2216196 matches found
CVE-2019-9791
Exploit chain for CVE-2019-9791 & CVE-2019-11708 against Firefox 65.0 Works against Firefox 65.0 on windows 64bit. CVE-2019-11708 part is taken from exploit by 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 The exploit uses CVE-2019-9791 to obtain read/write primitive in content process the...
CVE-2019-0708
RDP Proof of Concept This is the proof of concept source code for CVE-2019-0708...
goBox
goBox GO sandbox to run untrusted code. goBox uses Ptrace to hook into READ syscalls, giving you the option to accept or deny syscalls before they are executed. Usage root@kitploit: Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern for automatically blocking fil...
CVE-2025-2294
CVE-2025-2294 Introduction CVE-2025-2294 is a critical Local File Inclusion LFI vulnerability in the Kubio AI Page Builder plugin for WordPress. The vulnerability allows an unauthenticated remote attacker to pass a specially crafted parameter, causing the plugin to include an arbitrary file on th...
thc-ipv6
THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 root@kitploit: Licensed under AGPLv3 see LICENSE file INTRODUCTION This code was inspired when I got into touch with IPv6, learned more and more about it - and then found no tools to play read:...
thc-ipv6
THC-IPV6-ATTACK-TOOLKIT c 2005-2022 [email protected] https://github.com/vanhauser-thc/thc-ipv6 root@kitploit: Licenciado bajo AGPLv3 ver archivo LICENSE INTRODUCCIĆN Este cĆ³digo fue inspirado cuando entrĆ© en contacto con IPv6, aprendĆ mĆ”s y mĆ”s sobre Ć©l, y luego no encontrĆ© herramientas par...
phoneinfoga
Framework de recopilaciĆ³n de informaciĆ³n para nĆŗmeros de telĆ©fono DocumentaciĆ³n ā¢ DocumentaciĆ³n de la API ā¢ ArtĆculo de blog relacionado Acerca de PhoneInfoga es una de las herramientas mĆ”s avanzadas para escanear nĆŗmeros de telĆ©fono internacionales. Permite primero recopilar informaciĆ³n bĆ”sica...
CVE-2021-1675-PrintNightmare
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...
CVE-2024-6769
Blogpost: CVE-2024-6769 Poisoning the activation cache to elevate from medium to high integrity This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server. The first sta...
Trawler
Dredging Windows for Persistence What is it? Trawler is a PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts, primarily focused on persistence mechanisms including Scheduled Tasks, Services, Registry Modifications, Startup Items,...
whosthere
Whosthere Local Area Network discovery tool with an interactive Terminal User Interface TUI written in Go. Discover, explore, and understand your LAN in an intuitive way. Whosthere performs unprivileged, concurrent scans using mDNS and SSDP scanners. Additionally, it sweeps the local subnet by...
CVE-2025-57489
CVE-2025-57489 Description From the developer's blog: When the lock in SuperDuper is unlocked to allow execution to occur without having to enter an administrator password, a 3rd party program could make use of our authorization to run something other than a backup with administrator privileges...
CVE-2020-0601
CVE-2020-0601 : CurveBall CVE exploitation This ruby script can be used to spoof a legit certificate authority and generat a certificate that will be considered valid for Windows computer affected by the CurveBall vulnerability. You need to get a certificate comming from the certificate authority...
ctl_ctloutput-leak
ctlctloutput-leak The ctlctloutput function in macOS High Sierra 10.13 ignores the return value of a call to sooptcopyin, which opens up a race window to leak uninitialized kernel heap data to user space. ctlctloutput-leak is a proof-of-concept exploit that attempts to trigger this information...
cve-2025-55182-test-lab-windows
CVE-2025-55182 React2Shell Test ā ļø Warning : Contains a working remote code execution RCE vulnerability. š Table of Contents Overview Vulnerability Information Quick Start Actual Attack Demonstration Test Environment WAF Defense Rules File Structure References Legal Notice Overview Container test...
confluence-hack
Confluence Hack CVE-2023-22515 exploit.py Exploit to create a new admin user Compromised audit log: As a reverence served: https://packetstormsecurity.com/files/175225/Atlassian-Confluence-Unauthenticated-Remote-Code-Execution.html and https://github.com/Chocapikk/CVE-2023-22515 pluginshellplug.j...
CVE-2024-1642470
Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...
wordpress-cve-2024-10924-exploit
WordPress CVE-2024-10924 Exploit š Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication 2FA. Attackers can exploit this flaw to log in as any user with a valid...
CVE-2022-43704
CVE-2022-43704 - Channel Accessible by Non-Endpoint/Authentication Bypass by Capture-replay Sinilink XY-WFTX Wifi Remote Thermostat Module Temperature Controller Title Product Documentation Application User Manual Hardware Datasheets ESP8285 Buck Converter Firmware Product Description...
CVE-2024-10793
CVE-2024-10793 PoC Set this lines to your hosts file: root@kitploit: 127.0.0.1 goodcms.lab 127.0.0.1 attacker.com Launch Wordpress using docker: root@kitploit: $ sudo systemctl start docker $ sudo docker-compose up -d Open http://goodcms.lab:2121 and do installation wordpress steps. Install...