CVE-2022-0332

CVE-2022-0332 Moodle da 3.11 a 3.11.4 - iniezione SQL POC root@kitploit: GET...

BetterBackdoor

BetterBackdoor Ein Backdoor ist ein Werkzeug, das verwendet wird, um Fernzugriff auf einen Rechner zu erlangen. Normalerweise haben Backdoor-Utilities wie NetCat zwei Hauptfunktionen: Remote-Eingaben in cmd oder bash zu leiten und die Ausgabe zurückzugeben. Das ist nützlich, aber auch begrenzt...

Spring4Shell-POC

Spring4Shell-POC CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof of Concept/Information + Ein verwundbarer Tomcat-Server mit einer verwundbaren spring4shell-Anwendung. Am frühen Morgen haben mehrere Quellen über einen möglichen RCE-Exploit im beliebten Java-Framework spring informiert. Die...

Hale

Informazioni Hale è un monitor/spia per botnet command & control con un design modulare per sviluppare facilmente nuovi moduli che monitorano nuovi protocolli usati dai server C&C. Hale include monitor IRC e HTTP sviluppati con Twisted per gestire la scalabilità di un grande numero di connessioni...

frida-snippets

& auch Ausgabebeispiele Inhaltsverzeichnis Nativ Lade C/C++-Modul Einmaliger Watchpoint Socket-Aktivität Open abfangen Shell-Befehl ausführen Module auflisten SQLite-Abfrage protokollieren Methodenargumente protokollieren Ganzes Modul abfangen Speichersegmente dumpen Speicherscan Stalker Cpp...

uac-a-mola

uac-a-mola Installazione Per installare uac-a-mola è necessario eseguire le seguenti azioni: 1. Scarica e installa Python 2.7.x per Windows tenendo conto della tua infrastruttura specifica, puoi trovare i binari qui: https://www.python.org/downloads/ 2. Aggiungi il percorso di Python alla variabi...

StegoScan

StegoScan Panoramica StegoScan.py è un potente strumento di nuova generazione per il rilevamento automatico della steganografia in siti web, server web e directory locali, che integra il riconoscimento di oggetti e testo basato su intelligenza artificiale con un'analisi approfondita dei file. A...

CVE-2026-82424

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been...

BeatRev

BeatRev Version 2 Haftungsausschluss / Haftung Die folgende Arbeit ist ein POC, um Malware in die Lage zu versetzen, sich selbst an ein bestimmtes Opfer zu „binden“, um die Bemühungen von Malware-Analysten zu erschweren. Ich übernehme keine Verantwortung für die böswillige Nutzung von Ideen oder...

tofu

tofu A modular tool for hacking offline Windows filesystems and bypassing login screens. Can do hashdumps, OSK-Backdoors, user enumeration and more. How it works : When a Windows machine is shut down, unless it has Bitlocker or another encryption service enabled, it's storage device contains...

DanderSpritz_lab

DanderSpritz Labor Zweck Das Ziel des DanderSpritz-Labors ist es, Forschern und Verteidigern zu ermöglichen, schnell eine voll funktionsfähige Version von DanderSpritz – Das Post-Exploitation-Toolset der Equation Group – sowie eine Windows Server 2008-Domäne und einen Client als Ziele aufzubauen...

CVE-2023-36424

Informationen ============== Windows-Kernel-Pool clfs.sys Korruption – Privilegieneskalation. CVE-2023-36424 Dieses Repo enthält eine technische Analyse und einen funktionierenden Exploit. Autor: Nassim Asrir @p1k4l4 || https://www.linkedin.com/in/nassim-asrir-b73a57122/ Schwachstelle...

cheese

Exploit di root per Quest 3/3S per l'aggiornamento del 7 agosto 2025 e precedenti, basato su CVE-2025-21479. screenshot di Magisk, Cheese e Termux con una shell di root Avvertenza: Il rooting è pericoloso. Se brickate un Quest 3/3S, non c'è modo di ripararlo. Questo disabilita tutta la sicurezza...

rainbowcrackalack

Rainbow Crackalack Autor: Joe Testa @therealjoetesta Über Dieses Projekt stellt Open-Source-Code zur Verfügung, um Regenbogentabellen zu erstellen und sie zum Nachschlagen von Passwort-Hashes zu verwenden. Während die aktuelle Version nur NTLM unterstützt, könnten zukünftige Versionen MD5, SHA-1,...

rainbowcrackalack

Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

CVE-2022-42046

EvilWfshbr CVE-2022-42046 Proof of Concept di elevazione locale dei privilegi di wfshbr64.sys Il payload appositamente creato di wfshbr64.sys e wfshbr32.sys consente a un utente arbitrario di eseguire operazioni bitwise con offset EPROCESS arbitrari e valori di flag per elevare deliberatamente il...

CVE-2026-82424

PHPGurukul Student Information System 1.0 contains a SQL injection vulnerability in the file /student_edit1.php , triggered by manipulating the ID argument. The attack can be launched remotely with low privileges and no user interaction. The exploit has been made publicly available as a proof-of-...

CVE-2026-82424 PHPGurukul Student Information System student_edit1.php sql injection

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /studentedit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...