RemotePSpy

RemotePSpy RemotePSpy provides live monitoring of remote PowerShell sessions, which is particularly useful for older pre-5.0 versions of PowerShell which do not have comprehensive logging facilities built in. It uses Event Tracing for Windows ETW to obtain message data from the WinRM protocol tha...

CTF-Magic

CTF-Magic A GUI-based CTF exploitation framework for Debian...

python-exe-unpacker

Author: In Ming Loh [email protected] - @tantaryu Company: Countercept @countercept Website: https://www.countercept.com Introduction A script that helps researcher to unpack and decompile executable written in python. However, right now this only supports executable created with py2exe and...

Penetration-Testing-Walkthrough-Hacksudo-Thor

HackSudo Thor Full Penetration Testing Walkthrough Target: HackSudo Thor from VulnHub Objective: Gain root access and read /root/proof.txt Environment: Isolated VirtualBox lab segmented by a pfSense firewall Table of Contents Overview Network Topology Attack Chain Summary Phase 1: Passive...

DFIR-LABS

About DFIR LABS is a compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting. This is aimed at Professionals, Security Researchers, Students, CTF Players as well as DF...

d8-copy-fail-mitigation

CVE-2026-31431 Mitigation for Deckhouse Kubernetes Platform Language: English | Русский About the vulnerability CVE-2026-31431 is a vulnerability in the Linux kernel's algifaead module, which exposes the kernel crypto API to userspace through the AFALG socket family. A flaw in the AEAD...

checkov v3.3.16

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

CVE-2026-9490

CVE ID: CVE-2026-9490 Chercheur : Vo Duc Thang ugvxb Remerciements : https://community.acer.com/en/kb/articles/19668 1. Résumé exécutif Une vulnérabilité de sécurité critique a été identifiée dans le service Acer Care Center ACCSvc.exe. La vulnérabilité permet à tout utilisateur local authentifié...

pwneye

pwneye هي أداة أمنية هجومية مركّزة وقابلة للنقل للعمل مع كاميرات IP التي تعرض خدمات ONVIF و RTSP ، بهدف منح باحثي الأمن والقراصنة طريقة سهلة للتعامل مع الاكتشاف، واختبار المصادقة، وجمع البيانات الوصفية، والتحقق من البث، والتسجيل، والإجراءات اللاحقة من سير عمل CLI واحد. بعض القدرات المدعومة حالياً...

-Educational-PoC-CVE-2026-23520

CVE-2026-23520: Model Context Protocol MCP Connect RCE - Educational PoC - Arcane DISCLAIMER: This repository and the scripts contained within are strictly for educational and academic purposes only. The information provided here is intended to help security researchers, system administrators, an...

CVE-2019-20933

LAB 5-CVE-2019-20933 I. SYSTEM ANALYSIS Identifying the Attack Surface Starting with what is running in the environment. I list all active containers: root@kitploit: docker ps The victim exposes a single port:8086. Currently, I do not have detailed information about the target. From the docker ps...

CVE-2026-47858

CVE-2026-47858 — Spring Tools live information 模式未授权 JMX 远程代码执行（PoC） English README | 漏洞公告: Spring Security Advisory | CVE Record 漏洞 ：Spring Tools for Eclipse ≤ 5.2.0 / VSCode·Cursor·Theia ≤ 2.2.0 以 live information 模式 （默认开启）启动 Spring Boot 应用时，会向应用注入无认证、无 TLS、绑定全部网卡 的 JMX 远程参数。相邻网络的攻击者可以无凭据连接该 JM...

SQLI

SQL Injection Exploitation Toolkit Complete Bug Bounty • Pe...

acropalypse-reconstructor

Acropalypse CLI Multi-Tool A lightweight, headless Python script designed to detect and reconstruct cropped images that are vulnerable to the Acropalypse vulnerability CVE-2023-21036 for Google Pixel Markup and CVE-2023-28303 for Windows Snipping Tool. This tool allows you to recover trailing pix...

Joomla-CMS-Full-Lifecycle-Pentest

Full-Lifecycle CMS Penetration Testing Joomla 4.2.5 📌 Project Overview This project demonstrates a full-lifecycle penetration test conducted on an open-source CMS Joomla 4.2.5. The entire test follows standard methodologies OWASP/PTES from lab deployment up to exploitation, post-exploitation, and...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Struts2 Vulnerability Detection and Exploitation Tool s2tool...

POC-CVE-2026-0768

Description Proof of concept exploit code for CVE-2026-0768 Usage python3 poc.py -u -c...

POC-CVE-2026-0769

Description Usage python3 poc.py -u -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The bash output is stored in out within the build scope and isn't...

Umbraco-RCE

Umbraco RCE exploit / PoC Umbraco CMS 7.12.4 - Authenticated Remote Code Execution EDB-49488 PacketStorm WLB-2020080012 Usage root@kitploit: $ python exploit.py -h usage: exploit.py -h -u USER -p PASS -i URL -c CMD -a ARGS Umbraco authenticated RCE optional arguments: -h, --help show this help...

Security Bulletin: IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Operational Decision Manager Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON...