CVE-2022-38725

CVE-2022-38725 CVE-2022-38725 is an unauthenticated Denial of Service vulnerability in syslog-ng versions prior to 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Steps to Reproduce 1. Pull a vulnerable docker...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

lvi-lfb-attack-poc

PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0551 This repository holds the sources for the LVI-LFB Control Flow Hijacking attack PoC. Contents lvi-cfh-poc - hijack the control flow of another process via line-fill buffer spraying whitepaper Prerequisites 1. Visual Studio 2015 2. A...

TID-The-Instant-Destroyer

TID — तात्कालिक विध्वंसक कैश-आधारित साइड-चैनल हमलों से सुरक्षा के क्षेत्र में स्वतंत्र सुरक्षा अनुसंधान। अवलोकन TID एक विशेष प्रोटोकॉल है जिसे उपयोग के तुरंत बाद CPU कैश परतों $L1, L2, \text and L3$ से संवेदनशील डेटा अवशेषों जैसे क्रिप्टोग्राफ़िक कुंजियाँ को समाप्त करने के लिए डिज़ाइन किया गया है...

MCExtractor

MCExtractor Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD, VIA & Freescale CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA and Freescale processor microcode binaries. It ca...

POC-CVE-2025-48988-CVE-2025-48976

CVE-2025-48988 & CVE-2025-48976 About This project runs a simple file upload endpoint with Tomcat 10.1.41 and a Jakarta Servlet. The exploit runs, by default, 1000 parallelized multipart requests with 1000 parts and 50 headers by part, from 50 workers. Run POC Build and run the Docker container:...

baochip-1x

Baochip 1x This repo contains the open source elements of the Baochip 1x. This repo focuses on the hardware elements of the Baochip 1x. Developers are referred to the official Rust SDK, located in the Xous repo. There is a vscode extension named baochip which can automate build & flash for...

cpufetch

Simple yet fancy CPU architecture fetching tool cpufetch is a command-line tool written in C that displays the CPU information in a clean and beautiful way Table of contents 1. Support...

PROMPTPurify

promptpurify LLM चैट ऐप्स के लिए छोटा प्रॉम्प्ट-इंजेक्शन फ़ायरवॉल। 14 MB. केवल CPU। आपके यूज़र इनपुट और आपके LLM के बीच ड्रॉप-इन गार्ड — उसी बॉक्स पर चलता है, कोई GPU, कोई API, कोई अतिरिक्त सेवा नहीं। SecureLayer7 रेड-टीम द्वारा निर्मित। अधिकांश OSS गार्डरेल सैकड़ों MB के होते हैं, GPU चाहते हैं,...

CVE-2024-27088

CVE-2024-27088 취약점 개요 CVE-2024-27088 Feb 26, 2024 ReDoS in node.js package rebob 프로젝트의 일환 취약점 설명 github advisories root@kitploit: /^\sfunction\s\0-'-\uffff+\s\0--\uffff\s/ This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and...

2022-LPE-UAF

2022-LPE-UAF अपरीक्षित POC कोड सुरक्षा शोधकर्ताओं ने लिनक्स कर्नेल में 3 कमजोरियाँ खोजीं जो एक स्थानीय हमलावर को विशेषाधिकार बढ़ाने और संभावित रूप से दुर्भावनापूर्ण कोड निष्पादित करने की अनुमति दे सकती हैं। प्रूफ-ऑफ-कॉन्सेप्ट कोड सार्वजनिक रूप से उपलब्ध है, जिससे वास्तविक दुनिया में शोषण की संभाव...

poc-CVE-2025-38352

Exploit Details This repository only contains the proof-of-concept that triggers the vulnerability. I have since written a full exploit for this vulnerability. You can find the details in the link below. https://github.com/farazsth98/chronomaly Analysis Blog Posts Part 1 -...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

Intel-Linux-Processor-Microcode-Data-Files

حزمة ميكروكود معالجات إنتل لنظام لينكس نبذة توفر حزمة تحديث الميكروكود MCU لمعالجات إنتل آليةً لإصدار تحديثات للتنبيهات الأمنية والمشكلات الوظيفية، بما في ذلك الأخطاء errata. بالإضافة إلى ذلك، فإن وحدات MCU مسؤولة عن بدء تشغيل enclave الخاص بـ SGX على المعالجات التي تدعم ميزة SGX، وتنفيذ السلوكيا...

viper

Viper Frank4DD, @ May 2000 Viper is a prute force UNIX-style password cracker for passwords encrypt with crypt. It has been developed from Hale's viper 1.4 Perl program. While there are other more powerful crack programs out, this one is about studying the safety of passwords while hardware speed...

cargo-fuzz

cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation root@kitploit: $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly...

ll-34

ll/34 ll/34 is a circuit-level emulator for the PDP-11/34A 1976, running a virtual CPU reverse-engineered from the schematics, microcode, and logic captures of an actual PDP-11/34A. It was originally designed as a digital replica of the real CPU to assist with troubleshooting at the signal level...

COPG

🎮 COPG The most advanced device & CPU spoofer for Android — bypass restrictions and unlock premium graphics, higher FPS and exclusive features on most games and apps. ✨ Why COPG? COPG is a Zygisk module that makes most games and apps believe they are running on a different, fully‑featured flagshi...

Lucky-Spark

LUCKY-SPARK ⟪ LUCKY-SPARK ⟫ is a stager designed for shellcode payloads staged with http/https like sliver or on github raw. It uses modern obfuscation and evaion methods like sliding window just-in-time decryption of the payload and cpu instruction patching. By default it creates an executable...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...