CVE-2026-48908-SP-Page-Builder-Joomla

CVE-2026-48908: SP Page Builder Joomla Unauthenticated RCE Proof of Concept exploit for CVE-2026-48908, an unauthenticated Remote Code Execution vulnerability in Joomla SP Page Builder component. Vulnerability Overview CVE-2026-48908 is a critical security vulnerability that allows unauthenticate...

CVE-2022-0739

CVE-2022-0739 My take on CVE-2022-0739 BookingPress exploit, based on destr4ct's POC - just prettier. Example Example usage against HackTheBox's MetaTwo machine, which hosts a WordPress with a vulnerable bookingpress plugin version 1.0.10. root@kitploit: python booking-sqlinjector.py -u...

apk-info

apk-info A full-featured apk parser. Features A malware-friendly zip extractor. Great article about BadPack technique; A malware-friendly axml and arsc extractor; A full AXML Android Binary XML implementation; A full ARSC Android Resource implementation; Support for extracting information contain...

RTF-Cleaner

RTF-Cleaner RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically. Use this tool to statically find URLs in obfuscated RTF documents. Usage: .\rtfCleanerUniversal.ps1 path-to-file Example: .\rtfCleanerUniversal.ps1 'C:\Users\yams\Downloads\invoiceForYams.doc' If the built in...

Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis

1. Setup.exe – Privacy, Driver & Memory Strings Process Hacker memory analysis of the setup.exe dropper reveals that Lumma Stealer targets privacy settings, installs drivers, and manages memory. Key Strings Observed: Privacy Camera – Attempts to access or disable camera privacy settings. Privacy...

pyxamstore

Explorador de Xamarin AssemblyStore pyxamstore Esta es una versión alfa de un analizador de assemblies.blob AssemblyStore escrito en Python. La herramienta es capaz de desempaquetar y reempaquetar archivos assemblies.blob y assemblies.manifest de Xamarin desde un APK. Instalación Ejecute el scrip...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

evilarc

evilarc Purpose evilarc lets you create a zip file that contains files with directory traversal characters in their embedded path. Most commercial zip program winzip, etc will prevent extraction of zip files whose embedded files contain paths with directory traversal characters. However, many...

privacy-parser

OpenAI Privacy Parser OpenAI shipped Privacy Filter — a model that hides PII in text. Defenders use it so data doesn't leak. But every defense has a second side. Attackers need PII too. From logs, dumps, abandoned S3 buckets, stolen inboxes. Same task: find everything personal in a pile of text...

CVE-2020-8004

CVE-2020-8004 Test $cd openocd-toolbox/scripts/linux/stm32f1x/ $./lock.sh $./attach.sh $telnet localhost 4444 $reset halt $mdw 0x08000000 $cd stm32f1-firmware-extractor $python3 main.py 0x08000000 512 References https://blog.zapb.de/stm32f1-exceptional-failure/...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

unblob

unblob 准确、快速且易于使用的二进制blob提取套件。 unblob 解析未知的二进制 blob，支持 78 种以上的归档、压缩和文件系统格式 ，递归提取其内容，并雕刻出未知块。它是提取、分析和逆向工程固件镜像的理想伴侣。 演示 特性 支持 78 种以上格式 — 包括归档、压缩流和文件系统，如 SquashFS、JFFS2、UBI/UBIFS、ext、CPIO、ZIP、7-Zip、gzip、XZ、LZMA、LZ4 等。查看完整列表。 递归提取 — 递归提取嵌套容器，直到可配置的深度（默认：10 层）。 精确的块检测 — 根据格式标准识别每个块的起始和结束偏移，最大限度减少误报。...

CVE-2025-99999

CVE-2025-99999 - HSM Firmware Authentication Bypass Description Critical authentication bypass in HSM Firmware v4.5.0 allowing key extraction. Affected Systems HSM Firmware v4.5.0 all builds Financial institutions using this HSM for SWIFT transaction signing IOCs IP| Port| Description ---|---|---...

CVE-2019-14751_PoC

CVE-2019-14751PoC A Proof of Concept for CVE-2019-14751 Vulnerability Description NLTK Downloader before version 3.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction. For...

CVE-2024-44000

EN GenCookieSessionHijack is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies. This allows the attacker to hijack active admin sessions and gain unauthorized access to the WordPress admin dashboard. Features Extract cookies from WordPre...

firmware-reverse-engineering

Habilidades de Ingeniería Inversa de Firmware Cinco habilidades de agente de OrbitCurve para extracción de firmware, análisis estático, ingeniería inversa con Ghidra, emulación y reportes de seguridad, por Hussein Muhaisen. La colección empaqueta los flujos de trabajo existentes, referencias,...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar Path Traversal Scanner Detects npm packages vulnerable to CVE-2026-31802 , a path traversal vulnerability in the tar npm package that allows arbitrary file writes during archive extraction. Features Scans package-lock.json for vulnerable tar versions Checks nodemodules fo...

sccmsqlclient

sccmsqlclient A dedicated MSSQL client for SCCM database exploration and exploitation. Recon queries Run PowerShell scripts on managed clients Extract secrets Installation PIPX root@kitploit: $ pipx install git+https://github.com/synacktiv/sccmsqlclient/ PIP You can install by cloning the...

gitbleed_tools

GitBleed Tools - para extraer datos de repositorios git reflejados Acerca de Este repositorio contiene scripts de shell que se pueden usar para descargar y analizar diferencias entre repositorios Git clonados y reflejados. Para más información sobre la peculiaridad subyacente en el comportamiento...

Seth

Seth Seth is a tool written in Python and Bash to MitM RDP connections by attempting to downgrade the connection in order to extract clear text credentials. It was developed to raise awareness and educate about the importance of properly configured RDP connections in the context of pentests,...