CVE-2026-11114-Node.js-vm-Sandbox-Escape-via-Proxy

CVE-2026-11114 – Node.js vm Sandbox Escape via Proxy Program Code Node.js root@kitploit: // sandboxserver.js - Vulnerable VM sandbox const vm = require'vm'; const express = require'express'; const app = express; app.useexpress.json; app.post'/eval', req, res = const code = req.body.code; const...

nautilus

Nautilus 2.0 Nautilus is a coverage guided, grammar based fuzzer. You can use it to improve your test coverage and find more bugs. By specifying the grammar of semi valid inputs, Nautilus is able to perform complex mutation and to uncover more interesting test cases. Many of the ideas behind this...

haptyc

Haptyc Test Generation Framework What's Haptyc? Haptyc is a python library which was built to add payload position support and Sniper/Clusterbomb/Batteringram/Pitchfork attack types into Turbo Intruder. While Haptyc accomplishes these goals fairly well it also introduces a simpler way to express...

CVE-2025-30374

CVE-2025-30374 Class Pollution Vulnerability in Taipy Leading to RCE, XSS, DoS, and Credential Leakage Summary A class pollution vulnerability has been identified in Taipy v4.0.3 the latest version at the time of discovery. This vulnerability allows unauthorized attackers to overwrite the Taipy...

slither-mcp

Slither MCP Server A Model Context Protocol MCP server that provides static analysis capabilities for Solidity smart contracts using Slither. Overview This MCP server wraps Slither static analysis functionality, making it accessible through the Model Context Protocol. It can analyze Solidity...

windbg-mcp

WinDbg MCP An MCP Model Context Protocol server that exposes every pybag Windows debugger function as a native MCP tool. It gives any MCP-compatible client Claude Desktop, Claude Code, Cowork, OpenAI Codex CLI, Cursor, and custom agents full control over user-mode processes, kernel sessions, and...

RightHand-Persistence

RightHand Persistence inspired by CVE-2026-21509 C++ COM Context Menu Handler for Persistence A sample implementation of a Windows context menu handler using C++ and COM, demonstrating a stealthy persistence technique. By registering a custom COM object, your code executes whenever a user...

ghidrecomp

Ghidrecomp - Command Line Ghidra Decompiler About This Python command line tool decompiles all functions of a binary and writes them to a directory in separate C files: root@kitploit: flowchart LR afilename -- bghidrecomp a2Symbol Server -- b b -- eGhidra Project Files b -- output subgraph output...

mcpguard-dynamic

MCPGuard-Dynamic Kernel-level sandboxing for LLM agent tool calls made through the Model Context Protocol MCP. MCPGuard sits as a transparent proxy between an MCP client the agent / runner and an MCP server subprocess, applying three layered defenses to every tool invocation. The lowest layer is...

CVE-2022-36537-EXPLOIT

CVE-2022-36537 Summary R1Soft Server Backup Manager uses the ZK framework as the main framework. Its security requires all Web3 project parties to pay more attention to the security vulnerabilities of various Web3 infrastructures and patch them in time to avoid potential security risks and digita...

snuck

snuck Automatic XSS filter bypass Overview snuck is an automatic tool whose goal is to significantly test a given XSS filter by specializing the injections on the basis of the reflection context. This approach adopts Selenium to drive a web browser in reproducing both the attacker and the victim...

Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

DbgNexum

DbgNexum - Shellcode Injection DbgNexum is a Proof-of-Concept for injecting shellcode using the Windows Debugging API and Shared Memory File Mapping. It avoids writing and reading remote memory directly, instead using context manipulation to force the target process to load and execute the payloa...

psc

psc psc ps container is a fast process scanner that uses eBPF iterators and Google CEL to query system state with precision and full container context. Why psc? Fast Kernel-Level Access with eBPF Iterators psc uses eBPF iterators to read process and file descriptor information directly from kerne...

VirtualLockSensorLPE

VirtualLockSensorLPE Description Local privilege escalation PoC exploit for CVE-2025-0886 that targets Elliptic Virtual Lock Sensor version 3.1.60531.2 running on Windows, which is installed by default on certain Lenovo laptop models. Allows execution of a payload in the context of SYSTEM from a...

wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

CVE-2022-24481-POC

CVE-2022-24481-POC TL;DR This poc is reversed from expSHA1:fec933b0c46366a1fb272bfaf82a8262597a8d75 and many AV engine detected it as CVE-2022-24521. After analyze it, I find that it maybe the exp for CVE-2022-24481, bacause CVE-2022-24521 is not a type confusion vulnerability. The bug cause by...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

vulnerable-mcp-servers-lab

Vulnerable MCP Servers Lab This repository contains intentionally vulnerable implementations of Model Context Protocol MCP servers both local and remote. Each server lives in its own folder and includes a dedicated README.md with full details on what it does , how to run it , and how to...

SqlMap_BurpSuite

SqlMapBurpSuite Compiled sqlmap.jar https://github.com/jas502n/SqlMapBurpSuite/blob/master/burpsqlmap/out/artifacts/burpsqlmapjar/burpsqlmap.jar grep -r "send to Sqlmap" src/burp/SnifferContextMenuFactory.java: JMenuItem jMenuItem = new JMenuItem"send to Sqlmap"; JMenuItem jMenuItem = new...