meltdown-exploit

MELTDOWN 漏洞利用概念验证 推测执行以不安全的方式执行代码，会在微架构（如缓存）中留下数据痕迹。 Lipp 等人于 2018 年 1 月 9 日在 https://github.com/IAIK/meltdown 发布了他们的代码。详情请参考他们的论文：https://meltdownattack.com/meltdown.pdf。 目前只能转储 linuxprocbanner，因为所需内存必须在缓存中，而每次读取 /proc/version 时 linuxprocbanner 都会被缓存。可能与 prefetch 配合使用。与 schedyield 配合使用。 使用 make...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 es una vulnerabilidad en el plugin LiteSpeed Cache, un plugin popular de WordPress. Esta vulnerabilidad afecta la gestión de sesiones en LiteSpeed Cache, permitiendo a los atacantes obtener acceso no autorizado a datos sensibles. Vista previa ¿Cómo...

bmc-tools

BMC-Tools RDP位图缓存解析器。 输入 bmc-tools 处理Windows用户配置文件中的 bcache.bmc 和 cache????.bin 文件。 用法 root@kitploit: ./bmc-tools.py -h -s SRC -d DEST -c COUNT -v -o -b -w WIDTH 各参数含义如下： root@kitploit: -h, --help 显示此帮助信息并退出 -s SRC, --src SRC 指定要处理的BMCache文件或目录。 -d DEST, --dest DEST 指定存储提取位图的目录。 -c COUNT, --count...

CVE-2026-31431

🔥 CVE-2026-31431 - "Copy Fail !!!" A surprisingly simple yet deadly local privilege escalation in the Linux kernel 📌 Overview CVE-2026-31431 nicknamed "Copy Fail" is a local privilege escalation vulnerability in the Linux kernel's cryptographic subsystem, specifically affecting the algifaead...

CVE-2023-6063-PoC

CVE-2023-6063 PoC Reference Unauthenticated SQL Injection Vulnerability Addressed in WP Fastest Cache 1.2.2 | WPScan Plugin setting Enable "WP Fastest Cache". PoC The "wordpressloggedin" cookie parameter is vulnerable. root@kitploit: $ python sqlmap.py --dbms=mysql -u...

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

CVE-2018-17182

CVE-2018-17182 Linux Kernel VMA-UAF Privilege Escalation Vulnerability CVE-2018-17182 About Google Project Zero security researchers released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel present since kernel versions 3.16 through 4.18.8...

wp2shell-poc

How does this work at all How this PoC differs from the public wp2shell exploits all pocs weaponize the same two bugs - the REST batch route confusion CVE-2026-63030 and the authornotin SQL injection CVE-2026-60137 - with the same double-nested batch shape. What differs between them is the RCE pa...

Airachnid-Burp-Extension

Web Cache Deception Burp 扩展 用于测试应用程序是否易受 Web 缓存欺骗攻击的 Burp 扩展。 加载扩展后，可在 Target - Sitemap 选项卡中访问，然后右键单击要测试的资源。将显示一个上下文相关菜单项“Web Cache Deception Test”，可用于进行测试。如果资源存在漏洞，则会创建一条详细说明漏洞的 Issue。 该上下文相关菜单项也适用于 Proxy - Http History 选项卡中的请求。 安装 下载 WebCacheDeceptionScanner.jar 文件。 在 Burp Suite 中打开 Extender...

EUVD-2026-72858

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sqlDAL caches empty result sets that writeSql never invalidates. Attackers with a valid password can bypass email two-factor authentication on new devices because the confirmation...

CVE-2026-86722

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is affected by an authentication bypass rooted in its SQL data layer: sqlDAL caches empty result sets that writeSql never invalidates. As a result, when a user attempts two-factor authentication on a new device, the confirmation code ...

CVE-2026-46300

CVE-KERNEL · Linux Kernel LPE Chain Multi-CVE Local Privilege Escalation chain for Linux kernel vulnerabilities uid=1000 → root via xfrm-ESP, RxRPC, or Fragnesia page-cache write Overview CVE-KERNEL is a Python-based Local Privilege Escalation LPE tool that chains multiple Linux kernel CVEs to...

CVE-2024-1065

CVE-2024-1065 — PoC de explotación de page cache Exploit de prueba de concepto para CVE-2024-1065, un use-after-free de página física en el driver del kernel de la GPU ARM Mali. El exploit demuestra la explotación de page cache : mediante una condición de carrera, una página MIGRATEMOVABLE libera...

CVE-2025-53694-to-CVE-2025-53691

Exploits de la Cadena CVE de Sitecore Este repositorio contiene exploits de prueba de concepto para una cadena de vulnerabilidades críticas en Sitecore Experience Platform XP versiones hasta 10.4.1. Vulnerabilidades CVE-2025-53694: Divulgación de Información CVE-2025-53693: Envenenamiento de Cach...

tanstack-shield

🛡️ tanstack-shield Escáner de ataques a la cadena de suministro con un solo comando para CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx Detecta el gusano "Mini Shai-Hulud" que comprometió 42 paquetes npm @tanstack/ 84 versiones maliciosas el 11 de mayo de 2026. root@kitploit: One line — scan your project...

CVE-2026-31431-CopyFail-Linux-PrivEsc

CVE-2026-31431 CopyFail Escalada Local de Privilegios en Linux Una demostración y explicación de CVE-2026-31431, la vulnerabilidad de escalada local de privilegios por Copy Fail en el kernel de Linux. La vulnerabilidad permite que, en archivos abiertos con permiso de lectura, se sobrescriban dato...

page_inject

pageinject - AFALG aead cross-container escape AFALG aead vulnerability cross-container exploit -- pivot from one compromised container into every sibling container that shares the samelibc.so.6 image layer. This is an escape primitive : it runs from inside an unprivileged container that the...

tanstack-compromise-checker

tanstack-compromise-checker Detecta indicadores del ataque a la cadena de suministro npm de TanStack en una máquina de desarrollo, un repositorio o un runner de CI. Script Bash, imagen Docker y acción de GitHub: el mismo motor, tres puntos de entrada. CVE-2026-45321 /GHSA-g7cv-rxg3-hmpx El 11 de...

CVE-2025-53693

CVE-2025-53693: HTML Cache Poisoning The XAML handler, located at /-/xaml/, exposes several controls that can be accessed without authentication. The AjaxScriptManager within these controls allows for the execution of methods via reflection. The AddToCache method can be abused to inject arbitrary...

Hardware-Vulnerability-with-Proof-of-Concept-

🛡️ Spectre Variant 2 CVE-2017-5715 — Investigación de Vulnerabilidad de Hardware Un documento de investigación en profundidad y una Prueba de Concepto PoC práctica que explora ataques de ejecución especulativa en CPUs modernas. 📖 Resumen Este proyecto es una exploración de investigación y...