CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 通过头像上传实现远程代码执行 描述 Code Astro Internet Banking System 2.0.0 中存在一个远程代码执行（RCE）漏洞，该漏洞源于 pagesviewclient.php 中 profilepic 参数的文件上传验证不严格。攻击者可以通过修改上传请求绕过安全检查，从而实现任意代码执行。 受影响组件 pagesviewclient.php 中的 profilepic 参数 上传功能允许执行恶意 PHP 文件 利用步骤 1...

selenium-wire

Selenium Wire is no longer being maintained. Thank you for your support and all your contributions. Selenium Wire Selenium Wire extends Selenium's Python bindings to give you access to the underlying requests made by the browser. You author your code in the same way as you do with Selenium, but y...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox is an advanced threat protection solution that creates isolated environments to analyze suspicious files, URLs, and network traffic for malicious behavior. It uses a...

CVE-2025-49113

CVE-2025-49113 RCE exploit the method for username/password authentication in this Exploit comes in 4 steps the code is a bit messy...

cspparse

cspparse Description cspparse is a tool to evaluate Content Security Policies. It uses Google's API to retrieve the CSP Headers and returns them in ReconJSON format. Not only does it check for headers with Google's API, it also parses the target site's HTML to look for any CSP rules that are...

dnsgen

DNSGen 2.0 - Motor Avanzado de Permutación de Nombres DNS 🚀 DNSGen es una herramienta de permutación de nombres DNS potente y flexible, diseñada para investigadores de seguridad y pentesters. Genera variaciones inteligentes de nombres de dominio para ayudar en el descubrimiento de subdominios y e...

CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated

CVE-2022-40347: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection Unauthenticated Exploit Title: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection Unauthenticated Date: 2022-06-09 Exploit Author: Hamdi Sevben Vendor Homepage:...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

cve-2026-43499-m3q-azf1

GhostLock SELinux park — SM-S948U1 / AZF1 m3q Research snapshot of a working SELinux-only park for Samsung Galaxy S26 Ultra SM-S948U1, codename m3q on firmware S948U1UES3AZF1 GKI 6.12.30-android16-5. This package is not a complete root. It flips SELinux to Permissive and holds reclaim long enough...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...

cfn_nag

Antecedentes La herramienta cfn-nag busca patrones en las plantillas de CloudFormation que puedan indicar infraestructura insegura. En términos generales, buscará: Reglas de IAM demasiado permisivas comodines Reglas de grupos de seguridad demasiado permisivas comodines Registros de acceso que no...

pefile

pefile pefile 是一个跨平台的 Python 模块，用于解析和处理可移植可执行 PE 文件。PE 文件头中包含的大部分信息均可访问，所有节的详细信息和数据也是如此。 Windows 头文件中定义的结构将作为 PE 实例中的属性访问。字段/属性的命名将尽量遵循这些头文件中的命名约定。仅为了方便而添加的快捷方式才会偏离该约定。 pefile 需要对 PE 文件的布局有一些基本了解——有了它，就可以探索 PE 文件格式的几乎所有功能。 安装 通过 pip 安装 pefile： pip3 install pefile 功能特性 pefile 可以实现的一些任务包括： 检查头部 分析节...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS Command Injection Exploit This Python-based exploit targets a command injection vulnerability in several D-Link NAS products via the /cgi-bin/accountmgr.cgi?cmd=cgiuseradd endpoint. The vulnerability allows unauthenticated attackers to execute arbitrary system commands...

CVE-2014-0816

CVE-2014-0816 This is an exploit for CVE-2014-0816 JVNDB-2014-000026: Norman Security Suite vulnerable to privilege escalation. This exploit launches CMD.exe with SYSTEM privilege from Non-Administrator privilege by exploiting the vulnerability in an IOCTL handler of ngs.sys / ngs64.sys. Usage...

ddoor

ddoor cross platform backdoor using dns txt records What is ddor? ddor is a cross platform light weight backdoor that uses txt records to execute commands on infected machines. Features Allows a single txt record to have seperate commands for both linux and windows machines List of around 10 publ...

CVE-2019-11932-SupportApp

CVE-2019-11932-SupportApp This native code file aims to be complementary to the published Whatsapp GIF RCE exploit by Awakened , by calculating the system function address and ROP gadget address for different types of devices, which then can be used to successfully exploit the vulnerability...

probe-legacy

⚠️⚠️⚠️⚠️: este repositorio contiene el código fuente de la implementación heredada de ooniprobe. Consulte en su lugar: 1. https://github.com/ooni/probe, el meta-repositorio donde debería abrir incidencias y solicitudes de funcionalidades; 2. https://github.com/ooni/probe-cli, que contiene la nueva...

the-backdoor-factory

BACKDOOR FACTORY 的新版本已可用！在此获取访问权限：https://github.com/sponsors/secretsquirrel 警告：Pull Requests 将被忽略并关闭。 The Backdoor Factory BDF 仅供安全专业人员和研究人员使用。 BDF 的目标是使用用户期望的 shellcode 修补可执行二进制文件，并在修补前的状态下继续正常执行。 Black Hat USA 2015： root@kitploit: 视频：https://www.youtube.com/watch?v=OuyLzkG16Uk...

Mass-exploit-CVE-2022-29464

Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...

CVE-2020-11107

CVE-2020-11107 This is a writeup for CVE-2020-11107 I've found. An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary...