rt_redirectors

Ansible role that allows for quickly deploying a redirector to an existing server with modrewrite proxy rules, Supports Debian and Ubuntu, tested in Digital ocean and Azure See threat.tevora.com/automating-redirector-deployment-with-ansible for a blog walking through redirectors, ansible, and a...

insmod_block

insmodblock Linux: - - - - - - - By nu11secur1ty: https://github.com/nu11secur1ty/linux-nu11secur1ty Linux: - - - - - - - By nu11secur1ty: https://gitlab.com/nu11secur1ty/linux-nu11secur1ty root@kitploit: Linux Kernel security modules by nu11secur1ty GNU GENERAL PUBLIC LICENSE Version 3, 29 June...

rizin

Rizin Rizin is a reverse engineering framework, born as a fork of the radare2, with a focus on usability, features and cleanliness. Rizin is portable and it can be used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a scriptable command-line hexadecimal editor able ...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

CVE-2023-38831-Winrar-Exploit-Generator-POC

CVE-2023-38831 Winrar Exploit Generator POC This is a basic proof of concept for the CVE-2023-3883 exploit targeting WinRAR up to 6.22. Modified some existing internet-sourced POCs by introducing greater dynamism and incorporated additional try-except blocks within the code. Description from...

BlackLotus-Z2A-Challenge

BlackLotus-Z2A-Challenge BlackLotus-Z2A-Challenge、今はここには何もありません。どうぞ通り過ぎてください まず最初に 美的な目的のためだけに、プロっぽく見せるために、@darthmaulwareRyan “DM” Smith のソリューションからyara検出ルールを恥知らずにも借り（盗み）ます : 彼のツイッターをチェックしてみて。彼はマジでクールな人だよ！ 追伸：ライアン、それを盗んだことで怒らないでね : ディスコードでのサポートありがとう : 彼の作品もぜひチェックしてみて :...

huntr-com-bug-bounties-collector

huntr.com 버그 수집기 새로운 버그 바운티취약점 수집기 요구 사항 GUI가 있는 Chrome 스크립트 실행에 문제가 발생할 경우 VM의 GPU 기능 상태를 확인하세요. 가능하다면. Chrome WebDriver 미리보기 root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to Lack of Input Filepath Validation - Feb 6th 2024 / High CVE-2024-0964 -...

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview root@kitploit: python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File...

ghostscript-CVE-2023-43115

ghostscript-CVE-2023-43115 A small write-up with examples to help understand CVE-2023-43115. !WARNING I wrote this mainly for myself to understand the problem and to learn about cybersecurity. So there may be errors. The Problem To utilize the IJS device Improved Inkjet Printing, Ghostscript is...

CVE-2020-17530

OGNL Injection Exploit Summary Simple Python script to exploit OGNL injection vulnerabilities in Apache Struts2/Tomcat and execute system commands. Usage root@kitploit: pip install requests colorama python3 exploit.py -u http://target/index.action -c "id"...

kern

kern: a fast, rootless sandbox and virtual resource runtime. Run any workload in a real container, including an agent's tool-call or LLM-generated code. A real, kernel-enforced container in 3.5 ms, out of one static binary with no daemon. 0 RAM at rest · no daemon, no socket, nothing to start · o...

apche_unomi_rce

CVE-2020-13942 Original blog post about the vulnerability: https://www.checkmarx.com/blog/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/ There are two RCE vectors: through MVEL injection and through OGNL injection. Both vectors target different code though the payloads look relativel...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...

VMInjector

V M I n j e c t o r root@kitploit: c 2012 by Marco Batista Licensed under GPLv3 see LICENSE file Overview: VMInjector is a tool designed to bypass OS login authentication screens of major operating systems running on VMware Workstation/Player, by using direct memory manipulation. Description:...

VindicateTool

Vindicate -brightgreen An LLMNR/NBNS/mDNS Spoofing Detection Toolkit for network administrators What is Vindicate? Vindicate is a tool which detects name service spoofing, often used by IT network attackers to steal credentials e.g. Windows Active Directory passwords from users. It's designed to...

nano

nano Nano is a family of PHP webshells which are code golfed to be extremely stealthy and efficient. Put it on watch maybe, I will continue to upload more webshells in here. Nano root@kitploit: ?=$GETp==&&$GETf; Features 35 bytes in size Can't be detected by static code scanners Supports...

apkinspector

AndroidAnalysisGUI This is a guide to get the alpha release of Android Analysis GUI. It has only been tested on Linux. 1. Install Qt SDK. 1Download the QtSDK QtSDKLin32offlinev111en.run from "http://qt.nokia.com/downloads/sdk-linux-x11-32bit-cpp-offline" and install it using root permission...

VulTriage

一种基于大语言模型和静态代码分析的智能漏洞检测框架，支持多数据集评估和消融研究。 📋 目录 介绍 主要特性 系统要求 快速开始 使用方法 数据集与模型 常见问题 介绍 本项目是一个基于GPT-4o和BGE-M3模型的智能漏洞检测框架，结合了： 静态结构分析 ：控制流图（CFG）、数据流图（DFG）、抽象语法树（AST） 检索增强生成（RAG） ：基于CWE知识库的漏洞模式匹配 代码理解 ：使用大语言模型进行语义分析 成对/单样本检测 ：支持多种评估模式 主要特性 ✅ 支持PrimeVul和Kotlin数据集 ✅ 集成CWE漏洞知识库检索 ✅ 可配置消融研究 ✅ 实时指标追踪 ✅...

CVE-2024-53345

CVE-2024-53345 Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3 Description: A critical vulnerability exists in the System Settings module's file upload functionality within the Car Rental Management System versions 1.0 to 1.3, allowing low-privileged users to upload arbitrary...

should-i-trust

should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...