Chimera

Chimera Hardware Emulation & Proximity Exploitation Why Hak5 gear is heavy and obvious. My phone has a full Linux kernel in it, so I made it do the same job — HID emulation, RNDIS, mass storage, the whole thing — straight through ConfigFS. No extra hardware. No cables dangling out of a bag. Plug...

Red-Team-Infrastructure-Wiki

本维基旨在为搭建具有韧性的红队基础设施提供资源。它是为了补充 Steve Borosh（@424f424f）和 Jeff Dimmock（@bluscreenofjeff）在 BSides NoVa 2017 上的演讲“末日准备者：强化你的红队基础设施”（幻灯片）而创建的。 如果您想添加内容，请在仓库中提交 Pull Request 或提交 issue。 感谢本维基中所有引用内容的作者，以及所有贡献者！ 目录 设计考量 功能隔离 使用重定向器 示例设计 更多资源 域名 分类与黑名单检查资源 钓鱼 简易基于 Web 的钓鱼 Cobalt Strike 钓鱼 Evilginx 本地部署 钓鱼...

CVE-2026-85405

Eleveo Call Recording Software 9.7.0 contains a cross-site scripting (XSS) vulnerability in the /callrec/roleAddAction.do endpoint. Manipulating the name/username argument allows a remote, authenticated attacker with user interaction to inject scripts, resulting in a low integrity impact. The exp...

CVE-2026-85405 Eleveo Call Recording Software roleAddAction.do cross site scripting

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...

CVE-2026-85405 Eleveo Call Recording Software roleAddAction.do cross site scripting

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...

EUVD-2026-70875

A flaw has been found in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/roleAddAction.do. Executing a manipulation of the argument name/username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may b...

CVE-2025-4126

POC-CVE-2025-4126 智能合约重入攻击漏洞验证 智能合约重入攻击 PoC 本仓库包含一个概念验证（PoC），演示以太坊智能合约中的重入攻击 漏洞。该 PoC 包括一个存在漏洞的智能合约、一个攻击者合约，以及在本地测试环境中复现该攻击的说明。 目录 概述 漏洞描述 PoC 环境搭建 运行 PoC 许可证 概述 重入是以太坊智能合约中一种常见的漏洞，攻击者可以在第一次调用完成之前，通过外部合约重复回调原始合约，从而可能耗尽资金或操纵状态。此 PoC 演示了攻击者如何利用一个存在漏洞的合约来窃取以太币。 漏洞描述...

network-attack-detection

使用机器学习的网络攻击检测 描述 本项目利用机器学习技术对端口扫描、拒绝服务（DoS）和恶意软件等网络攻击进行分类。输入数据采用 Netflow V9 格式，这是 Cisco 使用的标准格式。 分类使用以下模型完成： K-最近邻（KNN） 带 RBF（径向基函数）核的支持向量机分类器（SVC） 使用主成分分析（PCA）和支持向量机分类器（SVC）的流水线 袋装分类器（基于 RBF 核的 SVC） 随机森林分类器 极端随机树分类器 神经网络（MLPClassifier） 本项目使用 Python 实现，基于 Jupyter Notebook 以及多个常用库，包括...

ble-cve2025-attack-new-version

ble-cve2025-attack-new-version android-ble-cve-2025-4866 🔐 CVE-2025-4866のPoC — Android BLE脆弱性（公開版） 📡 AndroidデバイスにおけるBLE認証の脆弱性の悪用（公開PoCのみ）。 👨💻 BloodCode Labs — 2025年 開発。...

words-scraper

Words Scraper Selenium based web scraper to generate passwords list. Installation root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriv...

Puwr

目次 Puwrについて Puwrの使用方法 ポートスキャン 発表例 免責事項 将来の計画 Puwr SSHを介してより多くのホストを発見することで、ローカルネットワーク上の攻撃対象領域を簡単に拡張できます。 SSHサービスを実行しているマシンを使用して、Puwrは指定されたサブネット範囲内のIPをスキャンし、成功したpingリクエストを返送します。 これにより、侵害されたマシンからピボット攻撃を仕掛けることができ、通常は自分のデバイスから発見できないホストを教えてくれます。...

CVE-2019-11043

CVE-2019-11043 php-fpm+Nginx 远程代码执行 0x01 安装 phuip-fpizdam-Mac go get github.com/neex/phuip-fpizdam go install github.com/neex/phuip-fpizdam root@kitploit: ale@Pentest /go go get github.com/neex/phuip-fpizdam ale@Pentest /go go install github.com/neex/phuip-fpizdam ale@Pentest /go ls bin src...

CVE-2026-85399

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

CVE-2026-85398

A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

CVE-2026-85401

A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...

CVE-2026-85402

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

gato

!WARNING このリポジトリは非推奨であり、アーカイブされています Gato は、Praetorian のマルチプラットフォーム CI/CD 脆弱性検出および攻撃自動化ツールである Trajan に置き換えられました。Trajan は、GitHub Actions（Gato）および GitLab（Glato）の CI/CD 攻撃機能を単一の積極的にメンテナンスされているプロジェクトに統合します。 Trajan に移行してください: https://github.com/praetorian-inc/trajan...

CVE-2026-85403 code-projects Doctor Appointment System contactus.php sql injection

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-85403

A SQL injection vulnerability exists in code-projects Doctor Appointment System 1.0 via the firstname argument in /contactus.php. The flaw allows remote exploitation with no required privileges or user interaction, rated CVSS 3.1: 7.3 (HIGH) . The exploit has been published with proof-of-concept ...

EUVD-2026-70874

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...