threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

binder-trace

Binder Trace Binder Trace, Android Binder संदेशों को इंटरसेप्ट और पार्स करने का एक टूल है। इसे "Binder के लिए Wireshark" समझें। आवश्यकताएँ python संस्करण = 3.9 ⚙️ स्थापना आपको एक rooted Android डिवाइस या इम्यूलेटर की आवश्यकता होगी। केवल Linux - "copy to clipboard" कार्यक्षमता के लिए xclip या xsel...

ghidra_kernelcache

ghidrakernelcache: ein Ghidra iOS Kernelcache-Framework für Reverse Engineering Dieses Framework ist das Endprodukt meiner Erfahrung im Reverse Engineering von Kernelcaches. Normalerweise suche ich nach Schwachstellen, indem ich den Kernel und seine Erweiterungen manuell auditiere, und habe die...

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

CVE-2019-9193-Home-Lab

ENGLISCHE VERSION CVE-2019-9193 — PostgreSQL COPY FROM PROGRAM RCE Dieses Labor simuliert CVE-2019-9193 , eine Schwachstelle in PostgreSQL 9.3–11.2, die folgendes ermöglicht: root@kitploit: COPY ... FROM PROGRAM '' zur Ausführung von OS-Befehlen durch einen Superuser oder eine Rolle mit...

CVE-2015-3306-Home-Lab

ProFTPD 1.3.5 modcopy — Laboratório de Simulação de RCE Este laboratório foi projetado para simular a vulnerabilidade CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE É usado para aprender Web Shell Injection RCE por meio do módulo modcopy do ProFTPD. Recursos ProFTPD 1.3.5 vulnerável...

CVE-2022-1421

CVE-2022-1421 Una Proof-Of-Concept per CVE-2022-1421 Discy Riferimenti https://wpscan.com/vulnerability/a7a24e8e-9056-4967-bcad-b96cc0c5b249...

Security Bulletin: IBM Sterling Connect:Direct for Unix is impacted by vulnerabilities

Summary IBM Java 17 is used by IBM Sterling Connect:Direct for UNIX in product configuration and data transmission. IBM Sterling Connect:Direct for UNIX is impacted by vulnerabilities in IBM Java 17. IBM Sterling Connect:Direct for UNIX has upgraded IBM Java 17 to address the issues CVE-2026-3428...

linux-4.19.72_CVE-2021-3347

HiSax is a Linux hardware-level driver for passive ISDN cards with Siemens chipset ISACS 2085/2086/2186, HSCX SAB 82525. It is based on the Teles driver from Jan den Ouden. It is meant to be used with isdn4linux, an ISDN link-level module for Linux written by Fritz Elfert. root@kitploit: This...

cve-2026-27483-lab

CVE-2026-27483 Lab - Enterprise-Schwachstellen-Lernumgebung Ein vollständiges, realistisches, unternehmensreifes Docker-basiertes Labor zum Lernen, Testen und Verteidigen gegen CVE-2026-27483 MindsDB Path Traversal RCE. 🎯 Schnellstart root@kitploit: Clone the repository git clone...

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing AI, command traffic hiding in public infrastructure, malicious tools waiting before showing...

DIRTY-FRAG-Detection-with-Wazuh-4.14.4

DIRTY FRAG Detection con Wazuh 4.14.4 - CVE-2026-43284 / CVE-2026-43500 Detection engineering per la Linux Kernel LPE Dirty Frag - Ubuntu / RHEL / Debian / Amazon Linux Cos'è Dirty Frag? CVE-2026-43284 / CVE-2026-43500 è una vulnerabilità di escalation locale dei privilegi LPE nel kernel Linux ch...

shiro-cve-2022-32532

Ambiente di riproduzione per Apache Shiro CVE-2022-32532 Questa è un'applicazione Web minimale per riprodurre CVE-2022-32532 bypass dell'autenticazione Apache Shiro RegExPatternMatcher. Descrizione della vulnerabilità CVE : CVE-2022-32532 Versioni interessate : Shiro 1.9.1 Causa :...

CVE-2025-33073

CVE-2025-33073 PoC-Exploit für den NTLM-Reflection-SMB-Fehler. Alle Credits gehen an die offizielle Forschung: https://www.synacktiv.com/en/publications/ntlm-reflection-is-dead-long-live-ntlm-reflection-an-in-depth-analysis-of-cve-2025 Voraussetzungen Betriebssystem: Kali Linux hat die meisten...

CVE-2025-6018-CVE-2025-6019-Privilege-Escalation-Exploit

Guida all'Escalation dei Privilegi CVE-2025-6018 + CVE-2025-6019 Cinese 📋 Passaggi rapidi per lo sfruttamento Passaggio 1: Preparare l'immagine XFS macchina locale root@kitploit: Create 300MB XFS image dd if=/dev/zero of=xfs.image bs=1M count=300 mkfs.xfs -f xfs.image Mount and install SUID bash...

CVE-2017-9822

CVE-2017-9822 Deserializzazione del cookie DotNetNuke – Esecuzione remota di codice RCE Le versioni di DotNetNuke DNN comprese tra 5.0.0 e 9.3.0 sono affette da una vulnerabilità di deserializzazione che porta all'esecuzione remota di codice RCE. DotNetNuke utilizza il cookie DNNPersonalization p...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

EUVD-2026-67075

NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with many unmatched opening tags. Attackers can exploit lazy regex patterns in the readblock method...