CVE-2016-5195

CVE-2016-5195 Aqui estão mantidos alguns códigos de exploração da vulnerabilidade Dirty Cow...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

gxdlmsdirector-cve

Gurux GXDLMS Director 多个漏洞 – 远程代码执行 Gurux GXDLMS Director 是一个开源的 Windows 程序，用于通过 DLMS/COSEM 协议与电能表交互。 该软件具有远程更新功能，可用于更新插件 DLL 以及包含 OBIS 代码的文件（与智能电表交互所需的设备特定定义）。 CVEID| 受影响产品及版本| 问题类型 ---|---|--- CVE-2020-8809| Gurux GXDLMS Director 8.5.1905.1301 之前的所有版本| CWE-494: 无完整性检查的代码下载 CVE-2020-8810| Gurux...

url-status-checker

स्थिति जाँचकर्ता URL स्थिति जाँचकर्ता v2.1 Status Checker एक Python स्क्रिप्ट है जो एक या अनेक URLs/डोमेन की स्थिति जाँचता है और उन्हें उनके HTTP स्थिति कोड के अनुसार वर्गीकृत करता है। संस्करण 2.1.0 विशेषताएँ एक या अनेक URLs/डोमेन की स्थिति जाँचें। बेहतर प्रदर्शन के लिए अतुल्यकालिक HTTP अनुरोध।...

Parsero

Parsero क्या है? Parsero एक मुफ्त स्क्रिप्ट है जो Python में लिखी गई है और जो वेब सर्वर की Robots.txt फ़ाइल को पढ़ती है और Disallow प्रविष्टियों को देखती है। Disallow प्रविष्टियाँ खोज इंजनों को बताती हैं कि वेब सर्वर पर होस्ट की गई कौन सी निर्देशिकाएँ या फ़ाइलें इंडेक्स नहीं की जानी चाहिए। उदाहरण...

CVE-2022-38766

CVE-2022-38766 르노 ZOE 키리스 시스템의 취약점에 대한 PoC CVE-2022-38766 소개 Companylogo AUTOCRYPT MalHyuk 개요 이 취약점은 ZOE 전기차가 RF 해킹으로부터 안전한지에 대한 의문을 제기했습니다. 이러한 이유로 올해 출시된 실제 ZOE 차량을 대상으로 공격을 수행했습니다. 또한 이 공격이 RF 해킹의 방어 기술인 롤링 코드를 어떻게 우회하는지에 대한 연구가 수행되었으며, 차량이 고장 날 경우의 처리 방법에 대해 많은 고민이 필요했습니다. 공격 시나리오 대부분의 자동차는 여...

sleepall

sleepall 基于 CVE-2024-28085 漏洞（https://people.rit.edu/sjf5462/6831711781/wall2272024.txt）的木马，该漏洞至今未在任何地方修复。原理：bash 支持转义码，我们可以控制终端中字符串的格式。木马监听进程并寻找 sudo 命令的 pid，找到其父进程并杀死根进程，同时植入伪造的 SUDO 提示行。 用户在终端执行 sudo 命令时，木马会修改其进程，强制让密码输入到终端而非 sudo。之后密码被发送至服务器。 此代码仅供测试和学习使用，作者不对您后续的任何行为负责。 Build: root@kitploit:...

Horn3t

Horn3t 🐝 - Migliore Riconoscimento dei Sottodomini Ricognizione dei tuoi obiettivi a velocità fulminea Migliora la tua produttività concentrandoti su siti dall'aspetto interessante Enumera immediatamente i siti critici Pungi il tuo bersaglio Horn3t è il tuo strumento numero 1 per esplorare...

magic-wormhole

Magic Wormhole Sposta cose da un computer all'altro, in modo sicuro. Questo pacchetto fornisce una libreria e uno strumento da riga di comando chiamato wormhole, che permette di trasferire file e directory di qualsiasi dimensione o brevi testi da un computer all'altro. I due estremi vengono...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

Keycloak - Open Redirect

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially...

CVE-2023-44760_ConcreteCMS-Stored-XSS---TrackingCodes

ConcreteCMS Stored XSS v.9.2.1 Autore: Sergio Descrizione: Vulnerabilità di Cross Site Scripting multipla in ConcreteCMS v.9.2.1 permette a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente creato nei Codici di tracciamento dell'intestazione e del piè di pagina d...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

covert-tube

covert-tube A program to control systems remotely by uploading videos to Youtube using Python to create the videos and the listener, emulating some malware I was reading about. It allows to create videos with frames formed of simple text, QR codes with cleartext or QR codes using AES encryption...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

BIT-KEYCLOAK-2026-4282 Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens,...

ctf_writeups

Condivisione di writeup e codici exploit...

squarephish

SquarePhish SquarePhish is an advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes. See PhishInSuits for more details on using OAuth Device Code flow for phishing attacks. root@kitploit: / | | | | | | | | | | | | | \ \ / | | | |/ | '/ \ /| ...

rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...