CVE-2021-1675

PrintNightmare CVE-2021-1675 This Zeek script detects successful RpcAddPrinterDriver,Ex DCE RPC events, which are required to successfully exploit the vulnerability. Tests are based on exploit PCAP from Lares Lab. Tested with Zeek versions 3.0.2 and 4.0.1. Notices PrinterDriverChangedSuccessfully...

CVE-2019-2725

CVE-2019-2725 weblogic command echo + webshell upload Disclaimer: This tool is only for security testing and learning purposes. Illegal use is prohibited. weblogic command echo + webshell upload Script introduction: This script is tested on weblogic versions 10.3.6 and 12.1.3, and is written in...

libpo32

libpo32 A small C99 library for Teenage Engineering PO-32 acoustic data transfers and drum synthesis. libpo32 reimplements the PO-32 Tonic transfer stack and a compatible drum voice model. It is not a full PO-32 firmware or UI emulator; it covers the packet format, acoustic modem, frame decoder,...

Tentacle

Tentacle root@kitploit: .. . . .. | || || \ | | | | / \ / || | | | 1.0.0stable ---| |----| | | | | ---| |---- / ^ \ | ,----'| | | | | | | | | . | | | / /\ \ | | | | | | | | | | | |\ | | | / \ | ----.| ----.| | || |||| | || // \ ||||| http://www.orleven.com Tentacle is a POC vulnerability...

FruityWifi

FruityWiFi Wireless network auditing tool http://www.fruitywifi.com/ Important Note Debian 11 Bullseye: Please use Use Debian 11 Bullseye based systems. The Installer has been updated for resolving issues with old version. Note : Some modules will not work until they are upgraded to Python3...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script विवरण CVE-2024-24919 Check Point Security Gateway उपकरणों में एक कमजोरी है जो पथ ट्रैवर्सल के शोषण के माध्यम से संवेदनशील फ़ाइलों तक अनधिकृत पहुंच की अनुमति देती है। यह कमजोरी हमलावर को बिना प्रमाणीकरण के लक्ष्य प्रणाली में विशिष्ट फ़ाइलों की सामग्री पढ़ने में सक्ष...

MoodleExploit

Moodle Exploit Exploit Title: Moodle v3.4.1 RCE Exploit Google Dork: inurl:"/course/jumpto.php?jump=" Date: 15 March 2019 Exploit Author: Darryn Ten Vendor Homepage: https://moodle.org Software Link: https://github.com/moodle/moodle/archive/v3.4.1.zip Version: 3.4.1 Possibly 3.5.0 and maybe even...

exploit_cve-2023-26326_using_cve-2024-2961

Exploit BuddyForms CVE-2023-26326 using Iconv CVE-2024-2961 This work was done by me, Omar Elshopky, and Nour El Dien Bassiouny. This repository contains an exploit for the WordPress BuddyForms Plugin CVE-2023-26326, initially reported in the advisory by Joshua Martinelle. The exploit leverages a...

CVE-2018-1000117-Exploit

CVE-2018-1000117 Python Software Foundation CPython version From 3.2 until 3.6.4 on Windows contains a Buffer Overflow vulnerability in os.symlink function on Windows that can result in Arbitrary code execution, likely escalation of privilege. This attack appears to be exploitable via a python...

CVE-2025-24071_PoC

CVE-2025-24071 / CVE-2025-24054 PoC Edit: MICROSOFT HAS BEEN RENAMED CVE-2025-24071 AS CVE-2025-24054 🤔 Overview This Windows vulnerability, specifically in 'explorer.exe', allows us to receive a NetNTLMv2 hash from a victim simply by having the attacker extract a .zip file. Usage Execute the...

misp-objects

misp-objects كائنات MISP المستخدمة في نظام MISP ويمكن استخدامها بواسطة أدوات أخرى لمشاركة المعلومات. تأتي كائنات MISP بالإضافة إلى سمات MISP للسماح بتركيبات متقدمة من السمات. إنشاء هذه الكائنات وسماتها المرتبطة بها يستند إلى حالات استخدام حقيقية في مجال الأمن السيبراني وممارسات قائمة في مشاركة...

doublepulsar-detection-script

Author: Luke Jennings [email protected] - @jukelennings Company: Countercept @countercept Website: https://countercept.com A set of python2 scripts for sweeping a list of IPs for the presence of both SMB and RDP versions of the DOUBLEPULSAR implant that was released by the Shadow Brokers...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

node-cve-2018-4407

node-cve-2018-4407 Node.js PoC exploit code for CVE-2018-4407 Author: Sam Decrock This script is based on the scapy script provided by Zuk: iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC in a tweet: pip install scapy sudo scapy sendIPdst=“Target...

awesome-censys-queries

Awesome Censys Queries A collection of fascinating and bizarre Censys Search queries. Contributing Found an awesome query? Submit it here Interested in contributing in another way? See the contributing guidelines Resources Censys Search CensysGPT Beta - AI Generated Queries Legacy Search Queries ...

Chrome-and-Edge-Version-Dumper

Chrome-and-Edge-Version-Dumper Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096 Make sure to edit the paths before using AND make the folder for the output to be stored...

copyfail-deconstructed

copyfail-deconstructed Easy-to-understand version of CVE-2026-31431, a privilege escalation technique that allows anybody to become root. The original proof-of-concept is found here: https://github.com/theori-io/copy-fail-CVE-2026-31431, but is heavily compressed and minified so it can have as...

CVE-2023-46604-ActiveMQ-RCE-pseudoshell

CVE-2023-46604 RCE Pseudoshell Ce script exploite CVE-2023046604 Apache ActiveMQ pour générer un pseudo-shell. La vulnérabilité permet l'exécution de code à distance en raison d'une désérialisation non sécurisée dans le protocole OpenWire. Description CVE-2023-46604 est une vulnérabilité de...

CVE-2007-2447

CVE-2007-2447 CVE-2007-2447 - Samba usermap स्क्रिप्ट। https://amriunix.com/post/cve-2007-2447-samba-usermap-script/ उपयोग: root@kitploit: $ python usermapscript.py RHOST -- लक्ष्य पता RPORT -- लक्ष्य पोर्ट TCP : 139 LHOST -- सुनने का पता LPORT -- सुनने का पोर्ट स्थापना root@kitploit: sudo apt...