CVE-2024-0012_CVE-2024-9474_PoC

🚀 CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit 🔐 🛡️ Description This Proof-of-Concept PoC script targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474 by automating the exploitation process, including autentication bypass, payload creation, chunked...

voltron

Voltron Voltron 是一个用 Python 编写的可扩展调试器 UI 工具包。它旨在通过支持附加实用视图来改善各种调试器 LLDB、GDB、VDB 和 WinDbg 的用户体验，这些视图可以从调试器主机检索并显示数据。通过在其他 TTY 中运行这些视图，您可以构建适合自己需求的自定义调试器用户界面。 Voltron 并非旨在满足所有人的所有需求。它不是调试器 CLI 的全面替代品。相反，它旨在补充您现有的设置，并允许您根据自己的喜好扩展 CLI 调试器。如果您只想在调试器旁边的窗口中显示寄存器内容视图，您可以做到。如果您想全力以赴，得到一个看起来更像 OllyDbg...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

CVE-2025-14700-poc

CVE-2025-14700 POC Automatic exploit for Authenticated RCE in Crafty Controller --login --password --lhost --lport This script uses netcat to setup a listener after triggering the reverse shell payload, it won't work if you don't have netcat on your listener machine...

CVE-2024-4367-POC-PDFJS

CVE 2024 4367: PoC pour l'exploitation de XSS Cross-Site Scripting 1. Displaying an Alert XSS Trigger Another exploitation example consists of injecting a simple alert message to check if the attack works. root@kitploit: python poc.py "alert'XSS exploit triggered';" Explanation : This code inject...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect The Pan-OS Checker is to determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface. Before run the script, need to make sure version-table.txt in the same...

CVE-2023-20198

CVE-2023-20198 - PoC SCRIPT /!\ 免责声明： 此脚本按“原样”提供，仅用于教育目的。强烈建议用户谨慎使用，并在法律和道德允许的范围内使用。 描述 在目标 Web 服务器上执行各种操作，例如创建和/或删除本地用户帐户、重启 Web 服务器、安装并检查植入物是否存在，最后清理所创建的用户帐户。 要求 Python 3.x Requests 库（pip install requests） 用法 root@kitploit: python CVECISCO20198V2.py 关于...

avcleaner

avcleaner C/C++ source obfuscator for antivirus bypass Blog posts The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM...

apache_audit_cve-2026-23918

cve-2026-23918 Defensive audit tools for CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE and four related CVEs disclosed in the May 4, 2026 Apache Software Foundation security advisory. CVE| Severity| Component| Impact| Affected ---|---|---|---|--- CVE-2026-23918| High CVSS 8.8| HTTP/2| Double...

Network_Assessment

Network Assessment With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you monitor. This Python script analyzes network traffic in a given .pcap file and attempts to detect the following suspicious network...

Graver

Graver Description Proof of Concept script to exploit the authenticated SSTI+RCE in Grav CMS CVE-2024-28116. It creates a malicious RCE page on the server running the vulnerable Grav CMS. References: https://nvd.nist.gov/vuln/detail/CVE-2024-28116 Notes Since it is an authenticated vulnerability ...

Apache-Struts

Apache-Struts 用于Apache Struts CVE-2017-5638的利用工具 使用方法 测试单个URL。 python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Nmap Recong nmap -p --script http-vuln-cve2017-5638 ' 测试一组URL。 python struts-pwn.py --list 'urls.txt' -c 'id' 检查单个URL是否存在漏洞。 python struts-pwn.py...

proxy2

proxy2 Proxy HTTP/HTTPS en un único script de Python Características fácil de personalizar no requiere módulos externos soporta IPv4 e IPv6 soporta Conexión Persistente HTTP/1.1 soporta generación dinámica de certificados para la interceptación de HTTPS Este script funciona con Python 2.7...

EDRSandblast

EDRSandBlast EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections Notify Routine callbacks, Object Callbacks and ETW TI provider and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring. As of...

jspanda

JSPanda JSpanda is client-side prototype pollution vulnerability scanner. It has two key features, scanning vulnerability the supplied URLs and analyzing the JavaScript libraries' source code. However, JSpanda cannot detect advanced prototype pollution vulnerabilities. How JSPanda works? Uses...

vulnerable-AD

Vulnerable-AD Create a vulnerable active directory that's allowing you to test most of active directory attacks in local lab Main Features Randomize Attacks Full Coverage of the mentioned attacks you need run the script in DC with Active Directory installed Some of attacks require client...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

inquisitor

Inquisitor Aviso Este proyecto está solo parcialmente completo y aún tengo que implementar muchas de las características descritas en la siguiente publicación de blog que hice: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor es una herramienta simple para recolectar información sobre...

cve-2026-43499-m3q-azf1

GhostLock SELinux park — SM-S948U1 / AZF1 m3q Instantánea de investigación de un park de solo SELinux funcional para el Samsung Galaxy S26 Ultra SM-S948U1, nombre en clave m3q con el firmware S948U1UES3AZF1 GKI 6.12.30-android16-5. Este paquete no es un root completo. Cambia SELinux a Permissive ...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...