azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

Ledger

Ledger — Operational Change Tracker Aggressor Script Ledger is a Cobalt Strike aggressor script that tracks every operational change made during an engagement. Every service you enable, firewall rule you punch through, account you create, or registry key you touch gets logged with a risk score,...

moonwalk

moonwalk 在Linux漏洞利用/渗透测试期间掩盖你的踪迹，在系统日志和文件系统时间戳上不留任何痕迹。 📖 目录 简介 功能 安装 使用方法 贡献 许可证 ℹ️ 简介 moonwalk 是一个 400 KB 的单二进制可执行文件，能够在渗透测试 Unix 机器时清除你的痕迹。它可以保存渗透前系统日志的状态，并在渗透后恢复该状态，包括文件系统时间戳，从而在 shell 中不留一丝 "幽灵" 的痕迹。 ⚠️ 注意： 本工具开源仅供 红队 操作使用，作者对任何因不当使用该工具所造成的后果概不负责。请仅在已获授权的机器上使用。 功能 小型可执行文件： 通过 curl 快速下载到目标机器。...

cve-2021-34527

CVE-2021-34527 Exploit de LPE para CVE-2021-34527 mediante AddPrinterDriverEx - esta es una versión armada del LPE que puede emplearse para escalar una DLL a SYSTEM y que también limpiará los artefactos. El LPE afecta a Windows Desktop 7,8,8.1,10,11 y Server 2008,2012,2016,2019. Este proyecto de...

PersistAssist

PersistAssist PersistAssist 是一个完全模块化的持久化框架，使用 C 编写。所有持久化技术都包含一个清理方法，用于在持久化代码之外移除持久化。这是一个正在进行中的项目，因此有许多空类。此项目最初的主要目标是构建一个完全模块化的框架，使得添加新功能只需继承一个类并添加代码即可。 作者 - Victor Suarez（@Gr1mmie） 编译 PersistAssist 不会提供预编译的二进制文件，因此您需要手动编译代码。要完成此操作，请打开解决方案文件，在构建菜单中选择“Release”以及所需架构，然后点击开始。 使用 要查看帮助菜单，请使用...

CVE-2026-23918

CVE-2026-23918 Doble liberación en la limpieza de flujos de modhttp2 de Apache httpd que conduce a una ejecución remota de código RCE sin autenticación. Afectado: httpd 2.4.66 con modhttp2 y MPM de múltiples subprocesos event/worker. Corregido en: 2.4.67. Encontrado y reportado por Bartlomiej...

CVE-2026-43499

👻 CVE-2026-43499 — GhostLock 15年历史的GhostLock漏洞使大多数Linux发行版面临Root权限和容器逃逸风险 GhostLock 是 Linux 内核 rtmutex 子系统中的一个高危 Use-After-Free UAF 漏洞。该漏洞源于在 优先级继承 PI 处理过程中不正确的等待者清理操作，可能导致内核内存损坏、本地权限提升或拒绝服务。 📑 目录 概述 技术摘要 根本原因 攻击流程 影响 受影响版本 检测 缓解措施 时间线 参考资料 免责声明 📌 概述 🔍 技术摘要 漏洞存在于 Linux 内核的 实时互斥锁 rtmutex 实现中。...

CVE-2025-21420-PoC

CVE-2025-21420 PoC Windows Disk Cleanup Tool Elevation of Privilege Vulnerability AFAIK, albeit incomplete, this is the first PoC to this CVE. https://nvd.nist.gov/vuln/detail/CVE-2025-21420 https://vulners.com/cve/CVE-2025-21420 We found a way to DLL sideload with cleanmgr.exe root@kitploit: $ c...

Secure-Desktop

Secure-Desktop Secure Desktop es una herramienta para Windows que permite abrir programas en un área segura a la que los keyloggers y las herramientas de administración remota no pueden acceder por ningún medio convencional. Los keyloggers de software funcionan instalando un gancho de Windows que...

CVE-2026-4020

cve-id ⚡ Uso Simple Utiliza este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Project use python...

CVE-2026-13354

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 1.4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

EUVD-2026-83469

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 1.4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-13354

The Asset CleanUp: Page Speed Booster WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) via Comment Content in all versions up to and including 1.4.0.5 . The root cause is insufficient input sanitization and output escaping , allowing unauthenticated attackers to inject arbitrar...

CVE-2026-13354 Asset CleanUp: Page Speed Booster <= 1.4.0.5 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The Asset CleanUp: Page Speed Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 1.4.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

freeBokuLoader

freeBokuLoader Un BOF simple que intenta liberar la región de memoria donde se almacena el User Defined Reflective Loader. Como su nombre lo indica, fue probado contra BokuLoader, pero debería funcionar con la mayoría, si no todos, los UDRL. Uso root@kitploit: beacon freeBokuLoader...

Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

Linux Distros Unpatched Vulnerability : CVE-2026-92504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal: intel: int3400: clean up ODVP on probe failures evaluateodvp creates per-ODVP sysfs files before the thermal zone and later probe resources are...

Linux Distros Unpatched Vulnerability : CVE-2026-93090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscmi: Clean up channels on setup failure scmichannelssetup can fail after the common BASE channel or earlier protocol channels have already been...

Linux Distros Unpatched Vulnerability : CVE-2026-90403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtlwifi: pci: fix error path in rtlpciprobe In the last error path in rtlpciprobe, the cleanup functions are skipped due to a wrong goto label. Moreover,...

Linux Distros Unpatched Vulnerability : CVE-2026-93069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OPP: Fix cleanup ordering Commit 173e02d67494 OPP: Initialize scope-based pointers inline added initialization for all pointers. In some cases, the ordering was...