VectoredOverloading

VectoredOverloading Vectored Overloading is a local PE injection technique that was first observed in the KidKadi malware. It works by manipulating the load of a legitimate DLL using Hardware Breakpoints HWBP and Vectored Exception Handling VEH to change the DLL section object on-the-fly...

instrumentation_callbacks

instrumentationcallbacks Instrumentation callbacks are quite a fun undocumented part of Windows. All the code in this repository is released under the MIT license. This repository uses google style C++ spacing. PRs are welcome if you find issues, bugs, or believe a specific feature should be adde...

Vectored-Exception-Handling-Squared

Vectored Exception Handling Squared A Rust Proof of Concept. Read more on my blog, all original research by CrowdStrike, this is just the POC for it! Unless I am blind; there does not seem to be much out there POC's etc relating to the discovery made by CrowdStrike researchers, called Vectored...

ShellGhost

ShellGhost A memory-based evasion technique which makes shellcode invisible from process start to end. Motivation I wanted to share this shellcode self-injection POC to showcase some AV/EDR evasion concepts that may turn useful for Red Teaming. Just a few weeks ago I came up with a custom in-memo...

xmlrpc-bruteforcer

An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage root@kitploit: python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in...

struts2_cve-2017-5638

struts2cve-2017-5638 这是一个对 Python 漏洞利用代码的 Java 移植版本，原代码位于：https://www.exploit-db.com/exploits/41570/。 该软件编写为无外部依赖。 免责声明 此工具仅供安全工程师和应用程序安全人员用于安全评估。请负责任地使用此工具。本人不对任何人使用此应用程序的方式承担责任。对于因使用此工具造成的任何损害或引发的任何犯罪，本人概不负责。 漏洞信息 CVE-ID ：CVE-2017-5638 链接 ：https://vulners.com/cve/CVE-2017-5638 描述 ：Apache Struts...

moonwalk

moonwalk：DLL 基址查找器 这个 Rust 库和 CLI 工具演示了一种无需遍历进程环境块（PEB）即可查找已加载 DLL 基址的替代方法。该技术特别适用于 PEB 遍历可能被检测或阻止的场景。 分支差异 本仓库包含两个采用不同方法的分支： 主分支 使用 winapi crate 和 VirtualQuery 进行内存验证 库函数（lib.rs）没有打印语句，便于干净集成 CLI 工具（main.rs）包含用于概念验证的调试输出 适合学习和理解该技术 OPSEC 分支 无外部依赖 - 完全自包含 不调用 Windows API - 使用带异常处理的直接内存访问，而不是...

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Vulnerabilidad de Bypass de Autenticación en Apache Tomcat Resumen CVE-2024-52316 es una vulnerabilidad de bypass de autenticación identificada en Apache Tomcat. Este problema surge cuando Tomcat está configurado con un componente ServerAuthContext...

Apache-Dubbo-Hessian2-CVE-2021-43297

Apache Dubbo Hessian2异常处理时的反序列化（CVE-2021-43297） 1. 将两个项目分别导入两个idea 2. 先运行org.apache.dubbo.samples.basic.BasicProvidermain启动服务端 3. 再运行org.apache.dubbo.samples.basic.BasicConsumermain启动客户攻击端 效果： https://paper.seebug.org/1814/...

CVE-2017-5638

CVE-2017-5638 | Struts s2-045 Description It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then used to display an error message to a user. Affected versions Struts 2.3.5 Struts 2.3.31 Struts 2.5 Stru...

EUVD-2026-72377

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

CVE-2026-80135

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an Improper Check or Handling of Exceptional Conditions vulnerability. An unauthenticated attacker with remote network access can exploit this to achieve a protection ...

PT-2026-86781

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to...

ROS-20260907-73-0078

The vulnerability in dotnet9.0 is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260907-73-0081

The vulnerability in dotnet10.0 is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260907-73-0080

The vulnerability in dotnet8.0 is related to an exception handling error. Exploiting this vulnerability may allow a remote attacker to cause a service failure...

TamperingSyscalls

TamperingSyscalls TamperingSyscalls 是一个包含两部分的新颖项目，由参数欺骗（argument spoofing）和系统调用检索（syscall retrieval）组成，两者都滥用 EH 以规避 EDR。该项目融合了这两个技术，为直接系统调用提供了一种替代方案。 篡改系统调用。 1. 设置一个全局 EH，稍后将使用它。 root@kitploit: SetUnhandledExceptionFilter OneShotHardwareBreakpointHandler ; 2. 在 Dr0 寄存器上，于包含字节 0f05...

CVE-2026-86120

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level access control when permission lookups throw exceptions. Attackers with valid Fusion API tokens can write attachments to private datasheets they have been...

CVE-2026-86120 APITable through 1.13.0-beta.1 Fail-Open Authorization in the Fusion API Node Permission Guard

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level access control when permission lookups throw exceptions. Attackers with valid Fusion API tokens can write attachments to private datasheets they have been...

EUVD-2026-71952

APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to enforce node-level access control when permission lookups throw exceptions. Attackers with valid Fusion API tokens can write attachments to private datasheets they have been...