CVE-2018-8172

CVE-2018-8172 Vulnerabilidad de ejecución remota de código CVE-2018-8172 en Microsoft Visual Studio http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...

tirith

tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? root@kitploit: curl -sSL...

VulnerableSpringDataRest

Aplicación Spring DataRest Vulnerable Esta es una aplicación Spring Data REST diseñada intencionalmente para probar y demostrar la vulnerabilidad CVE-2017-8046 y los desafíos de probar la inyección de comandos y la ejecución remota de código a través de APIs REST Tiene soporte para Swagger UI par...

CVE-2025-30208-ViteVulnScanner

CVE-2025-30208-ViteVulnScanner Yo, this is a dope multi-threaded Python script by keklick1337 to hunt down domains vulnerable to CVE-2025-30208 in Vite. Basically, it checks if you can snag random files via the @fs endpoint with ?raw?? or ?import&raw?? — think /etc/passwd leaks and other juicy...

cve-2023-20198

cve-2023-20198 Description. 1vere$k POC on the CVE-2023-20198 based on the Blog. Also including a check on hexademical response according to the original Cisco article. The script works in the two modes: check mode which is just makes a connection for the particular URL and checks a response code...

ChameleonMini

Chameleon-Mini This is the official repository of ChameleonMini, a freely programmable, portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags and sniff/log RF data. Thanks to over 1700 backers from our Kickstarter project, the current Revision G has...

clusterfuzz

ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...

CVE-2022-0944_RCE_Automation

I am not the researcher who found the exploit just the author of this code. This code is intended for educational purposes only...

Galdralag-firmware

Galdr — Firmware Galdralag Open Invention Network Este proyecto está registrado en laOpen Invention Network OIN. OIN es un pool de patentes defensivo: los miembros otorgan licencias cruzadas de patentes relacionadas con Linux para que los participantes puedan distribuir y usar software de código...

cve-2019-1458_POC

CVE-2019-1458: Going from 'in the wild report' to POC Intro In December Kaspersky published a blogpost about 0day exploit used in the wild. It piqued my interest because although they described how the exploit was working, they didn't provide any POC in their analysis. This is why I decided to tr...

ATAboy

Si no quieres construir el tuyo propio, el hardware se puede comprar aquí: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy está diseñado para entusiastas de la computación retro, expertos en recuperación de datos y archiveros. Lee y escribe los discos duros IDE...

obfDetect

Obfuscation Detection Authored by: mcdulltii Automatically detect obfuscated code and other state machines Description: Scripts to automatically detect obfuscated code and state machines in binaries. Implementation is based on IDA 7.4+ Python3. Check out the following blog posts for more...

sap_igs_xxe

Ataque XXE SAP IGS CVE-2018-2392 y CVE-2018-2393 Este módulo en Metasploit Framework Documentación Módulo Aplicación vulnerable Este módulo explota CVE-2018-2392 y CVE-2018-2393, dos vulnerabilidades XXE dentro de la página XMLCHART de SAP Internet Graphics Servers IGS que ejecutan versiones 7.20...

caldera

Caldera™ Caldera™ is a cyber security platform designed to easily automate adversary emulation, assist manual red-teams, and automate incident response. It is built on the MITRE ATT&CK™ framework and is an active research project at MITRE. The framework consists of two components: 1. The core...

backcookie

backcookie Pequeña puerta trasera usando cookie. ========== root@kitploit: root@kitploit: Ejemplo uno: python backcookie.py -u http://target.com/shell.php -c namecookie root@kitploit: Ejemplo dos: python backcookie.py --url http://target.com/shell.php --cookie namecookie Comando personalizado...

misp-extractor

MISP Extractor This code connects to a given MISP Malware Information Sharing Platform server and parses a given number of events, writing the IP addresses, URLs, and MD5 hashes found in the events to three separate files. Usage To use this script, you will need to provide the URL of your MISP...

CVE-2025-49113-exploit

CVE-2025-49113 - Roundcube Remote Code Execution A proof-of-concept exploit for CVE-2025-49113, a remote code execution vulnerability in Roundcube Webmail. Description This exploit targets a deserialization vulnerability in Roundcube Webmail versions 1.5.0 through 1.6.10. The vulnerability allows...

CVE-2022-0847

CVE-2022-0847 exploit of CVE-2022-0847 which directly remove password of the root account Usage: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit Requrements: gcc Work summery: The traditional classic exploit POC of Max Kellermann used to add a user with root privilage but in this POC exploit, It...

resterm

Resterm An API-as-code workbench for the terminal. Trace and timeline view Resterm is an API client that stores requests in plain .http and .rest files that can live side by side in your repo like the rest of your code. You can use the terminal UI, or run the same files in CI with...

pharos

Pharos Static Binary Analysis Framework The Pharos static binary analysis framework is a project of the Software Engineering Institute at Carnegie Mellon University. The framework is designed to facilitate the automated analysis of binary programs. It uses the ROSE compiler infrastructure develop...