gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install root@kitploit: npm install gattacker Usage Configure Running both components Set up variables in config.env:...

WP2Shell-Scanner

WP2Shell Scanner A command line tool that checks whether a WordPress site is exposed to WP2Shell CVE-2026-63030 and CVE-2026-60137. It reads the WordPress version and REST API surface over read-only requests and reports a verdict. It does not exploit anything. !WARNING For authorised testing only...

CVE-2026-1122-IoT-Firmware-Update-Signature-Bypass-via-Low-Order-Point-Injection

5. CVE-2026-1122 – IoT Firmware Update Signature Bypass via Low‑Order Point Injection Overview An IoT device’s OTA firmware verification uses a flawed Ed25519 implementation that does not reject public keys with small‑order components, allowing an attacker to forge a valid signature for malicious...

showstopper

ShowStopper - Herramienta de exploración de trucos Anti-Debug Contribuido por Check Point Software Technologies LTD. Programado por Yaraslau Harakhavik Resumen El proyecto ShowStopper es una herramienta para ayudar a los investigadores de malware a explorar y probar técnicas anti-debug o verifica...

Exploit for Code Injection in Gitea

🫖 CVE-2026-60004 Gitea Validator A standalone discovery, as...

BYOVD

BYOVD is a collection of PoCs demonstrating how vulnerable drivers can be exploited to disable AV/EDR solutions. The collection includes both undocumented drivers and those with existing coverage in LOLDDrivers or Microsoft's recommended driver block rules. Since its initial discovery, the TfSysM...

0day-Rubbish batch-8-2026-08

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

So You Want To Build A Nethunter Kernel

So You Want To Build A Nethunter Kernel Introduction The biggest hurdle for most people who want to set up a Nethunter device is the kernel requirement. Unless your device already has a prebuilt and maintained kernel, then you will be told to build one yourself. There is a lot of documentation on...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

CVE-2024-9707

CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation Description The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the...

Rootsmart-v2.0

Rootsmart 2.0 w/ cve-2019-2215 + Ransomware Disclaimer This project is solely for educational purposes. This project utilise code from rkshrksh/2048-Game and kangtastic/cve-2019-2215. Project Description This project is part of Singapore Institute of Technology Mobile Security module. The project...

HiTMS_steganography

HiTMS: A High-Throughput Multi-Stream Linguistic Steganography Framework Research code for linguistic steganography over LLM chat dialogues , with a single-stream baseline and a batched multi-stream HiTMS protocol that hides several independent secret messages at once and exploits GPU batching fo...

ssh_enum_py

sshenumpy script de enumeración de usuarios SSH basado en diferencias de timing y respuestas de autenticación. Explota el mismo vector que CVE-2018-15473 en versiones vulnerables de OpenSSH ≤ 7.7, aunque también puede revelar patrones en configuraciones modernas. Funciona en Python 3 + Paramiko y...

Windows-2

Windows-2 BlueKeep Vulnerable Lab - CVE-2019-0708 1. Overview This repository contains a deliberately vulnerable Windows lab designed to demonstrate the BlueKeep vulnerability affecting the Remote Desktop Protocol RDP service. BlueKeep is a critical pre-authentication Remote Code Execution RCE...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server および Confluence Data Center には、CVE-2022-26134 として識別される重大な未認証リモートコード実行の脆弱性が含まれています。これは、2022年6月2日にAtlassianが公開したセキュリティアドバイザリによるものです。この脆弱性は公開時点ではパッチが提供されておらず、実際に悪用されていました。6月3日時点では、パッチと一時的な回避策の両方が利用可能です。 このリポジトリは実験および教育目的のみを対象としています。 依存関係 Docker Nuclei...

log4j2-bugmaker

Log4j2-BugMaker CVE-2021-44228 Log4Shell 脆弱性デモプロジェクト これは、Log4j2 のリモートコード実行脆弱性（Log4Shell）を学習・研究するためのデモプロジェクトです。 ⚠️ セキュリティ警告 このプロジェクトはセキュリティ研究および教育目的のみに使用してください。本番環境では使用しないでください！ このプロジェクトは、重大なセキュリティ脆弱性を含む Log4j 2.14.1 を使用しています。 📋 環境構成 Spring Boot : 2.6.1 Log4j2 : 2.14.1 脆弱性のあるバージョン Java : 8 JDK 1.8 ...

CVE-2022-23222

CVE-2022-23222 Haga clic aquí si solo desea compilar y ejecutar el asunto. Lo que sigue es más o menos una traducción del artículo chino, disponible aquí. Usaremos el código del kernel principal para la versión 5.13.0 como referencia. Hay un desajuste entre los tipos de puntero disponibles y la...

sysmon-config

sysmon-config | A Sysmon configuration file This is a forked and modified version of @SwiftOnSecurity's sysmon config. It started as a is simply copy of the original repository. We merged most of the 30+ open pull requests. Thus we have fixed many of the issues that are still present in the...

ttddbg

ttddbg - 时间旅行调试 IDA 插件 ⚠️ 注意：使用 IDA 8 的用户，在将 ttddbg 与 IDA 8 配合使用时目前需要一种变通方法，请参阅已知问题 此插件为 IDA 添加了一个新的调试器，支持加载使用 WinDBG Preview 生成的时间旅行调试跟踪记录。 此插件支持 x86 和 x64 跟踪记录，并由此支持 IDA 和 IDA64。 安装 可以使用发布页面上的安装程序来安装此插件。只要你已安装 WinDBG Preview，安装程序将自动安装所需的依赖项。 使用方法 安装后，您可以在 IDA 界面中选择 ttddbg 调试器，并将您的 .run...

ttddbg

ttddbg - Time Travel Debugging IDA plugin ⚠️ Attention IDA 8 users: using ttddbg with IDA 8 require a work-around for the moment, seeKnown issues This plugin adds a new debugger to IDA which supports loading Time Travel Debugging traces generated using WinDBG Preview. This plugin supports both x86...