CVE-2018-1000802-PoC

Python CVE-2018-1000802 Proof-of-Concept This is a PoC for the vulnerability in makearchive function exported by shutil builtin module. Vulnerability is present in CPython Python 2.7 prior to commit add531a1e55b0a739b0f42582f1c9747e5649ace. For the vulnerability to be exploitable in the wild ther...

CVE-2025-50361

Global Buffer Overflow in SmallBASIC SmallBASIC is a fast and easy to learn BASIC language interpreter ideal for everyday calculations, scripts and prototypes. SmallBASIC includes trigonometric, matrices and algebra functions, a built in IDE, a powerful string library, system, sound, and graphic...

mwcfg

恶意软件配置提取器 用于 MalDuck 的恶意软件配置提取工具与模块 本项目完全免费，如同免费的 🍺，你可以将其用于商业、私人或任何你认为合适的方式。 使用本项目最简单的方式是访问 mwcfg.info，立即开始提取恶意软件配置！ 如果你喜欢本项目并希望捐赠 💰 以支持对抗恶意软件的战斗…… 请给我买杯 🍵，因为我不喝 🍺，你可以向 16oXesi7uv3jdPZxxwarHSD2f3cNMpaih9 发送一些 ₿ 安装： root@kitploit: sudo apt update sudo apt install -y python-virtualenv...

class-dump

class-dump class-dump 是一个用于检查 Mach-O 文件中 Objective-C 段的 命令行实用程序。它会为类（class）、类别（category）和协议（protocol） 生成声明。这些信息与使用 'otool -ov' 获得的信息相同，但 以正常的 Objective-C 声明形式呈现。 最新版本和信息可在以下网址获取： root@kitploit: http://stevenygard.com/projects/class-dump 源代码也可从我的 Github 仓库获取： root@kitploit:...

Strutshock

Strutshock Usage strutshock http://example.com/index.action...

CVE-2014-0160-Scanner

CVE-2014-0160-Scanner This is a simple php command line script to check an array of domains for the CVE-2014-0160 vuln to run: php index.php Credits: It uses the service provided by http://filippo.io/Heartbleed/...

React2Shell-Scanner

🔬 React2Shell Scanner 面向 React 和 Next.js 应用程序的 Web 应用安全评估框架 ⚠️ 重要声明 此工具仅用于授权安全测试。 ✅ 授权渗透测试 ✅ 范围内的漏洞赏金计划 ✅ 获得许可的安全研究 ✅ 测试您自己的应用程序 ❌ 未经授权的访问尝试 ❌ 未经明确许可的测试 用户须自行负责确保遵守所有适用法律。 📋 简介 React2Shell Scanner 是一个命令行安全评估框架，旨在帮助安全专业人员识别 React 和 Next.js Web 应用程序中的潜在漏洞。它专注于分析 React Server Components RSC...

CVE-2019-5392-for-Python3

Python3 compatable version for CVE 2019-5392. You do not have to install python2.7. Run it on your terminal with python3 installed. USAGE: cve.py python3 cve.py 2810 "C:\Windows\Temp"...

CVE-2021-44906

CVE-2021-44906 Originally from: https://github.com/Marynk/JavaScript-vulnerability-detection/blob/main/minimist%20PoC.zip Run root@kitploit: npm run hack And you will see the any function's done property is changed to true. The explanation of command line node index.js...

CVE-2023-35078

CVE-2023-35078-Poc-Exploit This tool is built in golang language to exploit CVE-2023-35078 vulnerability To use this tool is quite easy, run command this on your terminal root@kitploit: λ git clone https://github.com/LazyySec/CVE-2023-35078.git λ cd CVE-2023-35078 λ CVE-2023-35078 git:main go bui...

CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387-Vulnerability-Checker LAB This Rust Code is designed to check SSH servers for the CVE-2024-6387 vulnerability Command-Line Arguments: ./main -f servers.txt -p 22,2222 -t 5...

CVE-2023-27163

CVE-2023-27163 Python implementation of CVE-2023-27163 Installation To install the project dependencies, follow these steps: 1. Clone the repository: root@kitploit: git clone https://github.com/yourusername/yourrepository.git 2. Navigate into the project directory: root@kitploit: cd yourrepositor...

CVE-2017-12615-poc

-h View usage instructions...

Volumiser

Volumiser Introduction Volumiser is a command line tool and interactive console GUI for listing, browsing and extracting files from common virtual machine hard disk image formats. The tool was written to combat a regular problem where massive 100G+ disk images are often hard to work with or...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2017-0213

CVE-2017-0213 for command line...

VMWare-CVE-Check

VMWare-CVE-Check Usage: ./example.py/sh list.txt...

CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...

CVE-2026-92745

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...

DEBIAN-CVE-2026-92745

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...