cargo-fuzz

cargo fuzz Acargo subcommand for fuzzing with libFuzzer! Easy to use! Installation root@kitploit: $ cargo install cargo-fuzz Note: libFuzzer needs LLVM sanitizer support, so this only works on x86-64 and Aarch64, and only on Unix-like operating systems not Windows. This also needs a nightly...

browser-crash-tool

Browser Crash Tool - Kali Overview This tool exploits a vulnerability in iOS WebKit CVE-2020-27950 using Metasploit’s webkitbackdropfilterblur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses...

beebug

beebug - A tool for checking exploitability Description beebug is a tool that can be used to verify if a program crash could be exploitable. This tool was presented the first time at r2con 2018 in Barcelona. Some implemented functionality are: Stack overflow on libc Crash on Program Counter Crash...

CVE-2021-30809-OOM

CVE-2021-30809 — Apple WebKit Use-After-Free 취약점크래시 PoC https://github.com/user-attachments/assets/e81f8a01-d48d-44cc-a38f-ce59b01222d5 개요 이 저장소는 WebKit의 use-after-freeUAF 취약점인 CVE-2021-30809를 위한 최소한의 크래시 유발 하네스입니다. 이 PoC는 조작된 웹 콘텐츠를 처리하여 취약한 코드 경로를 실행하며, 완전한 익스플로잇이 아닌 브라우저 크래시를 안정적으로 유발하는 것을 목표로...

CVE-2020-0609

CVE-2020-609-POC UDP가 포트 3391에서 열려 있는 RDG 서버에 대해 PoC를 실행하면 RDG 인스턴스가 충돌합니다. 개발 중 스파링을 해준 @Ollypwn에게 감사드립니다...

unzip_poc

CVE-2022-0529 and CVE-2022-0530 POC for unzip 6.0 CVE-2022-0529 & CVE-2022-0530 https://bugzilla.redhat.com/showbug.cgi?id=2051402 https://bugzilla.redhat.com/showbug.cgi?id=2051395...

CVE-2019-0708

CVE-2019-0708 Blue Screen PoC Windows 7 64-bit has been tested〜 Command: python crashpoc.py ip 64 https://github.com/n1xbyte/CVE-2019-0708/ Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public...

BlueGate

BlueGate PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610. Thanks to ollypwn for pointing out my silly mistake! Setup I'm using a patched version of pydtls as the original repository wouldn't build properly. root@kitploit: cd pydtls sudo python setup.py install...

CVE-2018-9539

CVE-2018-9539 CVE-2018-9539에 대한 개념 증명 코드 질문이 있으시면 Twitter @tamirzb로 DM 보내주세요. 빌드 이것을 빌드하려면: 1. Android 소스 코드 다운로드 2. 이 저장소를 AOSP/external에 넣습니다. 3. 다음 명령어를 실행합니다: root@kitploit: cd AOSP source build/envsetup.sh make casraceuaf 결과 이 PoC를 패치되지 않은 Android 버전2018년 11월 이전의 8.1-9.0에서 실행하면 use-after-fre...

blueborne-CVE-2017-1000251

Linux Kernel 4.13.1 - BlueTooth バッファオーバーフロー PoC BlueBorne - 概念実証 - 無武装/非兵器化 - DoS（クラッシュ）のみ これは @marcinguy によって公開された初期リポジトリのコピーであり、その後彼はそれを取り下げて非公開にしました。...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

CVE-2018-4901

CVE-2018-4901 크래시 PoC & 정보 유출 PoC 자세한 내용은: https://bigric3.blogspot.com/2018/03/cve-2018-4901-analysisadobe-acrobat.html...

Chrome-Skia-CVE-2024-8636

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Steps to reproduce: 1. chromium.diff 패치를 chromium에 적용합니다. 2. genskpic.py를 실행하여 drawablepicture.skp.hh를 생성한 후, 생성된 파일을 src/gpu/commandbuffer/client로 이동합니다. 3. 브라우저를 빌드하고 시작합니다. 4. index.htm...

AirDroidPwner

AirDroidPwner CVE-2019-9599 このエクスプロイトはもはや機能しません Video PoC Exploit: https://www.youtube.com/watch?v=0QDM2246DM CVE: https://nvd.nist.gov/vuln/detail/CVE-2019-9599 Exploit-db: https://www.exploit-db.com/exploits/46337 AirDroidとは？ AirDroid は、ブラウザを介してコンピュータをリモート制御するための最も知られ、利用されているツールの1つです。 仕組み？...

Invoke-BSOD

Invoke-BSOD For when you want a computer to be done - without admin! BSOD method from here: https://github.com/Leurak/MEMZ/blob/master/WindowsTrojan/Source/Destructive/KillWindows.cL10-L18 Invoke-BSOD.ps1 A PowerShell script to induce a Blue Screen of Death BSOD without admin privileges. Also...

CVE-2024-24685

CVE-2024-24685 Crash File Poc for CVE-2024-24685...

CVE-2021-26882

CVE-2021-26882 リモートアクセスAPIの特権昇格の脆弱性 PoC https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26882 ステップ1: crash.pbk をダブルクリックしてください。 ステップ2: クラッシュをトリガーしてください。...

CVE-2019-0708

내일 결혼식 때문에 떠나요. 아무것도 찾지 못하면 다른 사람이 대신 맡아주세요. 금요일에 여기에 크래시 PoC를 공개할 예정입니다. 이미 공개된 것이 없다면요... 어쩌면 다음 주에 할 수도 있습니다. 취약한 숫자가 일관되게 떨어지는지에 따라 다릅니다. https://vimeo.com/339425966 이것으로 무엇을 하든 저는 책임지지 않으며, 교육 목적으로만 사용해야 합니다. server 2003 및 win xp와 통신하도록 소켓을 포팅하지는 않았지만, 원한다면 간단할 것입니다보안 교환 PDU를 추가하고 계산만 하면 됩니다...

CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

CVE-2018-4407

CVE-2018-4407 IOS/macOS kernel crash Usage: python CVE20184407.py IP/CIDR python CVE-20184407.py 192.168.1.1 python CVE20184407.py 192.168.1.0/24 1. find iphone nmap -sS -p 62078 --open 192.168.1.0/24 2. attack python CVE20184407.py iphoneip...