Azure-App-Tools

Azure-App-Tools Collection of tools to use with Azure Applications. https://azure.microsoft.com/en-us/get-started/apps/ Prerequisites Azure Powershell Module https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.8.0 Examples: Dynamic Device Codes Original PoC by @MrUn1k0d3r...

CVE-2026-89530

A flaw was found in the Linux kernel's svcrdma component, which handles network communication using Remote Direct Memory Access RDMA. A remote attacker can send a specially crafted network reply that is larger than expected. This can cause the system to write data beyond the intended memory area,...

CVE-2026-78745

CVE-2026-78745 — Remote Code Execution via Android Debug Bridge ADB CVE-2026-78745 affects HiDPT / Weyon HiDPTAndroid devices using the Hi3751V350 and Hi3751V352EDMO platforms. The vulnerability allows a remote attacker to execute arbitrary code through the Android Debug Bridge adbd daemon...

ropfuscator

Disclaimer ROPfuscator is a research proof of concept and is not intended for production use. The authors do not take any responsibility or liability for the use of the software. Please exercise caution and use at your own risk. ROPfuscator ROPfuscator is a fine-grained code obfuscation framework...

PoC-Malware-TTPs

PoC-Malware-TTPs Proof of Concept Code Repository for Malware TTPs...

CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE...

cve-2026-19900-PoC

CVE-2026-19900 LB-LINK X-PRO Authentication Bypass and RCE via null user CVE-2026-19900 Hardcored Credential and Authentication Bypass RCE via null user. Bypass via Header: Cookie:user=null Usage Build and run the script with a target host: root@kitploit: go build cve-2026-19900-PoC.go...

gha-lab-25b7988758

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of live-codes/livecodes at commit...

Lastenzug

LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE. root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: Accept-Encoding: gzip, deflate Accept: / Connection: close, X-F5-Auth-Token, X-Forwarded-For, Local-Ip-From-Httpd, X-F5-New-Authtok-Reqd, X-Forwarded-Server, X-Forwarded-Host...

ReverseKit

ReverseKit - Dynamic Reverse Engineering Toolkit ReverseKit is a comprehensive toolkit designed to aid reverse engineers in the process of dynamic RE. With a wide range of features and functionalities, it provides an easy-to-use interface and helps you intercept, analyze, and manipulate code and...

CVE-2026-80979

A flaw was found in the Linux kernel's Shared Memory Communications SMC component. During connection termination, the SMC component may fail to properly unregister a connection before draining its receive tasklet. This can lead to a use-after-free vulnerability, where a freed memory buffer is...

PowerShell-Obfuscation-Bible

PowerShell Obfuscation Bible A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to bypass signature-based detection, compiled for educational purposes. The contents of this repository are the result of personal research, including reading...

msmq_re

msmqre This is one of the vulnerabilities fixed in MSMQ. https://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/ root@kitploit: 0:064 r rax=0000000000001000 rbx=000001b4ee9b5cf8 rcx=0000000000000006 rdx=000001b4240b5c24 rsi=0000000000000002...

CVE-2026-89769

A flaw was found in the Linux kernel's NXP PIT Programmable Interrupt Timer clocksource driver. When the CPU hotplug setup fails after an interrupt request IRQ has been successfully registered, the error handling does not properly free the IRQ. This oversight results in a leaked IRQ line and a...

CVE-2026-89763

A flaw was found in the Linux kernel's Trusted Platform Module TPM trusted keys subsystem. An incorrect teardown ordering during the exit process of trusted TPM keys can lead to a race condition. This allows a local attacker to potentially dereference a freed memory region, resulting in a...

osed-scripts

osed-scripts bespoke tooling for offensive security's Windows Usermode Exploit Dev course OSED Table of Contents Standalone Scripts egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg Scripts find-ppr.py find-bad-chars.py search.py Standalone Scripts Installation:...

PPLFault

PPLFault By Gabriel Landau at Elastic Security. From PPLdump Is Dead. Long Live PPLdump! presented at Black Hat Asia 2023. PPLFault 2024-02 UPDATE: Microsoft patched PPLFault on 2024-02-13. Seethis thread for related discussion. Exploits a TOCTOU in Windows Code Integrity to achieve arbitrary cod...

Recon2023

Recon 2023 slides and code...

MagicSigner

MagicSigner Patcher dll for signtool that allows signing with expired certificates Usage Just place XmlLite.dll next to signtool.exe Demo Before MagicSigner After MagicSigner Alternative solutions You can also just set the clock on your computer back. However that needs admin privileges, and has...