ModuleShifting

ModuleShifting Esta herramienta se presentó en la charla x33fcon 2023: "Mejorando la sigilosidad de las técnicas de inyección de memoria" Video Blogpost Qué es ModuleShifting es una variación más sigilosa de las técnicas de inyección Module Stomping y Module Overloading. Está implementado en Pyth...

browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

z9

Analizador de registros PowerShell z9 Japonés Resumen Esta herramienta detecta el artefacto del malware basado en PowerShell a partir del registro de eventos de PowerShell. Demo en línea Instalación root@kitploit: git clone https://github.com/Sh1n0g1/z9 cd z9 pip install -r requirements.txt Cómo...

CVE-2024-3922-Poc

CVE-2024-3922-Poc Dokan Pro Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://192.168.110.184:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/126.0.0.0 Safari/537.36 Accept:...

CVE-2024-3495-Poc

CVE-2024-3495-Poc CVE-2024-3495 Country State City Dropdown CF7 Accept-Encoding: gzip, deflate Accept: / Accept-Language: en-US;q=0.9,en;q=0.8 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 Apple...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Remote Code Execution without authentication nexus 关于命令回显： root@kitploit: functionx, y, z, c, integer, defineClass c=1.class.forName'java.lang.Character...

CVE-2020-15394-PoC

CVE-2020-15394 DBMS: MSSQL TRUE condition in sql query root@kitploit: POST /AppManager/json/ApmAdminServices/checkResourceID HTTP/1.1 Host: redacted.com Content-Type: application/x-www-form-urlencoded Content-Length: 67 resourceIds=1+AND+SELECT+CASE+WHEN+1=1+THEN+1+ELSE+1/0+END=1-- root@kitploit:...

ActiveMQ-RCE

ActiveMQ RCE Effect version verison open -a calculator Open a http server root@kitploit: python3 -m http.server Run the Main.java file change the address as needed...

CVE-2022-23222

CVE-2022-23222 Chinese writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run root@kitploit: $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps' running + phase1/8...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 A remote code execution vulnerability occurring in CGI mode of PHP language registered in the detection of PHP-CGI CVE-2024-4577 Argument Injection events from external IPs to internal servers. This is an event that occurs when PHP is executed in CGI mo...

vmp2

مقدمة هذا المستودع هو مجموعة من الأدوات القديمة للعمل مع البرامج المحمية بـ VMProtect 2. تتيح هذه الأدوات فك التغليف والتحليل وإزالة الظاهرية التجريبية للبرامج المحمية بـ VMProtect 2. وفي صميم هذه المجموعة توجد vmprofiler ، وهي مكتبة أدوات مساعدة توفر المنطق الأساسي المستخدم في جميع الأدوات الأخر...

GDir-Thief

GDir-Thief Herramienta de Red Team para exfiltrar el directorio de personas de Google de la organización objetivo al que tengas acceso, a través de la API de People de Google. CÓMO HACERLO Crear un nuevo proyecto de Google Cloud Platform GCP Pasos para obtener el Token de Acceso a la API de Googl...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

CVE-2023-6360

CVE-2023-6360 Analysis Report Overview CVE-2023-6360 is an SQL injection vulnerability found in a specific WordPress plugin, allowing an attacker to exploit security weaknesses in the web application to inject malicious SQL code into the database. This can lead to serious security issues such as...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE Analysis Report Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...

CryptoChat

CryptoChat : Beyond Secure Messaging 🛡️ Welcome to CryptoChat - where conversations remain truly private. Built on the robust Python ecosystem, our application ensures that every word you send is wrapped in layers of encryption. Whether you're discussing sensitive business details or sharing...

towaos-lab-cve-2020-11023

CVE-2020-11023 - jQuery XSS Vulnerability Attack Payloads root@kitploit: alert1 root@kitploit: Countermeasures ⚠️ Important : When using .html, jQuery alone cannot completely prevent it 1. Using .text method ⭐️Recommended root@kitploit: // Safe: Not interpreted as HTML $"result".textuserInput; 2...

collision-webshell

Colisão de Webshell Este repositório contém 2 arquivos que têm o mesmo hash MD5: webshell.php normal.php MD5 dos arquivos: root@kitploit: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php Hexdump do webshell.php: root@kitploit: $ hexdump -C...

UniPwn

Unitree Robot BLE Service Command Injection Analysis Author: Bin4ry aka Andreas Makris [email protected] Co-Author: h0stile aka Kevin Finisterre Contributor: legion1581 aka Konstantin Severov from theroboverse helped to fix the payload for the injection and proved it with a fully working PoC...

ByteCaster

ByteCaster Швейцарский нож для шифрования полезной нагрузки, обфускации и преобразования в байтовые массивы — всё одной командой! Поддерживает 3 алгоритма шифрования, 4 алгоритма кодирования / обфускации и 14 форматов вывода. Установка Скачайте скомпилированный бинарный файл или скомпилируйте...