area51

Every callback, captured. The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a dashboard you control, and it gets whatever response you choose in return. Getting started · Playbooks · · ·...

effective-waffle

effective-waffle yet another sleep encryption thing. also used the default github repo name for this one. TpAllocWork + TpPostWork + TpWaitForWork + TpReleaseWork to create + execute + clean the callback. The callback is some scuffed assembly that queues up a ton of rop gadgets that will pop...

CVE-2026-64638-XSS-to-Shell-PoC

CVE-2026-64638 — XSS2Shell Proof of Concept A proof-of-concept PoC tool for validating CVE-2026-64638 , a pre-authentication reflected Cross-Site Scripting XSS vulnerability affecting WordPress installations versions 6.4 – 7.0.2. Overview This tool automates the process of fingerprinting,...

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report

Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report This repository contains a professional bug bounty report demonstrating the successful exploitation of a Blind SSRF vulnerability that reached an internal CGI endpoint vulnerable to Shellshock CVE-2014-6271. Remote...

EchoDrv

EchoDrv Tool permitting to abuse Kernel read/write vulnerability in ECHOAC anti-cheat driver echodriver.sys Usage Example Sponsors I work at POST Luxembourg and thank them for allocating some time for me to develop and maintain this project! Visit POST website at...

LdrLibraryEx

LdrLibraryEx A small x64 library to load dll's into memory. Features low dependencies & function use only ntdll.dll used position independent code lightweight and minimal easy to use load modules from memory load modules from disk api sets support bypass image load callbacks using private memory...

CVE-2024-9593-Exploit

CVE-2024-9593-Exploit The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 for Time Clock and 1.1.4 for Time Clock Pro via the 'etimeclockwploadfunctioncallback' function. This allows unauthenticated attacker...

learning-management-system

learning-management-system Masteriyo - LMS for WordPress = 1.6.7 - Sensitive Information Exposure Plugin Info root@kitploit: Software Type Plugin Software Slug learning-management-system view on wordpress.org Patched? Yes Remediation Update to version 1.6.8, or a newer patched version Affected...

kemon

Kemon Un framework de código abierto basado en callbacks Pre y Post para la monitorización del kernel de macOS. Noticias de última hora - 08/28/2019 Notas de la versión de macOS Catalina 10.15 Beta 7 https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes...

EulerOS Virtualization 2.11.1 : pyOpenSSL (EulerOS-SA-2026-3455)

According to the versions of the pyOpenSSL packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user...

Linux Distros Unpatched Vulnerability : CVE-2026-93108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ipoib: Drain RCU callbacks during module teardown IPoIB reclamation completions can be signaled from inside an RCU callback. Teardown can wake before the...

Linux Distros Unpatched Vulnerability : CVE-2026-90140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cuse: wait for pending RCU callbacks on module exit Since commit 053fc4f755ad fuse: fix UAF in rcu pathwalks, fuseconnput frees the fuseconn through callrcu...

Linux Distros Unpatched Vulnerability : CVE-2026-93109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Drain RCU callbacks during module teardown devxfreesubscription can remain queued after the last DevX event file drops its module reference or an...

Linux Distros Unpatched Vulnerability : CVE-2026-92486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix CFI mismatch in task work callback BPF subprograms use the bpfcallbackt ABI, but task work invokes the callback through a three-argument function...

Linux Distros Unpatched Vulnerability : CVE-2026-93110

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Wait for RCU callbacks before unloading ibcore putgidndev is queued with callrcu and implemented in ibcore. Stopping the workqueues does not drain...

EulerOS Virtualization 2.12.0 : curl (EulerOS-SA-2026-3634)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw in curl's cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check...

Linux Distros Unpatched Vulnerability : CVE-2026-90151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4: remove callback IDR entry on client allocation failure nfs4allocclient allocates an NFSv4.0 callback identifier before it finishes setting up the client...

CVE-2025-7766

CVE-2025-7766 PoC Exploit PoC for exploiting XML External Entity vulnerability in CVE-2025-7766. Demonstrates file read /etc/passwd and out-of-band HTTP callbacks. Author : Byte Reaper CVE : CVE-2025-7766 Vulnerability : Remote Code Execution via XML External Entity XXE PoC for exploiting XXE in...

nse-log4shell

nse-log4shell Nmap NSE scripts to check against log4shell or LogJam vulnerabilities CVE-2021-44228. NSE scripts check most popular exposed services on the Internet. It is basic script where you can customize payload. Examples Note that NSE scripts will only issue the requests to the services. Nma...

SneeitScanner-CVE-2025-6389

SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 ⚡ SneeitScanner ⚡ Proof of Concept PoC and Automated Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 This robust Python script is a functional PoC and scanner tool...