androguard

Androguard Do you think your phone has been pwned ? please check IsMyPhonePwned New tool: Goauld Dynamic injection tool for Linux/Android See the new version of Androguard: https://github.com/androguard/androguard/tree/ng Installation Quick installation: root@kitploit: pip install androguard...

WinRAR-CVE-2025-8088-Path-Traversal-PoC

PoC para CVE-2025-8088: Path Traversal en WinRAR Descripción de la Vulnerabilidad ☢️ CVE-2025-8088 CVSS 8.4 es una vulnerabilidad de path traversal en WinRAR ≤7.12 que permite colocar archivos fuera del directorio de descompresión a través de flujos de datos alternativos ADS en un archivo RAR. Se...

https-nj.gov---CVE-2018-14042

https-nj.gov---CVE-2018-14042 Informe de vulnerabilidad del sitio oficial de Nueva Jersey En Bootstrap anterior a la versión 4.1.2, es posible un XSS en el atributo principal de datos de collapse. El atributo data-target, el atributo data-parent y el atributo data-container son vulnerables a...

geoserver-CVE-2023-25157

geoserver CVE-2023-25157 白帽第3期 30班 金廷宇 github链接 - https://github.com/custiya/geoserver-CVE-2023-25157 漏洞摘要 CVE-2023-25157是针对GeoServer这一开源地图数据服务Web应用程序发生的SQLi漏洞 发生在GeoServer 2.22.0及以下的部分版本中 WFSWeb Feature Service请求中的CQLFILTER参数存在漏洞 如果无需认证即可访问该API，任何人都可以利用 环境配置 使用 docker compose up -d 命令运行测试环境 可通过...

POC-CVE-2026-93680

Description Proof of concept exploit code for CVE-2026-93680 Usage Step 1: Connect to MCP SSE terminal 1 Step 2: Initialize MCP session and list MCP tools terminal 2 Step 3: Bypass auth and exfiltrate data terminal 1, output result of step 2...

CVE-2017-5487

Instalación y Ejecución del script 💻 Prerrequisitos Antes de empezar, asegúrate de tener las siguientes herramientas instaladas en tu máquina: Python 3.x Git pip para gestionar las dependencias de Python Pasos de Instalación 1. Clonar el repositorio Usa git para clonar el repositorio: git clone...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

CVE-2024-3217-POC

CVE-2024-3217-POC Mitre 描述 适用于 WordPress 的 WP Directory Kit 插件在所有版本（包括 1.3.0 及之前版本）中，由于对用户提供的参数转义不足且对现有 SQL 查询缺乏充分准备，存在通过 'attributevalue' 和 'attributeid' 参数进行 SQL 注入的漏洞。这使得经过身份验证的攻击者（至少具有订阅者级别访问权限）能够在现有查询中附加额外的 SQL 查询，从而从数据库中提取敏感信息。 分析 我通过 WordPress 安装了正确的版本...

CVE-2022-26134

CVE-2022-26134 POC Description In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. POC 1. Run python3 confluence.py -u...

CVE-2026-98149

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When updating per-CPU maps on systems configured with non-contiguous CPU identifiers, the kernel incorrectly calculates memory offsets using logical processor IDs instead of dense buffer positions. A local user can explo...

Simple-Live-Data-Collection

简单实时数据收集工具 工作原理？ 1- 构建服务器 2- 管理端和客户端连接到服务器 3- 要收集信息，通过管理端向服务器发送请求，然后转发至客户端 安装 git clone https://github.com/LetsDefend/Simple-Live-Data-Collection 服务器端 cd server python main.py 管理端 cd admin python main.py 客户端 cd client python main.py 修改 main.py 文件中的 "HOST" 变量 屏幕截图...

SQLbit

Herramienta de Inyección SQL Ciega Una herramienta para inyecciones SQL ciegas que utiliza comparaciones bit a bit multihilo para encontrar valores de celdas en tablas SQL. Funciona al menos con SQLite y soporta cookies. Es capaz de: Buscar valores de celdas por columnas en una tabla Buscar conte...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1

CVE-2026-11107 – Insecure Direct Object Reference with Predictable UUIDv1 Program Code Python Flask idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users = struuid.uuid1:...

aftermath

Acerca de Aftermath es un framework de respuesta a incidentes de código abierto basado en Swift. Aftermath puede ser utilizado por defensores para recolectar y posteriormente analizar los datos del host comprometido. Aftermath puede ser desplegado desde un MDM idealmente, pero también puede...

aftermath

About Aftermath is a Swift-based, open-source incident response framework. Aftermath can be leveraged by defenders in order to collect and subsequently analyze the data from the compromised host. Aftermath can be deployed from an MDM ideally, but it can also run independently from the infected...

Chaya

Chaya 隐私权 Chaya 通过隐写术、密码学和压缩技术保护您的隐私。它使用 AES-256-GCM 密码学对您的载荷进行有效加密，利用 LSB-LPS 隐写技术将其嵌入图像，并通过 FLIF 进行无损压缩以逃避检测。 Chaya 为您的隐私而生。Chaya 有研究支撑（我将在 xerohack.com 上发布公开版白皮书），并且已被证明是目前最有效的图像隐写工具，优于其他 FOSS 图像隐写工具。 为什么 Chaya 比其他工具更好？ 使用大多数公开可用的反隐写工具（如 stegexpose 等）检测率为 0% 数据保留率 100%，且与标准 LSB...

Spring-Data-Mongodb-Demo

Spring-Data-Mongodb-Demo CVE-2022-22980环境...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...