LOIC

概述 低轨道离子炮（LOIC ）是一款开源网络压力测试工具，采用 C 编写。 LOIC 基于 Praetox 的 LOIC 项目，项目地址为 https://sourceforge.net/projects/loic/ 。 免责声明 LOIC 仅用于教育目的，旨在帮助服务器所有者培养"黑客防御"意识。本工具不提供任何担保。 您不得将本软件用于非法或不道德的目的。这包括可能引起刑事或民事责任的行为。 在任何情况下，许可方均不对被许可方的任何行为或不当行为负责。 如何在 Windows 上运行 请获取二进制文件！ 需要 Microsoft .NET Framework 3.5 Service...

CVE-2023-30226

CVE-2023-30226 Rizin is a reverse engineering framework forked from radare2, a flaw was discovered in its ELF parser code that would allow for a crafted file to perform a denial of service. This would prevent a user from being able to load the file into rizin but still hold no impact on the...

CVE-2025-31650

TomcatKiller - CVE-2025-31650 🚨 Apache Tomcat HTTP/2 DoS 취약점CVE-2025-31650에 대한 개념 증명PoC 이 스크립트는 HTTP/2를 통해 잘못된 형식의 priority 헤더를 전송하여 Apache Tomcat에서 메모리 고갈 상태를 유발합니다. 🎯 영향을 받는 버전 Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39 Apache Tomcat 11.0.0-M2 – 11.0.5 ⚙️ 기능 ✔️ HTTP/2 지원 확인 ✔️...

CVE-2026-43499-PoC-Scanner

CVE-2026-43499 PoC Scanner This repository contains a Go-based scanner and proof-of-concept implementation for a Linux kernel vulnerability related to CVE-2026-43499. The project is intended for research, defensive analysis, and authorized security testing only. Overview The code in this reposito...

htshells

HTSHELLS - .htaccess 파일을 통한 자체 포함 웹 셸 및 기타 공격 공격은 module.attack.htaccess 형식으로 명명되며 공격 유형별로 디렉토리에 그룹화되어 있습니다. 필요한 항목을 선택하여 .htaccess라는 새 파일로 복사하고, 업로드하기 전에 편집이 필요한지 파일을 확인하세요. 파일에 달리 명시되지 않는 한 웹 셸은 쿼리 매개변수 c에서 명령을 실행합니다. 준비하려면 ./prepare.sh file을 실행하면 업로드할 .htaccess 파일이 생성됩니다. 예: root@kitploit: $...

HTTP3-attacks

HTTP3-attacks CVE-2022-30592 Basado en el trabajo: E. Chatzoglou, V. Kouliaridis, G. Kambourakis, G. Karopoulos, y S. Gritzalis,"A hands-on gaze on HTTP/3 security through the lens of HTTP/2 and a public dataset", Computers & Security, p. 103051, 2022. El presente repositorio tiene como finalidad...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer https://nvd.nist.gov/vuln/detail/CVE-2019-7609 CVE-2019-7609 This vulnerability is a Prototype Pollution vulnerability found in Kibana. Exploiting this vulnerability can lead ...

autodeauth

autodeauth 一个自动解除本地网络认证的工具/服务 已在 Raspberry Pi OS 和 Kali Linux 上测试 安装 root@kitploit: $ chmod +x setup.sh $ sudo ./setup.sh 可通过编辑 /etc/systemd/system/autodeauth.service 修改此项 ? 输入用于 autodeauth 服务的 WiFi 接口：wlan0 安装完成！你可以使用 sudo autodeauth -h 查看可用选项。 查看 README 获取关于配置/启动服务的更多信息 选项 root@kitploit: $ sudo...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC This repository contains a PoC for vulnerabilities uncovered in Bandiview 7.05 using fuzzing CVE-2024-45870 JXR File Parsing DoS Vulnerability CVE-2024-45871 PSD File Parsing DoS Vulnerability CVE-2024-45872 PSD File Parsing Stack Buffer Overflow Details Software: BandiVie...

CVE-2018-6389

doser.py Herramienta DoS para solicitudes HTTP inspirada en hulk pero con más funcionalidades escrita en Python: Ejemplos 999 hilos envían solicitudes GET: root@kitploit: python doser.py -t 999 -g 'https://targeted.site.com' 999 hilos envían solicitudes POST con datos json: root@kitploit: python...

Cisco Unified IP Conference Station 7937G - Denial-of-Service

Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to restart the device remotely via specially crafted packets that can cause a denial-of-service condition. Note: We cannot prove this vulnerability exists. Out of an abundance of caution, this CVE is being assigned...

esp32-wifi-penetration-tool

Herramienta de Penetración Wi-Fi para ESP32 Este proyecto presenta una herramienta universal para la plataforma ESP32 para implementar varios ataques Wi-Fi. Proporciona algunas funcionalidades comunes que se utilizan habitualmente en ataques Wi-Fi y facilita la implementación de nuevos ataques...

CVE-2020-11881

CVE-2020-11881 Denegación de servicio remota de MikroTik SMB DoS Este informe describe CVE-2020-11881, una denegación de servicio DoS remota no autenticada para el servicio SMB de MikroTik que se ejecuta en RouterOs. La vulnerabilidad permite a un atacante bloquear el servicio SMB en ejecución y...

CVE-2020-0796-POC

CVE-2020-0796 预认证POC c 2020 ZecOps, Inc. - https://www.zecops.com - 发现攻击者的错误 用于检测CVE-2020-0796 / "SMBGhost" 的POC 预期结果：蓝屏 仅用于教育和企业环境中的测试。 ZecOps不对代码负责，使用者自行承担风险。 如果您对用于服务器、终端和移动设备的无代理DFIR工具感兴趣，可自动检测SMBGhost及其他类型攻击，请联系[email protected]。 用法 CVE-2020-0796-POC.exe 如果省略，则POC在本地主机（127.0.0.1）上执行。...

CVE-2016-2233

CVE-2016-2233 CVE-2016-2233 es una vulnerabilidad de desbordamiento de búfer basado en pila relacionada con un software de IRC muy utilizado, Hexchat. Construimos un servidor de IRC y lanzamos el ataque sobre él para hacer que todos los clientes conectados al servidor se bloqueen. Explotamos...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool root@kitploit: Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam...

EUVD-2026-70783

MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODEREPORT messages, allowing attackers to exhaust memory by supplying unbounded distinct node names. Attackers can publish crafted NODEREPORT data to cause memory exhaustion and stall the operator...

EUVD-2026-70782

MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vectors within ShoreBroker::handleMailNodePing. A single publisher can supply unbounded distinct community names to grow retained state and per-pass work without limit, causing memory...

EUVD-2026-70810

MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the attacker-claimed identity intact. Attackers can send crafted UDP datagrams to pShare input routes to inject messages into the local...