CVE-2026-82636

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

EUVD-2026-68212

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

CVE-2026-82636

Qubes OS (specifically qubes-core-dom0-linux before 4.3.22 ) is vulnerable to OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube. The root cause is the use of the system() library function in core-admin-linux/file-copy-vm/qfile-dom0-agent.c to process an er...

CVE-2026-82636

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

AmzWord

AmzWord an automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography Thanks to the following github repository, we referenced and modified part of the code to integrate and implement our work: gdog follina virtual-reality 中文README请看这里 Requirements gdog： Python 2....

CVE-2024-48990-PoC

This simple shell script should create all the required file for this vulnerability to work. First it creates a randomly generated temporary file that will be used to compile the fake init.so file When the vulnerability is triggered. This file will execute and copy the bash binary to /tmp/ribbit...

Gui-poc-test

Gui-poc-test A testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432 A graphical vulnerability detection and exploitation tool for these three vulnerabilities. Notes 1. Running the jar requires Java 8 2. For single target, not suitable for multi-IP...

Exploit for CVE-2026-76581

CVE-2026-76581 Donate Help maintain this p...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Basic Information Vulnerability ID: CVE-2023-22809 Vulnerability Level: High Vulnerability Score: 7.8 Affected Versions: sudo 1.8.0 - sudo 1.9.12p1 sudo = 1.8.0 or sudo = 1.9.12p1 Attack Effect: Local Privilege Escalation Attack Method Modify root username in...

watermarks-remover v0.5.0

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

grapefruit

Grapefruit: Open-source mobile security testing suite Runtime mobile application instrumentation toolkit powered by Frida. Inspect, hook, and modify mobile apps through a web-based interface. Now it supports both iOS and Android! Quick Start Requires Frida server running on your device. Follow th...

ipatool

IPATool ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, and visionOS apps on the App Store and download a copy of the app package, known as an ipa file. Requirements Installation Manual Package Manager macOS Usage Compiling License Releases FAQ...

ipatool

IPATool ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, and visionOS apps on the App Store and download a copy of the app package, known as an ipa file. Requirements Installation Manual Package Manager macOS Usage Compiling License Releases FAQ Requirements Support...

Clutch

Clutch Clutch is a high-speed iOS decryption tool. Clutch supports the iPhone, iPod Touch, and iPad as well as all iOS version, architecture types, and most binaries. Clutch is meant only for educational purposes and security research. Clutch requires a jailbroken iOS device with version 8.0 or...

class-dump

class-dump class-dump is a command-line utility for examining the Objective-C segment of Mach-O files. It generates declarations for the classes, categories and protocols. This is the same information provided by using 'otool -ov', but presented as normal Objective-C declarations. The latest...

frida-ios-dump-modern

Modern iOS IPA Dumper A modern iOS application memory decryption tool built for Frida 17.5.2+ with full support for iOS 14-16 and multiple jailbreaks. Status: ✅ Working and Tested - Successfully dumps and decrypts iOS apps using Frida 17.5.2 on: iOS 14.7.1 + Taurine jailbreak iPad mini 5 iOS...

ICSFuzz

ICSFuzz: Fuzzing Tool for ICS Control Applications Overview ICSFuzz is an PLC-side fuzzing tool for uncovering vulnerabilities in ICS control applications by Dimitris Tychalas @ditihala .. @ditihala: https://www.twitter.com/ditihala Installation The tool requires an already existing cross...

misp-objects

misp-objects MISP objects used in MISP system and can be used by other information sharing tools. MISP objects are in addition to MISP attributes to allow advanced combinations of attributes. The creation of these objects and their associated attributes are based on real cyber security use-cases...

auth

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...