CVE-2026-76578

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwolpyl3e2f 2026-09-07 16:24:54+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muwwbhovtm2o 2026-09-07 16:35:04+00:00| seen|...

CVE-2026-33032

CVE-2026-33032 安全检查（读取 nginx 状态） root@kitploit: python3 main.py http://target:9000 --tool nginxstatus 列出配置 root@kitploit: python3 main.py 10.0.0.50 --tool nginxconfiglist 破坏性演示（写入并重载） root@kitploit: python3 main.py http://target:9000 \ --tool nginxconfigadd \ --payload poc.conf \ --content 'serve...

POC-CVE-2020-0796

- 受影响版本 Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1903 for x64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows Server,...

BlueGate

BlueGate Prueba de concepto Denegación de servicio + escáner para CVE-2020-0609 y CVE-2020-0610. Estas vulnerabilidades permiten a un atacante no autenticado lograr ejecución remota de código con los máximos privilegios a través de la Puerta de enlace de escritorio remoto RD Gateway para RDP. Úse...

CVE-2021-25741

关于 fork on Betep0k/CVE-2021-25741/fork 图片无用，并在metarget上测试...

log4j-CVE-2021-44228-test

log4j-CVE-2021-44228-test demo projects to highlight how to execute the log4j CVE-2021-44228 vulnerability used spring boot just to be quickly set up. you'll have to excuse all the hard coding, it was just a POC. Usage Have Java 8 installed. Build using maven mvn clean package -DskipTests. Run...

macOS-Kernel-Exploit

macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild exploitation but still helpful for security...

CVE-2026-61410

creationtimestamp| type| source ---|---|--- 2026-09-07 14:07:10+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muwol6vqjw2j...

ShellEvil

ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX 针对 CVE-2013-225 S2-016 的 Struts 2 DefaultActionMapper 交互式 Shell 漏洞利用 Struts 2 DefaultActionMapper 支持一种通过为参数添加 "action:" 或 "redirect:" 前缀来实现导航状态短路变更的方法， 后跟所需的目标导航表达式。该机制旨在帮助 将导航信息附加到表单内的按钮上。 https://struts.apache.org/docs/s2-016.html USO:...

CVE-2022-22965-PoC

CVE-2022-22965 Spring4Shell 概念验证 测试 Spring Core 中的 RCE（远程代码执行） 构建镜像 需要基于 BuildKit 的构建，因此你必须启用它。 最简单的方法是在执行 docker build 命令时设置 DOCKERBUILDKIT=1 环境变量，例如： root@kitploit: $ DOCKERBUILDKIT=1 docker build -f Dockerfile.core . -t spring4shell-core && docker run --rm -p 8080:8080 spring4shell-core 否则，要默认...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — Omisión de la Política de Mismo Origen mediante interceptación entre puertos CVE-2026-20643...

MagiskEoP

简介 这是 Magisk 应用中一个针对漏洞 CVE-2024-48336 的利用程序，允许本地应用在未经用户同意的情况下静默获取 root 权限。 该漏洞最初由 @vvb2060 报告，并由 @canyie 编写了 PoC。该漏洞已在 Canary 27007 版本中修复。 利用此漏洞静默获取 root 权限并向任意应用授予 root 权限的演示视频：https://github.com/canyie/MagiskEoP/blob/main/screen-20220302-093745.mp4 复现此漏洞的步骤： 1. 在没有预装 GMS 的设备上安装存在漏洞的 Magisk 应用构建...

libssh-scanner

libssh scanner Introduction This is a python based script to identify hosts vulnerable to CVE-2018-10933. Libssh scanner has two modes: passive banner grabbing and aggressive bypass auth to validate vulnerability's existence. By default, libssh scanner uses passive mode but supply the -a argument...

text4shell-scan

text4shell-scan A fully automated, accurate, and extensive scanner for finding vulnerable text4shell hosts Features Support for lists of URLs. Fuzzing for more than 60 HTTP request headers. Fuzzing for HTTP POST Data parameters. Fuzzing for JSON data parameters. Supports DNS callback for...

WebLogic-SSRF_CVE-2014-4210

WebLogic-SSRFCVE-2014-4210 基于Python3的Weblogic SearchPublicRegistries SSRFCVE-2014-4210漏洞利用脚本 用法 可选参数： -h, --help 显示帮助信息并退出 -u U 单个目标URL -uf UF 从文件中读取URL -p P 仅扫描指定端口 -sn SN 仅扫描指定子网 -sf SF 仅扫描文件中的IP --timeout TIMEOUT 指定超时时间，默认为2秒 --header HEADER 指定HTTP请求头参数和值，JSON格式 -d 仅检测漏洞是否存在 -A 仅扫描默认A类子网 -B...

CVE-2021-41773

CVE-2021-41773 大家好，昨天针对 apache 2.4.49 版本的新 CVE-2021-41773 发布了。所以在这种情况下，我想讲解一下这个 apache 漏洞。 Playground 那么，我想你们可能想在网站上测试这个漏洞。所以我为你们准备了一个测试环境。 这是下载 apache 2.4.49 示例 docker 镜像的网站 Docker 镜像 注意：有两个镜像，分别是 with-cgid 和 no-cgid。你需要下载这两个镜像 使用方法 首先在您的机器上下载 docker image。 拉取 Docker 镜像 root@kitploit: no-cgid:...

whalescan

Whalescan Vulnerability scanner for windows containers. Getting Started root@kitploit: git clone https://github.com/saira-h/whalescan pip install -r requirements.txt python main.py Overview Whalescan performs several benchmark checks, as well as checking for CVEs. This tool can be used as part of...

CVE-2026-86429

creationtimestamp| type| source ---|---|--- 2026-09-07 14:04:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muwogkzu462e...

CVE-2026-86428

creationtimestamp| type| source ---|---|--- 2026-09-07 14:04:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muwoge4zw72s...

unomi_exploit

Disclaimer The vulnerability detection methods, files, and other content provided here are strictly limited to use by security professionals under legal authorization, for the purpose of testing the security of authorized servers. Security professionals must comply with legal regulations and are...