ColdFusionPwn

ColdFusionPwn 针对 Adobe ColdFusion 11/12 的 CVE-2017-3066 利用工具。 描述 该工具允许您生成序列化的 AMF 载荷，以利用对允许类的输入验证缺失漏洞。 详情请参阅我们的博客文章。 安装 获取最新版本的 ysoserial。 从发布页面获取 ColdFusionPwn。 用法 root@kitploit: java -cp ColdFusionPwn-0.0.1-SNAPSHOT-all.jar:ysoserial-master-SNAPSHOT.jar...

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805 Ivanti ICS 9.x、22.x 及 Ivanti Policy Secure 的 Web 组件中存在一个认证绕过漏洞，允许远程攻击者绕过控制检查访问受限资源。 用法: ./CVE-2023-46805.sh https://fqdn:port ./CVE-2023-46805.sh https://my.vpn.ip:443 注意: chmod +x CVE-2023-46805.sh 需要 app curl + jsonpp 如果存在漏洞，你应该能看到一些内容： CVE-2024-21887 Ivanti Connect Secure 9.x,...

RLSA-2026:69607 Important: postgresql security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in...

postgresql security update

An update is available for postgresql. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostgreSQL is an advanced object-relational database management system DBM...

RLSA-2026:69924 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY...

postgresql:12 security update

An update is available for module.pgrepack, module.postgres-decoderbufs, module.pgaudit, pgrepack, postgres-decoderbufs, postgresql, pgaudit, module.postgresql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SharpSpray

SharpSpray SharpSpray is a Windows domain password spraying tool written in .NET C. Introduction SharpSpray is a C port of DomainPasswordSpray with enhanced and extra capabilities. This tool uses LDAP Protocol to communicate with the Domain active directory services. Features Can operate from...

CVE-2021-28079

CVE-2021-28079 - 概念验证 Jamovi file example.omv example.omv: Zip archive data, at least v2.0 to extract 所有 OMV 文件都是归档数据。因此，你可以解压它并修改以利用 XSS 漏洞。 root@kitploit: 🔥\ unzip example.omv Archive: example.omv inflating: META-INF/MANIFEST.MF inflating: index.html inflating: metadata.json inflating: xdata.js...

wodat

wodat Windows Oracle Database Attack Tool Simple port of the popular Oracle Database Attack Tool ODAT https://github.com/quentinhardy/odat to C .Net Framework. Credit to https://github.com/quentinhardy/odat as lots of the functionality are ported from his code. Perform password based attacks e.g...

Powershell-C2

Powershell-C2 该攻击源于我的 Powershell Payload Excel Delivery，但它使用了一种非常巧妙的方法来实现命令与控制（C2）/在目标机器上的持久化。 相关演练可在此处找到：http://enigma0x3.wordpress.com/2014/01/17/command-and-control-using-powershell-and-your-favorite-website/ 感谢 @obscuresec 和 @mattifestation 提供此方法。他们关于此方法的演讲可在此处观看：...

CVE-2026-77285

The OpenBao Agent 's exec rendering mode contains a flaw where it can incorrectly write secrets from env_template to standard output . This vulnerability occurs when command/agent/exec/exec.go re-creates the template runner following repeated rendering failures, specifically when the num_retries ...

CVE-2026-77285 OpenBao Agent Writes Secrets to Stdout

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write secrets from envtemplate to standard output when command/agent/exec/exec.go re-created the template runner after repeated rendering failures, primarily after...

CVE-2026-77285 OpenBao Agent Writes Secrets to Stdout

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write secrets from envtemplate to standard output when command/agent/exec/exec.go re-created the template runner after repeated rendering failures, primarily after...

EUVD-2026-85518

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write secrets from envtemplate to standard output when command/agent/exec/exec.go re-created the template runner after repeated rendering failures, primarily after...

CVE-2026-77285 OpenBao Agent Writes Secrets to Stdout

OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write secrets from envtemplate to standard output when command/agent/exec/exec.go re-created the template runner after repeated rendering failures, primarily after...

protobuf-inspector

protobuf-inspector Simple program that can parse Google Protobuf encoded blobs version 2 or 3 without knowing their accompanying definition. It will print a nice, colored representation of their contents. Example: As you can see, the field names are obviously lost, together with some high-level...

cve_2022_0847_shellcode

cve20220847shellcode Description This repository contains a Python script genshellcode.py, based on pwntools, to generate a shellcode implementing CVE-2022-0847. The shellcode is based on this Poc: antx. I analyzed the code of the PoC and its execution with strace to catch all the system calls...

Storm-Breaker

A Tool With Attractive Capabilities. Features: Obtain Device Information Without Any Permission ! Access Location SMARTPHONES Access Webcam Access Microphone Update Log: Second latest Update on November 4th , 2022 . The overall structure of the tool is programmed from the beginning and is availab...

apk-mitm

apk-mitm A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers...

BlackLotus-analysis-stage2-bootkit-rootkit-stage

BlackLotus-analysis-stage2-bootkit-rootkit-stage BlackLotus 阶段 2 bootkit-rootkit 分析 在我们深入探讨这个神圣的玩意儿之前（相信我，这确实是某种神圣的玩意儿，因为没有人能在没有上帝旨意的情况下做到这件事（至少我是这么认为的）），这里是 bootkit 文件的哈希值 首先，这是一个健康系统的样子 C:\Windows\system32BCDEdit Windows Boot Manager identifier bootmgr device partition=\Device\HarddiskVolume9...