CVE-2022-0847

CVE-2022-0847 exploit of CVE-2022-0847 which directly remove password of the root account Usage: 1. gcc cve-2022-0847.c -o exploit 2. ./exploit Requrements: gcc Work summery: The traditional classic exploit POC of Max Kellermann used to add a user with root privilage but in this POC exploit, It...

CiscoISE-CVE-2025-20282-POC

Cisco ISE CVE 2025-20282 Proof of concept Writeup: https://riversecurity.eu/like-stealing-cisco-ise-cream-from-a-kid-weaponizing-a-cve/ The python script abuses the upload function that is availible unauthenticated at /admin/files-upload/ The script locally creates a bin folder and a file named...

TryHack3M-Bricks-Heist

TryHack3M: Bricks Heist Exploit • Writeup • CTF Challenge A comprehensive repository containing a custom exploit and detailed writeup for the TryHack3M: Bricks Heist challenge Quick Start • Repository Structure • The Exploit • The Writeup • Disclaimer Overview This repository documents the...

CVE-2022-46152

CVE-2022-46152 OP-TEE OScleanupshmrefs Out-of-Bounds Read — Reproduction Environment Reference: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Security Advisory: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 Vulnerability Overview Field| Detai...

poc-redis

要运行该漏洞利用程序，请解压附带的 ZIP 文件，并在 Linux 上按照以下步骤操作： 1. 设置虚拟环境/安装 Redis 客户端 root@kitploit: $ python3 -m venv .venv $ source .venv/bin/activate $ pip install -r requirements.txt 2. 在另一个终端中，运行 Redis docker 镜像 或者从源码构建并在受支持的平台上运行 该漏洞利用程序已在 Fedora 40/Ubuntu 24.04 上测试并运行成功 root@kitploit: $ docker run -p6379:63...

CVE-2026-53613-poc

CVE-2026-53613 PoC mount8 中的 TOCTOU 漏洞，允许本地权限提升至 root。 受影响版本 util-linux 2.41.0 至 2.41.4 util-linux 2.42.0 至 2.42.1 漏洞利用 文件| 方法| 目标 ---|---|--- exploitshell.sh| SSH 密钥提取| /root exploitdirectshell.sh| 直接 shell| /bin 快速开始 root@kitploit: 方法 1：提取 SSH 密钥并以 root 身份 SSH 登录 bash exploitshell.sh 1000 方法 2：...

CVE-2026-23918-Passive-Audit

CVE-2026-23918 audit script alternatively you could just curl the headers and take a peek, but here comes the: Non-invasive HTTP metadata auditor for Apache HTTP Server CVE-2026-23918 https://www.openwall.com/lists/oss-security/2026/05/04/19 exposure triage. The tool sends ordinary HTTP HEAD/GET...

ThreatDetect

ThreatDetect ThreatDetect is a Streamlit-based insider threat detection prototype that analyzes employee activity data and flags potentially risky behavior. It uses a trained XGBoost classifier together with an Isolation Forest anomaly detector to produce organisation-level risk summaries and...

CVE-2026-60121-CVE-2026-61498

cve-id ⚡ 简单使用 请仅在安全且获得授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 授权的渗透测试环境 示例设置： root@kitploit: git clone cd 项目使用 Python，请遵循以下步骤 创建虚拟环境 python -m venv venv 激活虚拟环境 macOS / Linux source venv/bin/activate Windows Git Bash / WSL source venv/Scripts/activate 安装依赖 pip install -r requirements.txt 示例用法：...

C2-and-Post-Exploitation-Framework

Capstone Docker Lab Overview and Purpose The victim browses to a hosted webpage. The exploit initiates via shellcode embedded in utils.js runs client-side in the victim's browser via CVE-2021-21220. The shellcode runs on the victim's machine, calls the HTTPS delivery server, downloads...

virustotalx

virustotalx 用于端点 virustotalx 用于 IP（V2） 安装 root@kitploit: git clone https://github.com/orwagodfather/virustotalx.git root@kitploit: cd virustotalx 创建 3 个账户 https://www.virustotal.com/gui/join-us 并复制 3 个 API 密钥 === root@kitploit: nano orwa.sh & root@kitploit: nano orwaV2.sh 在此处粘贴 3 个 API 密钥...

