CVE-2009-2692

CVE-2009-2692 Linux Null pointer dereference This is just the compiled binary of the code available in https://www.exploit-db.com/exploits/9545/ Compiled for education purposes It was compiled under CentOS 4.8...

AllTools

AllTools All reasonably stable tools AccessMask - decode access mask for common object types BgInfo - WPF version of the Sysinternals BgInfo tool BITSMgr - BITS jobs manager application CLR Explorer - View .NET process information / dump file CpuStres - thread/CPU stress testing app CpuStress...

OpenSSL-1_0_1g_CVE-2016-0702

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

MSSqlPwner

MSSqlPwner MSSqlPwner es una herramienta de pentesting avanzada y versátil diseñada para interactuar y comprometer servidores MSSQL de manera fluida. Esta herramienta está basada en impacket, lo que permite a los atacantes autenticarse en bases de datos mediante contraseñas en texto claro, hashes...

phishcollector

PhishCollector PhishCollector es un marco de investigación para recolectar, analizar y rastrear sitios de phishing. Está diseñado intencionalmente como un punto de partida — las reglas de detección, las firmas de tecnología, las listas de palabras y los complementos son todas estructuras de datos...

wmiexec-Pro

wmiexec-Pro New generation of wmiexec.py. Table of Contents 1. Info 2. Special thanks 3. Features 4. Getting Started Installation 5. Usage 6. Screenshots 7. How it works? 8. Disclaimer 9. References Info The new generation of wmiexec.py, more new features, whole the operations only work with port...

urless

About - v2.7 This is a tool used to de-clutter a list of URLs. As a starting point, I took the amazing tool uro by Somdev Sangwan. But I wanted to change a few things, make some improvements like deal with GUIDs and make it more customizable. Installation urless supports Python 3. Install urless ...

modelscan

ModelScan: Protection Against Model Serialization Attacks Machine Learning ML models are shared publicly over the internet, within teams and across teams. The rise of Foundation Models have resulted in public ML models being increasingly consumed for further training/fine tuning. ML Models are...

HoneyProxy

This project has moved. HoneyProxy is now part of mitmproxy: http://docs.mitmproxy.org/en/stable/mitmweb.html HoneyProxy HoneyProxy is a lightweight man-in-the-middle proxy that helps you analyze HTTPS traffic flows. It is tailored to the needs of security researchers and allows both real-time an...

Argus

A Python-based toolkit for Information Gathering & Reconnaissance About The Project Argus is an all-in-one, Python-powered toolkit designed to streamline the process of information gathering and reconnaissance. It brings together a clean, intuitive interface and a wide range of reliable modules,...

CVE-2018-20718

CVE-2018-20718 Esta es una prueba de concepto POC para CVE-2018-20718. Es una vulnerabilidad de inyección de objetos PHP. La vulnerabilidad afecta a todas las versiones de Pydio anteriores a la 8.2.1 y conduce a la ejecución remota de código sin autenticación. Fue descubierta originalmente por...

EUVD-2026-77011

A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...

CVE-2026-90520

jaychouchannel Tourism-Management-System is affected by an improper authorization flaw in the AuthorizationInterceptor.java file of the Authorization Interceptor component. The vulnerability allows a remote attacker with low privileges and no user interaction to exploit it, resulting in low impac...

CVE-2026-90520 jaychouchannel Tourism-Management-System Authorization Interceptor AuthorizationInterceptor.java improper authorization

A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the file AuthorizationInterceptor.java of the component Authorization Interceptor. The manipulation leads to improper authorization...

DNCI

DNCI - Dot Net Code Injector DNCI allows the injection of .Net code .exe or .dll remotely in unmanaged processes in windows. 1. Project Structure The project is structured in: DNCI.Injector.Library - Injection library. Contains all injection components and logic; DNCI.Injector.Runner - Command...

Loki

I wrote a new Open Source YARA scanner called LOKI RS Rust. LOKI Python is now officially deprecated. Important Note This project is now in inactive maintenance mode. This means that while I merge pull requests for bug fixes and straightforward issues, I currently lack the time to add new feature...

CVE-2022-32060

Snipe-IT Versión v6.0.2 Explicación de la vulnerabilidad: Una vulnerabilidad de carga arbitraria de archivos en el componente de Actualización de Configuración de Marca de Snipe-IT v6.0.2 permite a los atacantes ejecutar código arbitrario a través de un archivo manipulado. Vectores de ataque:...

CredsHunter

CredsHunter CVE-2026-3609 · Writeup LSASS credential dump proof-of-concept for a PPL-bypassing process-handle leak in Wellbia's XIGNCODE3 anti-cheat driver, xhunter1.sys. The driver exposes an IRPMJWRITE command interface that calls ObOpenObjectByPointer with AccessMode = KernelMode and without...