POC-CVE-2025-6554

CVE-2025-6554 CVE-2025-6554 is a vulnerability in Chrome's V8 Engine JavaScript interpreter Hole Check 'inadequate control in unintended variables within expressions with optional chaining. POC CVE-2025-6554-POC.JS explores a flaw in the "Hole" verification mechanism in variables before use,...

rekono

Automate the recon, keep your time for the part that actually needs a hacker Think about how an assessment really starts. You gather public information about the target. You discover its hosts, enumerate their ports and identify the services behind them. Then you run a more specific tool against...

ysoserial

ysoserial A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. Description Originally released as part of AppSecCali 2015 Talk "Marshalling Pickles: how deserializing objects will ruin your day" with gadget chains for Apache Commons Collections 3.x and...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

barf-project

BARF : Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual binary analysis is a difficult...

crypto_identifier

crypto-identifier Crypto tool for pentest and ctf : try to uncipher data using multiple algorithms and block chaining modes. Usefull for a quick check on unknown cipher text and key dictionary Supported Algorithms : AES ARC2 ARC4 Blowfish CAST DES DES3 XOR Supported modes : ECB CBC CFB OFB Usage:...

ssrfuzz

SSRFUZZ SSRFuzz es una herramienta para encontrar vulnerabilidades de Server Side Request Forgery, con capacidades de encadenamiento CRLF ¿Por qué? Quería escribir una herramienta en Golang por concurrencia Quería fuzzear parámetros para vulnerabilidades SSRF, así como fuzzear tanto rutas como...

CVE-2021-25281

CVE-2021-25281 Encadenando CVE-2021-25281 y CVE-2021-25282 para explotar SaltStack...

CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000DETECCIÓN-RCE Resumen General Encadenando la vulnerabilidad CVE-2018-1000861 con CVE-2019-1003000, creé un módulo para probar un RCE sin autenticación en Jenkins CI. Inicialmente, intenté detectar la vulnerabilidad con un nombre de usuario, contraseña y nombre de trabajo; sin...

bxss

Bxss - Blind XSS Scanner 🚀 Description...

CVE-2024-4157-SSRF-RCE-Reverse-Shell

CVE-2024-4157: Getting Reverse Shell on Havoc C2 - Chaining SSRF with RCE Get reverse-shell with local IP and Port, chaining CVE-2024-4157 POC with havocauthrce Usage Basic info root@kitploit: $ python3 exploit.py usage: exploit.py -h -t TARGET -i IP -p PORT -A USERAGENT -H HOSTNAME -u USERNAME -...

princeprocessor

princeprocessor 使用 PRINCE 算法的独立密码候选生成器 名称 PRINCE 是首字母缩写，代表 PRobability INfinite Chained Elements（概率无限链式元素），这些是该算法的基础构件 简要描述 princeprocessor 是一个密码候选生成器，可视为一种高级组合攻击。与使用两个不同字典并输出所有可能的两词组合不同，princeprocessor 仅使用一个输入字典，并构建组合词的“链”。这些链可由输入字典中的 1 到 N 个单词连接而成。例如，如果输出长度为 4 的猜测，它可以利用输入字典中的以下组合生成： 4 字母单词 2 字母...

CVE-2022-36231

CVE-2022-36231 The ruby gem pdfinfo = 0.5.3 is vulnerable to OS Command Injection when executing a method on a PDF::Info object. An attacker using a specially crafted payload may execute OS commands by using command chaining. Vulnerability Analysis When creating a new PDF::Info object the...

iTop-CVEs-exploit

iTop-CVEs-exploit Este repositorio contiene exploits para iTOP CVE-2024-52002, 52000, 31998, 31448 que implican encadenamiento CSRF+XSS para obtener privilegios de administrador en el software. Configuración 1. Descargar la versión vulnerable de iTOP desde docker root@kitploit: sudo docker run -d...

CVE-2024-4879

CVE-2024-4879 Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability. Overview This tool is designed for bulk scanning of the ServiceNow CVE-2024-4879 vulnerability. It is inspired by Assetnote security research, which covers the recent ServiceNow CVE-2024-4879, CVE-2024-5178, and...

Vuln_Exploitation_MegaQuagga_Pentest

Vulnerability Exploitation — MegaQuagga Penetration Test Report Analyst: Samuel Weiss Organization: 0x2A Security Date: April 20, 2026 Client: MegaQuagga Publishing Target: www.megaquagga.local Classification: CONFIDENTIAL Overview This project documents a structured penetration test conducted...

CVE-2026-14856-TastyIgniter

CVE-2026-14856: XSS Almacenado a Toma de Control de Cuenta en TastyIgniter v4.3.0 📌 Resumen Se identificó una vulnerabilidad de Cross-Site Scripting XSS Almacenado en la funcionalidad de carga de archivos del Media Manager de TastyIgniter v4.3.0. Debido a una validación y saneamiento insuficiente...

CVE-2026-9198

CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass Educational PoC This repository provides an educational proof of concept for CVE-2026-9198 affecting IBM Langflow OSS. The PoC poc.py demonstrates how an unauthenticated attacker can chain: 1. GET/POST /api/v1/autologin return...

awesome-jenkins-rce-2019

awesome-jenkins-rce-2019 С мая 2017 года в Jenkins не было RCE без аутентификации, но теперь есть! Он объединяет CVE-2018-1000861, CVE-2019-1003005 и CVE-2019-1003029 для более надёжного и элегантного удалённого выполнения кода без аутентификации! Затронутые версии ANONYMOUSREAD отключён Версия...

MAL-009

MAL-009: Небезопасное сцепление флагов T и TT в Zip для Linux В Zip для Linux флаг «-TT» может использоваться для выполнения произвольных системных команд. Из-за опасной природы этого флага его всегда следует использовать одновременно с флагом «-T». С помощью атаки со сцеплением флагов...