxEscaper/polarbearrepo. La maggior parte del codice proviene dal repository CollectorService di rasta-mouse https://github.com/rasta-mouse/CollectorService. Ho...
SharpPrivesc
SharpPrivesc Esercitandomi con C e riunendo le superfici di attacco Privesc. Roba ancora da principiante. Controlli Privesc e simili. Ho preferito le classi di parsing della riga di comando di Spectreops, quindi ho deciso di usare le loro invece di altri pacchetti .NET come command line parser ec...
CVE-2023-29357-ExE
CVE-2023-29357-ExE Ricreazione del PoC di SharePoint per CVE-2023-29357 in C di LuemmelSec Utilizzo: root@kitploit: CVE-2023-29357.exe https://yoursharepoint.lol -v...
aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...
aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...
CVE-2026-76055
CVE-2026-76055 is an OS command injection in the package manager component of Black Duck blackduck-c-cpp prior to version 3.0.7. Filesystem paths encountered while traversing a scanned build directory are interpolated into shell command strings without quoting or escaping , allowing shell metacha...
EUVD-2026-64896
Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...
CVE-2026-76055
Improper Neutralization of Special Elements used in an OS Command in the package manager component of Black Duck blackduck-c-cpp before 3.0.7 allows an actor able to create a file within the scanned build directory to execute operating system commands as the account running the scan. Filesystem...
CVE-2026-76054
Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched...
CVE-2026-76054
CVE-2026-76054 affects Black Duck blackduck-c-cpp versions 1.0.17 through 3.0.6 . When the Black Duck API token is supplied via the BLACKDUCK_API_TOKEN or BD_HUB_TOKEN environment variable, it is inherited by subprocesses launched during build capture and signature scanning. An actor able to exec...
EUVD-2026-64894
Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched...