exploit-CVE-2022-25765

Exploit für CVE-2022-25765 pdfkit - Command Injection Gefällt dir dieses Repo? Gib uns einen ⭐! Nur für Bildungszwecke und autorisierte Sicherheitsforschung. Exploit-Autor @UNICORDev von @NicPWNs und @Dev-Yeoj Beschreibung der Sicherheitslücke Das Paket pdfkit ab Version 0.0.0 ist anfällig für...

CVE-2019-8781-macOS

CVE-2019-8781 Avviso di Sicurezza CVE-2019-8781 Dettagli del POC Il POC eleva il processo a root ed esegue una shell. Ambiente di sfruttamento root@kitploit: - macOS 10.14.6 18G95 Dovrebbe funzionare su tutte le versioni di macOS rilasciate prima di 10.15.0 - SMEP: On - SMAP: Off - Kernel ASLR...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

melee

MELEE: A Tool to Detect Ransomware Infections in MySQL Instances Attackers are abusing MySQL instances for conducting nefarious operations on the Internet. The cybercriminals are targeting exposed MySQL instances and triggering infections at scale to exfiltrate data, destruct data, and extort mon...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

doublehop

Doublehop Dieses Tool soll dabei helfen, PowerShell Remoting / WinRM zu verwenden, um PowerShell-Befehle auf entfernten Hosts mithilfe der WinRM-Double-Hop-Technik auszuführen. Das Tool setzt voraus, dass Sie Zugriff auf das interne Netzwerk und die CLI haben. Nutzung root@kitploit: doublehop...

CVE-2014-6271

Sfruttamento di Shellshock CVE-2014-6271 Shellshock è di fatto una vulnerabilità di Remote Command Execution in BASH. Questo script sfrutta la vulnerabilità nell'ambiente web su Apache o simili con modcgi abilitato. La vulnerabilità risiede nella manipolazione delle variabili d'ambiente, che sono...

inject-assembly

inject-assembly - Execute .NET in an Existing Process This tool is an alternative to traditional fork and run execution for Cobalt Strike. The loader can be injected into any process, including the current Beacon. Long-running assemblies will continue to run and send output back to the Beacon,...

trojanizer

TROJANIZER root@kitploit: Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION root@kitploit: The Trojanizer tool uses WinRAR SFX to...

rakkess

rakkess Review Access - kubectl plugin to show an access matrix for server resources Intro Have you ever wondered what access rights you have on a provided kubernetes cluster? For single resources you can use kubectl auth can-i list deployments, but maybe you are looking for a complete overview?...

nysm

nysm A stealth post-exploitation container. Table of Content 1. Introduction 2. Installation 2.1 Requirements 2.2 Linux headers 2.3 Build 3. Usage 3.1 Examples 4. How it works 4.1 In general 4.2 Hide eBPF objects 4.3 Hide Auditd logs 4.4 Hide PIDs 4.5 Hide sockets 5. Limitations Introduction...

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

wshlient

Wshlient Web Shell Client Description & Demo Wshlient is a web shell client designed to be pretty simple yet versatile. One just need to create a text file containing an HTTP request and inform where Wshlient inject the commands, then you can enjoy a shell...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

watchguard-sso-client

Proof of Concept für Watchguard SSO Agent Schwachstellen CVE-2024-6592, CVE-2024-6593, CVE-2024-6594 Details sind in unseren Advisories beschrieben, die unter folgenden Links verfügbar sind: CVE-2024-6592 CVE-2024-6593 CVE-2024-6594 Das Skript benötigt die Python-Bibliothek click, um ausgeführt z...

pytmipe

PYTMIPE & TMIPE PYTMIPE PYthon library for Token Manipulation and Impersonation for Privilege Escalation is a Python 3 library for manipulating Windows tokens and managing impersonations in order to gain more privileges on Windows. TMIPE is the python 3 client which uses the pytmipe library...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

cypheroth

Cypheroth Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets. Description This is a bash script that automates running cypher queries against Bloodhound data stored in a Neo4j database. I found myself re-running the same...

Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...