CVE-2023-20198

CVE-2023-20198 Exploit PoC for CVE-2023-20198 Description CVE-2023-20198 is characterized by improper path validation to bypass Nginx filtering to reach the webuiwsmahttp web endpoint without requiring authentication. By bypassing authentication to the endpoint, an attacker can execute arbitrary...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

CVE-2026-32941

Una vulnerabilidad en todo el framework de Sliver C2 permite una Denegación de Servicio remota no autenticada al provocar Asignación de Memoria No Controlada CWE-789 / CWE-400, lo que lleva a un fallo de Agotamiento de Memoria OOM en todo el proceso. Referencias: Tenable Pasos de reproducción: 1...

ghostsplice

GhostSplice: fragmentación de confianza entre canales PoC de ataque Código de prueba de concepto para GhostSplice , un ataque del ASSET Research Group. El artículo completo está en "La IA se negó a robar los secretos. Así que le dimos un formulario.". La idea en palabras sencillas Los asistentes ...

VindicateTool

Vindicate -brightgreen An LLMNR/NBNS/mDNS Spoofing Detection Toolkit for network administrators What is Vindicate? Vindicate is a tool which detects name service spoofing, often used by IT network attackers to steal credentials e.g. Windows Active Directory passwords from users. It's designed to...

CVE-2025-52688

CVE-2025-52688 Productos afectados Alcatel AP13161 - Punto de acceso WiFi empresarial Resumen Hay 2 vulnerabilidades principales que se abordan aquí: Falta de saneamiento de entrada en múltiples parámetros web JSON que permite inyectar caracteres maliciosos como ; para causar un ataque de inyecci...

detux

Detux：多平台Linux沙箱 简介： Detux是一个沙箱，用于对Linux恶意软件进行流量分析，并从中捕获IOC。它使用QEMU虚拟机管理程序来模拟不同CPU架构的Linux（Debian）。 目前支持以下CPU： x86 x86-64 ARM MIPS MIPSEL 立即使用在线版本：http://detux.org 此版本包含什么？ 此版本的Detux包含用于在指定CPU架构下执行Linux二进制文件/脚本的脚本。如果你不知道平台类型也不必担心，脚本内已集成Magic包，可自动识别CPU架构。x86是默认的CPU版本，可在配置文件中调整为其他架构。...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

BLESuite-CLI

BLESuiteCLI README BLESuiteCLI es una herramienta de línea de comandos que ofrece una forma más sencilla de probar dispositivos Bluetooth Low Energy BLE. Esta herramienta utiliza la librería Python BLESuite, que emplea pygattlib y la pila Bluetooth de Bluez, lo que nos permite escanear, leer y...

DbgShell

DbgShell 一个用于Windows调试器引擎的PowerShell前端。 准备好用Tab键快速导航了吗？快速入门请参阅入门指南。 免责声明 1. 本项目并非由Windows调试器团队制作、认可或监控。虽然调试器团队欢迎对其API和前端（windbg， kd等）的反馈，但他们与本项目无关。请不要针对本项目向调试器团队提交错误报告或反馈。 2. 这不是一个受资助的项目：它没有官方分配的资源，仅由志愿者完成。除非您愿意完全自行支持该项目，否则请不要将任何生产依赖置于该项目之上。欢迎提交Issue和Pull Request，但请注意，由于志愿者资源有限，您的提交可能需要一段时间才能得到处理...

CVE-2024-4358_Mass_Exploit

CVE-2024-4358MassExploit Herramientas modificadas de @sinsinology para realizar explotación masiva. Requisitos Python 3.x Instalación root@kitploit: git clone https://github.com/Sk1dr0wz/CVE-2024-4358MassExploit.git cd CVE-2024-4358MassExploit pip intstall -r requirements.txt Cómo Ejecutar...

cirrusgo

CirrusGo A fast tool to scan SAAS,PAAS App written in Go SAAS App Support : salesforce contentful next version Note flag -o output not working install : golang 1.18Ver root@kitploit: go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or go install -v...

Invoke-DNSteal

Invoke-DNSteal is a Simple & Customizable DNS Data Exfiltrator. This tool helps you to exfiltrate data through DNS protocol over UDP and TCP, and lets you control the size of queries using random delay. Also, allows you to avoid detections by using random domains in each of your queries and you c...

rtl8812au

RTL8812AU/21AU 与 RTL8814AU 无线驱动 仅适用于 Linux 和 Android 这些驱动已弃用。 请使用 mac80211 驱动，地址为 https://github.com/lwfinger/rtw88 重要说明！ root@kitploit: 使用 "ip" 和 "iw" 代替 "ifconfig" 和 "iwconfig" 详细说明见下文，请阅读 README！ 注意：TP-Link AC600 及其他设备存在回归问题。目前的临时解决方案是从之前的提交中拉取代码。请参阅 此评论。 IPERF3 基准测试 设备 Alfa Networks AWUS036AC...

boha

@agntn/puzzles 334 public crypto puzzles and bounties in twelve collections, as typed records. You ask for a puzzle, you get its address, its key material and what happened on chain. Why? Every puzzle thread has the same three things: the addresses, the prizes, and who solved what. Every scanner...

dBmonster

With dBmonster, you are able to scan for nearby WiFi devices and track them through the signal strength dBm of their sent packets. Therefore, you can identify the exact location of nearby WiFi devices use a directional WiFi antenna for the best results or find out in which direction your self mad...

SharpFtpC2

SharpFtpC2 PoC SharpFtpC2 is a small, experimental project aimed at exploring the possibility of using FTPS for relaying commands and responses between two remote computers. It employs the FTP protocol as a makeshift tunnel through which the computers, both acting as clients connected to an FTP...

kube-knark

Kube-Knark Project Trace your kubernetes runtime !! Kube-Knark is an open-source tracer that uses pcap & ebpf technology to perform runtime tracing on a deployed Kubernetes cluster. It is tracing the Kubernetes API execution and master node configuration files permission changes. The trace matchi...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...