4009 matches found
EUVD-2026-67672
An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...
CVE-2026-42007
An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...
CVE-2026-33263
When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...
EUVD-2026-67658
When mailmaxuseripconnections is set default 10 and reached, submission-login can crash with epoll panic caused by file descriptor handling issues. If running in high-security mode default for community releases, only the new submission connection gets terminated. If running in high-performance...
evil-winrar
eval-winrar evil-winrar,cve-2023-38831 Schwachstellenausnutzung und Social-Engineering-Angriffsframework evil-winrar, csv-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework Einführung evil-winrar ist ein Framework für die Ausnutzung der WinRAR-Schwachstelle csv-2023-388...
Powershell-C2
Powershell-C2 Cette attaque découle de mon Powershell Payload Excel Delivery, mais elle utilise une méthode vraiment sympa pour le commandement et contrôle/persistance sur la machine. Une procédure pas à pas est disponible ici :...
CVE-2025-33053-POC
CVE-2025-33053 - WebDAV Esecuzione Remota di Codice RCE PoC & Simulazione C2 ⚠️ Solo a Scopo Educativo Questo progetto dimostra un proof-of-concept che sfrutta WebDAV e la consegna di file .url per ottenere un'esecuzione remota di codice realistica. Include un eseguibile fittizio e una simulazione...
scaredycat
SCAREDYCAT! versione 0.1 beta Script Python per generare un file MP4 dannoso e avviare un server web che ospita una pagina con il file 'video' incorporato sulla porta 8080. Questo sfrutta un'altra vulnerabilità di Stagefright, la vulnerabilità di integer overflow CVE-2015-3864, pubblicata da Exod...
lnkbomb
Lnkbomb Lnkbomb è usato per caricare file di collegamento dannosi su condivisioni di file non sicure. La vulnerabilità esiste perché Windows cerca un file icona da associare al file di collegamento. Questo file icona può essere indirizzato alla macchina del penetration tester su cui è in esecuzio...
PHPJabbers Food Delivery Script - SQL Injection
PHPJabbers Food Delivery Script 3.0 has a SQL injection SQLi vulnerability in the "q" parameter of index.php. id: CVE-2023-40748 info: name: PHPJabbers Food Delivery Script - SQL Injection author: ritikchaddha severity: critical description: | PHPJabbers Food Delivery Script 3.0 has a SQL injecti...
WordPress Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Remote Code Execution
Print Invoice & Delivery Notes for WooCommerce plugin for WordPress = 5.8.0 contains a remote code execution caused by missing capability check, PHP enabled in Dompdf, and missing escape in template.php, letting unauthenticated attackers execute code on the server. id: CVE-2025-13773 info: name:...
PHPJabbers Food Delivery Script v3.0 - SQL Injection
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php. id: CVE-2023-40749 info: name: PHPJabbers Food Delivery Script v3.0 - SQL Injection author: ritikchaddha severity: critical description: | PHPJabbers Food Delivery Script v3.0 is vulnerable...
EGESPLOIT
EGESPLOIT EGESPLOIT ist eine Golang-Bibliothek für die Malware-Entwicklung, sie hat einige einzigartige Funktionen für die Meterpreter-Integration. DOKUMENTATION root@kitploit: CalculateChecksumx : Funktion berechnet eine x-stellige 8-Bit-Prüfsumme für reverse HTTP/HTTPS Meterpreter-Verbindungen,...
ladder
Ladder Ladder एक http वेब प्रॉक्सी है। 简体中文 Ladder एक डेवलपर टूल है जिसका उपयोग आधुनिक वेबसाइटों पर paywall कार्यान्वयन और सामग्री वितरण व्यवहार का परीक्षण और विश्लेषण करने के लिए किया जाता है। यह डेवलपर्स, शोधकर्ताओं और प्रकाशकों को विभिन्न क्लाइंट वातावरणों जैसे ब्राउज़र और क्रॉलर का अनुकरण करन...
sshLooter
NON USARE QUESTO Esiste una versione C che è molto migliore sshLooterC sshLooter Script per rubare password da ssh. Installazione root@kitploit: git clone https://github.com/mthbernardes/sshLooter.git cd sshLooter Configurazione root@kitploit: Edit the script on install.sh, and add your telegram...
CVE-2018-9276
CVE-2018-9276 PRTG 18.2.39 Iniezione di comandi autenticata Reverse Shell https://nvd.nist.gov/vuln/detail/CVE-2018-9276 Versione migliorata di un exploit scritto da https://github.com/M4LV0. Ho usato i dati POST dal loro script ma l'ho reso più affidabile dato che non avevo molto successo con...
python-log4rce
Python Log4RCE Un PoC completo e puro Python3 per CVE-2021-44228. Esempio root@kitploit: python3 log4rce.py --target "linux" --payload "PAYLOAD" http -X POST --url "http://localhost:8080/" --data "address=" root@kitploit: INFO:HTTP:Running on local port 1337 INFO:HTTP:Remote target is...
Fudge
Fudge Ich hatte einigen Erfolg bei Phishing-Einsätzen, indem ich den Inhalt einer Datei base64-codierte, in eine HTML-Datei einfügte und sie beim Öffnen der HTML-Datei durch den Benutzer decodieren und ablegen ließ. Verwendung Es gibt vorkompilierte Binärdateien auf dem releases Tab für sowohl...
elfpack
ElfPack: Aggancio di sezioni ELF per la consegna di payload senza stadi Punti salienti Panoramica dei meccanismi di bundling del payload: compilazione, linking e caricamento. Compatibilità binaria e creazione di payload debolmente accoppiati al loro meccanismo di consegna. Evitare il caricamento...