CVE-2020-0796

CVE-2020-0796 Overview: The compression feature added to SMBv3 starting from Windows 10/Server version 1903 contains an integer overflow vulnerability confirmed by Microsoft on 12/03/2020. It allows an attacker to perform Local Privilege Escalation LPE and Remote Code Execution RCE. Here we will...

SMBGhost

SMBGhost This repository contains my scanner script which lets you know whether your server uses SMBv3.1.1 and has SMB compression enabled. Ultimately, this means you are vulnerable to CVE-2020-0796. At this point of time a security patch was released, please make sure to update! It also offers a...

turbolite

turbolite turbolite is a SQLite VFS in Rust that serves point lookups and joins directly from S3 with sub-250ms cold latency. This repo is a Cargo workspace with two crates: turbolite — Pure Rust library. SQLite VFS with page-level compression, encryption, and S3 tiering. turbolite-ffi — C FFI /...

TinyLoad

TinyLoad v7.4 - Empaquetador y cifrador PE para Windows TinyLoad es un cifrador/empaquetador PE para ejecutables x64 que empaqueta un exe de entrada con distintas capas de protección para evitar que sea sometido a ingeniería inversa. Es un único archivo .cpp y no tiene dependencias externas. cómo...

CRIME-poc

CRIME-poc CRIME attack : a compression oracle attacks CVE-2012-4929 discovered by Juliano Rizzo and Thai Duong; In a compression oracle attack the use of adaptive data compression on a mixture of chosen plaintext and unknown plaintext can result in content-sensitive changes in the length of the...

Swego

Swego Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features Usage Run the binary If you don't want to build it, binaries are availables on https://github.com/nodauf/Swego/releases Otherwise, build-essential should be installed and GOPATH...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

zombie-zip

Zombie ZIP ZIP format confusion technique that evades 98% of antivirus engines. CVE-2026-0866 | VU976247 | Published March 10, 2026 The Technique Create a ZIP file where: root@kitploit: Compression Method = 0 STORED Actual data = DEFLATE compressed CRC-32 = Checksum of uncompressed payload...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

Chaya

Chaya Derecho a la Privacidad Chaya protege tu privacidad mediante esteganografía, criptografía y compresión. Cifra eficazmente tus cargas útiles usando criptografía AES-256-GCM , las incrusta usando la técnica de esteganografía LSB-LPS en imágenes y las comprime usando FLIF para evadir la...

Chaya

Chaya Right To Privacy Chaya protects your privacy through steganography, cryptography and compression. It effectively encrypts your payloads using AES-256-GCM cryptography, embeds them using LSB-LPS steganography technique into images and compresses them using FLIF to evade detection by performi...

CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 vulnerability environment with a PoC https://jira.mongodb.org/browse/SERVER-115508 SUMMARY This is a critical fix to address CVE-2025-14847. Upgrade to 8.2.3, 8.0.17, 7.0.28, 6.0.27, 5.0.32, or 4.4.30. ISSUE DESCRIPTION AND IMPACT An client-side exploit of the Server...

POC-CVE-2026-49975

-red CVE-2026-49975 HTTP/2 Bomb — HPACK Compression Bomb + Flow-Control Hold PoC Security Research PoC by naheeju ⚠️ This is a working, memory-exhaustion DoS tool — not a toy. It opens streams that force the target to allocate memory and holds them open via HTTP/2 flow-control tricks. As long as...

CVE-2020-0796-PoC

CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Usage ./CVE-2020-0796.py servername This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash the target. This...

Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload

Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

DisableSMBCompression

DisableSMBCompression CVE-2020-0796 Flaw Mitigation - Active Directory Administrative Templates The little we know about the new SMB3 flaw, is that we've been provided this mitigation for SMB3 servers: root@kitploit: Set-ItemProperty -Path...

ScreenshotBOF

ScreenshotBOF An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory. Features JPEG compression In memory download as screenshot or as file Supports capturing of minimized windows Grayscale, JPEG quality and...

cve-2024-3094-tools

CVE-2024-3094 XZ Backdoor Tools This repository contains tools for the XZ Backdoor vulnerability, also known as CVE-2024-3094. About CVE-2024-3094 CVE-2024-3094, also known as the XZ Backdoor, is a critical vulnerability discovered in the XZ data compression library. For more information about th...