CVE-2022-0847

CVE-2022-0847 더티 파이프 취약점 Dirty Pipe Vulnerability 교육 목적으로만 사용하세요 root@kitploit: ┌──vagrant㉿kali- └─$ ls -al /etc/passwd -rw-r--r-- 1 root root 3124 Mar 8 08:47 /etc/passwd ┌──vagrant㉿kali- └─$ head -n 1 /etc/passwd root:x:0:0:root:/root:/usr/bin/zsh ┌──vagrant㉿kali- └─$ echo foo /etc/passwd zsh:...

Exploiting-a-vulnerability-using-reverse-shell

أساسيات أمن المعلومات — مشروع ربيع 2026 النقاط الإجمالية: 20 | الموعد النهائي: لا يُقبل أي تسليم متأخر نظرة عامة يحاكي هذا المشروع سيناريو هجوم ودفاع واقعي عبر جهازين افتراضيين. ستستغل ثغرة تنفيذ تعليمات برمجية عن بعد RCE حرجة قبل المصادقة CVE-2025-32433 في خادم SSH الخاص بـ Erlang/OTP، وتكسر...

CVE-2015-1328

CVE-2015-1328 دليل TryHackMe العملي – تصعيد صلاحيات نواة لينكس CVE-2015-1328 الهدف كان الهدف من هذا الدليل العملي هو تصعيد الصلاحيات من مستخدم بصلاحيات محدودة karen إلى المستخدم root عبر استغلال نواة لينكس معرّضة للثغرة. الخطوة 1 – التعداد الأولي بعد الاتصال بالجهاز الهدف عبر SSH: root@kitploit:...

CVE-langgraph

cve-id ⚡ الاستخدام البسيط استخدم هذا المشروع فقط في بيئات آمنة ومصرح بها مثل: الأجهزة الافتراضية المحلية حاويات Docker إعدادات المختبرات المعزولة بيئات اختبار الاختراق المصرح بها مثال على الإعداد: root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m...

rugmuncher-backend

RMI बैकएंड Repo: git.rugmunch.io/RugMunchMedia/rmi-backend Deploy: /root/backend/ Talos पर Container: rmi-backend Health: http://127.0.0.1:8000/health वर्तमान में अस्वस्थ — Redis होस्ट हल नहीं कर रहा है यह क्या है RMI प्लेटफ़ॉर्म के लिए FastAPI बैकएंड। यह टोकन जोखिम स्कैन, वॉलेट फोरेंसिक, बाजार...

toolkit v2026.9

English | Español Indetectables Toolkit Designed as a Swiss Army knife, this curated toolkit is invaluable for malware analysts, crackers, and cybersecurity experts. It is meticulously crafted to support both novice and experienced users. This toolkit complements the manuals and the numbered...

ip-finder-cli

IPFinder CLI Command Line Interface https://ipfinder.io/ Supports Single IP Address, asn, ranges, firewall as Input Supports Bulk Exports Results to Screen or to An Output File Supports IPv4 and IPv6 Supports ASN number , RANGES , Firewall Getting Started sign up for a free account at...

Exploit for CVE-2026-19516

CVE-2026-19516 Donate Help maintain this p...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

mylg

myLG, Command line Network Diagnostic Tool myLG is an open source software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp: Telia, Level3, NTT, Cogent, KPN More than 200 countries DNS Lookup...

masc

masc A malware web scanner developed during CyperCamp Hackathon 2017 About homepage PyPI Features At the moment, there are some features avaiable for any type of website custom or CMS and some of them only available for specific platforms: Scan any website for malware using OWASP WebMalwareScanne...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382: QNAP पासवर्ड रीसेट से खाता अधिग्रहण अप्रमाणित हमलावर-नियंत्रित पासवर्ड रीसेट URL /cgi-bin/resetpassword.cgi में है। प्रयोगशाला में QuTScloud c5.2.4.3041 build 20250211 के विरुद्ध परीक्षण किया गया। QNAP ने बाद में इसे सलाह QSA-26-10 में CVE-2025-59382 के रूप में प्रकाशित किया।...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

PoC-Apache-CVE-2021-41773-Infrastructure-LAB

Apache CVE-2021-41773 — مختبر Docker PoC إشعار أمني يستنسخ هذا المستودع ثغرة أمنية معلنة علنًا وتم تصحيحها في بيئة مختبر Docker خاضعة للتحكم لأغراض تعليمية وبحثية. البيئة معرّضة للثغرات عن قصد ويجب نشرها فقط في بيئات اختبار معزولة. لا تحاول استغلال الأنظمة دون إذن صريح. الهدف من هذا المشروع هو...

PhoneSploit-Pro v2.3

PhoneSploit Pro The Swiss Army knife for Android. An all-in-one hacking tool written in Python to remotely take over Android devices using ADB, scrcpy, Nmap, and Metasploit-Framework. Table of contents Overview Screenshots Features Requirements Installing dependencies Getting started Device setup...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...