Devnull

DevNull DevNull is a Python CLI that automates the early, rep...

HiTMS_steganography

HiTMS: A High-Throughput Multi-Stream Linguistic Steganography Framework Research code for linguistic steganography over LLM chat dialogues , with a single-stream baseline and a batched multi-stream HiTMS protocol that hides several independent secret messages at once and exploits GPU batching fo...

CVE-2021-3560-PolkitPrivilegeEsclation

CVE-2021-3560-Polkit-Privilege-Esclation PoC Original research by Kevin Backhouse This is just a Bash PoC script, that automates the exploitation steps mentioned in Kevin Backhouse's blog. Read his post on this vulnerability:...

advisory-database

Python Packaging Advisory Database This is a community owned repository of advisories for packages published on https://pypi.org. Advisories live in the vulns directory and use a YAML encoding of a simple format. Contributing advisories Making a pull request Existing entries can be edited by simp...

CVE-2022-23222

CVE-2022-23222 Haga clic aquí si solo desea compilar y ejecutar el asunto. Lo que sigue es más o menos una traducción del artículo chino, disponible aquí. Usaremos el código del kernel principal para la versión 5.13.0 como referencia. Hay un desajuste entre los tipos de puntero disponibles y la...

sysmon-config

sysmon-config | A Sysmon configuration file This is a forked and modified version of @SwiftOnSecurity's sysmon config. It started as a is simply copy of the original repository. We merged most of the 30+ open pull requests. Thus we have fixed many of the issues that are still present in the...

ttddbg

ttddbg - Time Travel Debugging IDA plugin ⚠️ Attention IDA 8 users: using ttddbg with IDA 8 require a work-around for the moment, seeKnown issues This plugin adds a new debugger to IDA which supports loading Time Travel Debugging traces generated using WinDBG Preview. This plugin supports both x86...

dirtycaw-projet

Dirty COW - Escalada de privilegios CVE-2016-5195 Este proyecto demuestra una escalada de privilegios utilizando la vulnerabilidad Dirty COW en una máquina virtual con Ubuntu Server 16.04.1 y kernel 4.4.0-31-generic. 🔧 Entorno Máquina víctima : Ubuntu 16.04.1 vulnerable student sin privilegios...

SharpWnfSuite

SharpWnfSuite This is the repository for Windows Notification Facility WNF tools. Currently, a C port of the tools in wnfun developed by Alex Ionescu @aionescu and Gabrielle Viala @pwissenlit has been uploaded. When I develop additional tools for Windows Notification Facility, they will be upload...

kernel-debug-lab-for-virtual-box

How to set up a VirtualBox lab to debug Kernel Driver with Windbg We consider here that on Computer A windbg is already installed and on Computer B Visual Studio, the SDK and WDK are installed. 1. Open the Host network Manager to create or set up a new Virtual Box Host-Only Ethernet adapter 2...

poc-CVE-2024-23897

poc-CVE-2024-23897 CVE-2024-23897: Jenkins Arbitrary File Read Lead to RCE 🎯 Affected Products and Versions root@kitploit: Product: Jenkins Continuous Integration/Continuous Delivery server Versions: Jenkins 2.441 and earlier, Jenkins LTS 2.426.2 and earlier Fixed in: Jenkins 2.442, Jenkins LTS...

CVE-2020-1472-visualizer

CVE-2020-1472 Event Reader v1.1 8/27/2020 This script will: 1. Scan system evtx in input file folder for event 5827, 5828,5829,5830 and 5831, exact data fields, export to 582-.CSV. 2. Calls Excel to import resulting 582-.CSV, create pivot tables for common secure RPC analysis scenarios. Delete...

eero-zero-length-ipv6-options-header-dos

eeroOS Ethernet Interface Denial of Service Vulnerability CVE-2023-5324 If eero Pro 5 devices receive an IPv6 packet where the payload length is zero and contains a hop-by-hop or destination options extension header that refers to another hop-by-hop or destination options extension header that...

apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle The Apache Sling XSS Bundle provides two services for escaping and filtering XSS-prone user submitted content: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Please check the JavaDoc of each service to find out what methods they provide...

apache__jspwiki_CVE-2019-10089_2-11-0-M4

Apache JSPWiki 2.11 - Documentación root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

ed25519-unsafe-libs

ed25519-unsafe-libs Double Public Key Signing Function Oracle Attack on Ed25519 A list of potentially unsafe ed25519 signature libraries that allow a public api where secret and public key can be provided independently as signing function inputs. Misuse of these public apis can result to private...

MSSQL-Pentest-Cheatsheet

🗄️ MSSQL Pentest Cheatsheet A practical Microsoft SQL Server penetration testing cheat sheet designed for penetration testers, red teamers, and cybersecurity learners to understand how to enumerate, exploit, and abuse misconfigured MSSQL databases during security assessments. 🌐 Connect With Us 🔵...

CVE-2025-52097

CVE-2025-52097 – Reflected XSS in InstantForum.NET v4.1.4 This repository contains the public advisory, proof of concept, and supporting materials for CVE-2025-52097 , a reflected cross-site scripting XSS vulnerability identified in InstantForum.NET v4.1.4. Summary Product: InstantForum.NET v4.1....

CVE-2023-6538

CVE-2023-6538 CVE-2023-6538 is an Insecure Direct Object Reference IDOR in vulnerability found in Hitachi NAS' HNAS' System Management Unit SMU Configuration Backup & Restore functionality. This vulnerability affects SMU versions prior to 14.8.7825.01. Exploitation This exploit requires the...

Drupalgeddon-Mass-Exploiter

Drupalgeddon-Mass-Exploiter CVE-2018-7600 and CVE-2018-7602 Mass Exploiter Usuage : python3 mass.py list output workers proxydefault:none exploitnumber exploitnumber: 7=CVE-2018-7600 8=CVE-2018-7602...