CVE-2024-28397-Js2Py-RCE-Exploit

💡 深入阅读： 点击此处阅读完整技术简报（PDF）。 CVE-2024-28397：Js2Py 沙箱逃逸 Payload 生成器 一个针对 CVE-2024-28397 的专业 Payload 生成器。该工具生成恶意 JavaScript 代码，旨在逃逸 js2py 沙箱（版本 = 0.74）并在目标系统上执行任意命令。 🚨 漏洞详情 CVE 编号： CVE-2024-28397 受影响组件： Js2Py = 0.74 影响： 远程代码执行（RCE）/ 沙箱逃逸 机制： 利用 Object.getOwnPropertyNames 从 JavaScript 环境内部访问 Python 的...

bug-bounty-tools

漏洞赏金脚本 一个用于自动化安装最流行漏洞赏金工具的 BASH 脚本，该脚本的主要目的是在云端的临时/一次性虚拟机上运行。 使用的工具 Nuclei httpx Naabu Subfinder DNSx Nmap Katana Recox Wfuzz Amass SQLMap 设置 1. 使用 wget 复制或下载文件：wget https://raw.githubusercontent.com/hakrishi/bug-bounty-tools/main/bug-bounty.sh 2. 修改权限：chmod +x bug-bounty.sh 3. 运行脚本：./bug-bounty....

homelab-CVE-2021-44228

Homelab: Log4Shell CVE-2021-44228 on Apache Solr Controlled Docker environment to reproduce and study the Log4Shell vulnerability in Apache Solr. The Environment Target solr-lab: Apache Solr v8.11.0 vulhub/solr:8.11.0 running a vulnerable version of Log4j. Attacker kali-lab: Basic Kali Linux...

AndroidAuto

Open Android Auto An open-source implementation of the Android Auto phone-side app. This app runs on your phone and projects to a car's head unit over USB, replacing Google's proprietary com.google.android.projection.gearhead APK. ⚠️ WORK IN PROGRESS This project is in early development. The...

CVE-2026-38526-PoC-htb-nexus

CVE-2026-38526-PoC-htb-nexus A PoC script for CVE-2026-38526, RCE via a file upload vulnerability in the /admin/tinymce/upload endpoint of webkul krayin 2.2.x built for htb-nexus 🛠 Quick start and Usage 1. Clone the repository: root@kitploit: git clone...

CVE-2017-10271

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder Deserialization Writeup I. System Analysis System Log Analysis Detected Service: Oracle WebLogic Server AdminServer belonging to basedomain running in Development Mode. Connection Port: 7001. Supported Protocols: http, t3, iiop, ldap, snmp. Attack Surfa...

GhostLock-H80GT

English | 中文 荣耀80 GT 提权 PoC：GhostLock CVE-2026-43499 适用于荣耀80 GT（AGT-AN00）的本地提权exploit（CVE-2026-43499，内核rtmutex removewaiter路径的UAF），以及配套的KernelSU内核模块加载方案。 原理上，本项目的漏洞和利用手法对9.0.0.230及之前的所有MagicOS版本都成立。已适配的版本： MagicOS| 内核| 状态 ---|---|--- 8.0.0.128| 5.10.168| ✅ 已验证 8.0.0.160| 5.10.209| ✅ 已验证 9.0.0.157...

CVE-2025-26788

CVE-2025-26788 Environment Setup Step 1 - Verify Docker Desktop is running docker version Step 2 - Build Image cd C:\Users\jhcho\Desktop\passkey\CVE-2025-26788 docker build -t skfs . Step 3 - Run Container docker run -d --name skfs --hostname skfs.localdomain --privileged --cgroupns=host -v...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...