CVE-2021-41078

CVE-2021-41078 nameko Arbitrary code execution due to YAML deserialization NVD Description Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file. Demo Set Up 1. Build an image from a Dockerfile root@kitploit: docker build -t cve-2021-4107...

Pentest-Windows

Pentest-Windows11 v3.2 The First Windows Penetration Testing Environment on Mac M Chips 中文文档 | English README 📖 Project Overview 📝 System Introduction This environment aims to provide a ready-to-use Windows penetration testing environment. Reposting is welcome. Please indicate the original author...

house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile...

house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Herramienta de análisis dinámico para móviles Contacto: [email protected] House : Un conjunto de herramientas de análisis de aplicaciones móviles en tiempo de ejecución con una interfaz web, impulsado por Frida,...

CVE-2021-42013-Apache-RCE-Poc-Exp

Vulnerability Name Apache Remote Code Execution CVE-2021-42013 Vulnerability Description Apache HTTP Server is an open-source web server from the Apache Software Foundation. It is fast, reliable, and extensible via a simple API. It was discovered that the fix for CVE-2021-41773 in Apache HTTP...

CVE-2024-24919

CVE-2024-24919 Uso Uso: ./CVE-2024-24919.sh -i -p -f Especificando una IP con -i root@kitploit: ./CVE-2024-24919.sh -i 190.XXX.XXX.XXX Verificar múltiples IPs con -f root@kitploit: ./CVE-2024-24919.sh -f uniq.txt Ejemplo de archivo root@kitploit: 192.168.0.1 192.168.0.2 192.168.0.3 ... 192.168.0....

CVE-2022-37042

CVE-2022-37042 Plantilla armada de Nuclei para Zimbra CVE-2022-37042 ruta del shell: /public/formatter.jsp Nuclei en sí: https://github.com/projectdiscovery/nuclei el shell tiene una entrada oculta con opacidad 0, así que simplemente pasa el ratón sobre ella, escribe el comando y pulsa la tecla...

CVE-2023-45184

CVE-2023-45184 IBM i Access Client Solutions 1.1.9.4 - Control de acceso roto en el servidor local. Cronología Vulnerabilidad reportada al proveedor: 22.09.2023 Nueva versión corregida 1.1.9.4 publicada: 08.12.2023 Divulgación pública: 15.12.2023 Descripción IBM i Access Client Solutions para...

CVE-2022-21587-POC

CVE-2022-21587-POC- CVE-2022-21587 POC root@kitploit: file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit root@kitploit: cd slipit python3 setup.py...

ValleyRAT masquerading as adware

Attackers typically try to pass off malware as legitimate applications or as potentially unwanted programs that users deliberately search for and download, such as cheats or cracks. They often rely on ad and affiliate networks to deliver their creations to victims' devices. This post examines a...

PoC

Leveraging CVE-2018-19788 to dump protected files without root shell CVE-2018-19788 is an issue where any user with a UID over INTMAX IE 4000000000 can run any systemctl command on a systemd linux box, such as Ubuntu. There is already a writeup to gain a root shell found: here. The main differenc...

sslnuke

sslnuke -- SSL without verification isn't secure! We have all heard over and over that SSL without verification is not secure. If an SSL connection is not verified with a cached certificate, it can easily be hijacked by any attacker. So in 2013, one would think we had totally done away with this...

CVE-2015-1397-Magento-Shoplift

CVE-2015-1397-Magento-Shoplift Vulnerability Details Vulnerability as seen in HackTheBox - SwagShop Stage 1 = exploit.py Gain administrator credentials to Magento CMS dashboard Stage 2 = postauth.py With credentials gained from exploit.py added to postauth.py run: root@kitploit: python3 postauth....

pmanager

Pmanager Demostración Descripción Almacena y recupera tus contraseñas desde una base de datos local y segura. Verifica si tus contraseñas han sido filtradas anteriormente para evitar ataques de reutilización dirigida de contraseñas. ¿Por qué desarrollar otro gestor de contraseñas? Este proyecto...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

outpost

Outpost Gestión de Pruebas e Informes de AWS Outpost es una herramienta sencilla para generar archivos de configuración de AWS para AssumeRole, una capacidad de prueba para verificar que las cuentas funcionan, y un generador de informes para los resultados de escaneo de ScoutSuite. Ejecutar...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...

CVE-2026-43499_OPPO-MT6835

CVE-2026-43499 / PoC de GhostLock para OPPO MT6835 Este repositorio conserva una instantánea de investigación compacta para la cadena de explotación estilo GhostLock dirigida a un dispositivo basado en OPPO MT6835. Alcance Árbol de código fuente del exploit en exploit Prueba de concepto mínima en...

mcafee_atd_CVE-2019-3663

McAfee ATD CVE-2019-3663 McAfee Advanced Threat Defense ATD 4.6.x and earlier - Hardcoded root password Security Bulletin: https://kc.mcafee.com/corporate/index?page=content&id=SB10304 Interesting shadow entries root@kitploit:...

copy-fail-mcp

Copy Fail MCP 📖 Installation Guide — quick start, manual setup, and troubleshooting CVE-2026-31431 — The worst Linux vulnerability ever discovered. Now controllable via MCP. 732 bytes of Python. No compilation. No race condition. No per-distro offsets. One shot, universal root on every Linux kern...