CVE-2023-38891

CVE-2023-38891 Authenticated SQL Injection Vulnerability in VTiger Open Source CRM v7.5 Discovered by: Jacob Elliott 07/13/23 Summary In the Reports module in VTiger CRM v7.5.0, there is insufficient checking of the selected fields for the report which are stored and then later reintroduced as a...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

telegram-bot-dumper

telegram-bot-dumper Easy dumping of all Telegram bot stuff. Input : only bot token. Output : bot name & info, all chats text history & media, bot's users info & photos. This is a Python implementation. 🚀 Fast Golang version by ScBoln. Requirements Python = 3.6 Telethon = 1.24.0 Register Telegram...

log4j2-exploit

Log4Shell CVE-2021-44228 proof of concept Requirement Java JDK/JRE 8 or later version curl exploitable Simple spring boot application that serves a login page with user and password. It logs the user name when POSTed to /. It is not required for the application to log any user provided input...

cve-2025-32711

CVE-2025-32711 EchoLeak Detection Tool 🔐 Overview CVE-2025-32711, nicknamed "EchoLeak," is a critical zero-click vulnerability in Microsoft 365 Copilot that allowed attackers to exfiltrate sensitive organizational data without any user interaction. This repository contains detection and remediati...

moveit-transfer-2023-breach

MOVEit Transfer 2023 Mass Data Breach Incident Details Incident Date: May–June 2023 CVE: CVE-2023-34362 Attack Type: SQL Injection Threat Actor: Cl0p ransomware group Summary In May 2023, a SQL injection vulnerability in MOVEit Transfer was exploited to exfiltrate sensitive data from hundreds of...

EUVD-2026-68983

The Charitable – Donation & Fundraising Platform Donation Forms, Recurring Donations & Fundraising Campaigns plugin for WordPress is vulnerable to generic SQL Injection via 'order' Shortcode Attribute in all versions up to, and including, 1.8.12.1 due to insufficient escaping on the user supplied...

CVE-2023-6063-PoC

PoC for CVE-2023-6063: WP Fastest Cache 1.2.2 Unauthenticated Blind SQL Injection -red A Proof on Concept for CVE-2023-6063, a time-based blind SQL injection vulnerability in WP Fastest Cache ≤1.2.2. Extracts hashed passwords userpass and emails useremail from the wpusers table by abusing the...

Computer-Security-Equifax-2017

Repositorio educativo que demuestra vulnerabilidades reales de software: Apache Struts2 CVE-2017-5638 RCE, exfiltración de datos, cifrado débil y estrategias de mitigación saneamiento, monitorización y mejores prácticas de criptografía. Demostración de red team vs. blue team sobre fallos de...

coderunner

CodeRunner: A local sandbox for your AI agents CodeRunner helps you sandbox your AI agents and its actions inside a sandbox. Key use case: You can run multiple Claude Code or AI agents in our sandbox without any fear of data loss and exfilteration. Quick Start Prerequisites: Mac with macOS and...

EUVD-2026-68971

The Persistent Login plugin for WordPress is vulnerable to generic SQL Injection via 'wppldeviceid' Cookie in all versions up to, and including, 3.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

tfc

Tinfoil Chat Tinfoil Chat TFC is a FOSS+FHD peer-to-peer messaging system that relies on high assurance hardware architecture to protect users from passive collection, MITM attacks and most importantly, remote key exfiltration. TFC is designed for people with one of the most complex threat models...

BSQLinjector

BSQLinjector BSQLinjector uses blind method to retrieve data from SQL databases. I recommend using "--test" switch to clearly see how configured payload looks like before sending it to an application. Options: root@kitploit: --file Mandatory - File containing valid HTTP request and SQL injection...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report...

cloudsplaining

Cloudsplaining Cloudsplaining 是一个 AWS IAM 安全评估工具，用于识别违反最小权限原则的情况，并生成基于风险优先级的 HTML 报告。 示例报告 文档 完整的文档，请访问 ReadTheDocs 上的项目。 安装 速查表 示例报告 概述 Cloudsplaining 能够识别 AWS IAM 策略中违反最小权限原则的情况，并生成美观的 HTML 报告。它可以扫描您 AWS 账户中的所有策略、跨多个 AWS 账户扫描，或者扫描单个策略文件。 该工具有助于识别未使用资源约束的 IAM 操作，同时通过标记出以下无限制情况下给 AWS 账户带来风险的 IAM...

Arecibo

Arecibo Endpoint for Out-of-Band Exfiltration DNS & HTTP Authors Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz DNS Exfiltration Create a new token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Now you can use this identificative token to d...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press •• Key features Interactive outbound connections filtering. Block ads, trackers or malware domains system wide. Ability to configure...

PowerExfil

PowerExfil Una colección de scripts personalizados de exfiltración de datos para evaluaciones de Red Team. ExfilCards.ps1 - Este script exfiltrará números de tarjetas de crédito mediante cadenas codificadas en base64 a un servidor DNS personalizado. ExfilDataStreamDNS.ps1 - Este script exfiltrará...

DET

DET extensible Kit de Exfiltración de Datos DET se proporciona TAL CUAL, es una prueba de concepto para realizar Exfiltración de Datos usando uno o múltiples canales al mismo tiempo. Esta es una Prueba de Concepto destinada a identificar posibles fallos de DLP. Nunca debe usarse para exfiltrar...

browsertunnel

browsertunnel Browsertunnel 是一款利用 DNS 协议从浏览器窃取数据的工具。其实现方式是滥用 dns-prefetch 功能——该功能旨在通过后台对指定域名进行 DNS 查找来降低网站的感知延迟。DNS 流量不会出现在浏览器的调试工具中，不会受页面内容安全策略（CSP）的阻止，且通常不会被企业防火墙或代理检查，因此它成为在受限场景中隐蔽传输数据的理想媒介。 这是一项古老的技术——DNS 隧道本身可以追溯到 90 年代，而 Patrick Vananti 在 2016 年就撰文介绍了如何利用 dns-prefetch 实现它，但据我所知，browsertunne...