415265 matches found
cve-2021-42013-docker-lab
CVE-2021-42013 Introduction It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not...
Get-RBCD-Threaded
Get-RBCD-Threaded Herramienta para descubrir rutas de ataque de delegaciĆ³n restringida basada en recursos en entornos de Active Directory Basada casi por completo en las maravillosas publicaciones de blog "Wagging the Dog: Abusing Resource-Based Constrained Delegation to Attack Active Directory" ...
Reverse-Engineering
Un tutorial GRATUITO e integral de ingenierĆa inversa que cubre las arquitecturas x86, x64, ARM de 32/64 bits, AVR de 8 bits y RISC-V de 32 bits. PROMO DEL CURSO GRATUITO DE HACKING EMBEBIDO AQUĆ Ćnete al Discord de DC540 AQUĆ OUROBOROS BADGE AQUĆ CĆMO FUNCIONA AQUĆ HAZ CLIC EN LA IMAGEN DE ABAJO...
pythoncode-tutorials
Python Code Tutorials This is a repository of all the tutorials of The Python Code website. List of Tutorials Ethical Hacking Scapy Getting Started With Scapy: Python Network Manipulation Tool Building an ARP Spoofer. code Detecting ARP Spoof attacks. code How to Make a DHCP Listener using Scapy ...
CVE-2025-55349
CVE-2025-55349 ā pm2 Arbitrary Code Execution via postinstall Discoverer : Golden Ticket Labs Vendor : Unitech pm2 Date Assigned : August 20, 2025 MITRE Description An issue in the lib/API/Modules/NPM.js component of Unitech PM2 v5.4.2 allows arbitrary code execution by installing packages with...
LID
root@kitploit: āāā āāāāāāāāāā āāā āāāāāāāāāāā āāā āāāāāā āāā āāā āāāāāā āāā āāāāāāāāāāāāāāāāāāā āāāāāāāāāāāāāāāāāā Linux Integrity Drift ā "Linux is Dying" ā Systematic discovery of kernel code paths that bypass LSM security guarantees The gate was never breached. It was walked around. What is LI...
CVE-2021-24891-Simulation
A hands-on, containerized lab environment to simulate and exploit a DOM-based Cross-Site Scripting XSS vulnerability in the Elementor Website Builder WordPress plugin, identified as CVE-2021-24891. š About The Vulnerability This lab demonstrates a DOM-based Cross-Site Scripting XSS vulnerability ...
CVE-2023-32315-EXPLOIT
CVE-2023-32315 - Openfire Authentication Bypass This repository highlights a high security issue impacting various versions of Openfire. Openfire, a cross-platform real-time collaboration server utilizing the XMPP protocol developed by the Ignite Realtime community, faces a severe vulnerability...
DonkAI
Hands-on lab for the OWASP Top 10 for LLM Applications 2025 - no real LLM required. DonkAI is deliberately vulnerable web app you can run in one command and use to learn how LLM-integrated systems get broken by actually breaking them. Every OWASP LLM Top 10 category is represented by at least one...
recox
Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...
zynos-attacker
IMPORTANT : These scripts are intended for educational purposes only. Description : With these scripts you can attack ZynOS routers and modify/extract anything you want on the target router from extracting ISP username and password to injecting rogue DNS servers IPs...
CVE-2023-27350
! Be careful executing this as it re-configures the server config in order to execute commands. The script reverts the changes on exit but might not revert it if the process is improperly killed ! CVE-2023-27350 Papercut Unauthenticated RCE Versions root@kitploit: The script automatically tests i...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The fix for CVE-2025-68161 https://logging.apache.org/security.htmlCVE-2025-68161 was incomplete: it addressed hostname verification only when enabled v...
GATOR
KIT DE ATAQUE A GCP PARA INVESTIGACIĆN OFENSIVA GATOR - GCP Attack Toolkit for Offensive Research , una herramienta diseƱada para ayudar en la investigaciĆ³n y explotaciĆ³n de entornos de Google Cloud. Ofrece una amplia gama de mĆ³dulos adaptados para apoyar a los usuarios en diversas etapas de...
CVE-2025-49144
Notepad++ Binary Planting PoC CVE-2025-49144 ā ļø EDUCATIONAL PURPOSE ONLY This code is designed for educational and research purposes to understand binary planting vulnerabilities. Use only in controlled environments with proper authorization. š Overview This Proof of Concept demonstrates the binar...
vm2
vm2 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Installation root@kitploit: npm install vm2 Quick Examples root@kitploit: import VM from 'vm2'; const vm = new VM; vm.runprocess.exit; // TypeError: process.exit is not a function root@kitploit: import Node...
Log4shell
Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...
Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities
Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...
ServiceCheater
ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Analysis of Android Foreground Service Privilege Escalation Vulnerability Vulnerability Background In the AOSP August 2020 patch, a vulnerability in the framework layer AMS was disclosed, numbered CVE-2020-0108, rated high, and another numbered...
CVE-2026-43284
šØ CVE-2026-43284 - Dirty Frag šØ Universal Linux Kernel Local Privilege Escalation š Overview Dirty Frag also known as Copy Fail 2 is a high-impact local privilege escalation vulnerability in the Linux kernel. It allows an unprivileged local user to obtain root privileges on affected systems...