CVE-2025-40019-Essiv

CVE-2025-40019-Essiv Un PoC para CVE-2025-40019 en el módulo ESSIV. exploit en progreso para la explotación, nótese que scatterlist tanto req-src como req-dst tiene el miembro pagelink. pagelink es una forma de codificar información de la tabla sg junto con el puntero de página, según lo que...

CVE-2023-32233-reproduction

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root-Cause Analysis What this repo is: my hands-on reproduction and study of CVE-2023-32233, a use-after-free in the Linux kernel Netfilter nftables subsystem that allows local privilege escalation, publicly disclosed in May 2023 by Patryk...

CVE-2025-60854

CVE-2025-60854 D-link AX1500 Vulnerability I recently conducted a vulnerability analysis on a D-Link router and would like to document my findings. Target model: D-Link AX1500 Version : 1.20.01 and below The CVE number for this issue is currently published. The vulnerable function is as follows:...

jimureport-2.5.1-rce

JimuReport 2.5.1 Unauthorized Remote Code Execution Vulnerabil...

Exploit for CVE-2026-64560

Xiaomi 15 dada CVE-2026-64560 Device-specific adaptation...

akto v2.32.5

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

CVE-2025-48384

Resumen de CVE-2025-48384 CVE-2025-48384 es una vulnerabilidad crítica en Git, el sistema de control de versiones distribuido más utilizado. Implica un manejo inadecuado de los caracteres de retorno de carro CR en los valores de configuración, lo que puede provocar problemas de path traversal...

ai-security-battle

🤖 AI Security Battle System Red Team vs Blue Team: Adversarial ML Combat Simulation A comprehensive adversarial machine learning security simulation where Red Team attackers battle against Blue Team defenders in a 30-minute AI/ML security warfare scenario. 🎯 Project Overview This system simulates...

rdap v0.10.2

OpenRDAP is a command line RDAP client implementation in Go. https://www.openrdap.org - homepage https://www.openrdap.org/demo - live demo Features Command line RDAP client Output formats: text, JSON, WHOIS style Query types supported: ip domain autnum nameserver entity help url domain-search...

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack

From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack It shook the world in 2017 and has evolved into today’s CVE‑2025‑2776. Microsoft still relies on SMBv1, this article will explain how attackers have tweaked the chain from a simple DLL to a full reverse‑shell stack, and what that...

CVE-2019-15715

CVE-2019-15715 El repositorio actual es una implementación en Python3 de CVE-2019-15715 y tiene como objetivo centrarse únicamente en la mejora del CVE-2019-15715 reportado previamente aquí por Nikolas Geiselman, añadiendo la implementación de parámetros de Python para hacer el script más flexibl...

ReactNext2Shell

es-define-property Object.defineProperty, but not IE 8's broken one...

sparkplugFuzzer

Sparkplug B MQTT Security Fuzzer A comprehensive security assessment tool for testing Sparkplug B MQTT protocol implementations. The fuzzer systematically tests all protocol fields across all 9 message types, discovers live devices on the network, and produces detailed logs for analysis...

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Description An attacker can exploit this vulnerability by uploading and executing a specially crafted PHP file on the Ferozo hosting platform. When accessed, the file launches a series of SSRF attempts targeting internal...

CVE-2025-27136-XXE-LocalS3

CVE-2025-27136 XXE-LocalS3 Prueba de concepto para CVE-2025-27136 XXE en Local-S3 └─$ python3 exploit.py http://$ip:8080 /etc/passwd + Servicio S3 detectado + Creando bucket: xxe-32d14993 + Respuesta del servidor: ac3aaf20-e59a-4705-9505-3ebb01db7fc1 + Recuperando archivo mediante ?location +...

cryptohackfirm

Cryptohack A semi-secure, hacker-friendly hardware crypto wallet on the hip-badge ESP32-C3 platform with the onboard ATECC608B secure element. Signs transactions for BTC , ETH + 8 EVM chains, SOL , and XMR with an on-device SIGN screen the user has to approve before any private key touches the...

Windows-Privilege-Escalation-Notes

Windows Privilege Escalation Preferable room is https://tryhackme.com/room/windows10privesc, but u can use anything of your choice. Some resources, https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide/...

proteus

Proteus Proteus - The axiom database and API https://github.com/pry0cc/axiom. Originally, written for Hacking Together an ASM Platform Using ProjectDiscovery Tools. Setup First, clone the repository root@kitploit: git clone https://github.com/pry0cc/proteus /.proteus cd /.proteus Next, modify...

RunasCs

RunasCs RunasCs is an utility to run specific processes with different permissions than the user's current logon provides using explicit credentials. This tool is an improved and open version of windows builtin runas.exe that solves some limitations: Allows explicit credentials Works both if...

sysmon-modular

sysmon-modular | A Sysmon configuration repository for everybody to customise This is a Microsoft Sysinternals Sysmon download here configuration repository, set up modular for easier maintenance and generation of specific configs. Please keep in mind that any of these configurations should be...