printerbugnew

Pure RPC over TCP Printer Spooler Trigger For Windows 11 22H2+ / Windows Server 2025 Usage root@kitploit: printerbugnew.py username password domain attackerhost tcpport Examples Anonymous connection root@kitploit: printerbugnew.py 192.168.1.100 With credentials root@kitploit: printerbugnew.py...

grubcrawler

Agentic web crawler with anti-detection, vision fallback, and peer-to-peer mesh. Endpoints · Mesh · Anti-Detection · Ghost Protocol · Live Stream · MCP Tools · Quick Start · Benchmarks · Architecture Full-stack web crawling engine with JavaScript rendering, Camoufox anti-detect browser, per-reque...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

pycdc-studio

pycdc-studio 中文说明 A Qt Widgets desktop UI for exploring Python bytecode with pycdc / pycdas, inspecting native decompilation results, importing Pyarmor oneshot output, and retrying unsupported code objects with AI fallback. The app supports both Windows and Linux desktop environments. Screenshots...

POC-CVE-2026-54121-Certighost

CertiGhost CVE-2026-54121 - AD CS Chase Fallback Exploit Toolkit Overview CertiGhost is a critical vulnerability CVSS 8.8 in Active Directory Certificate Services AD CS that allows a low-privileged domain user to impersonate a Domain Controller and achieve full domain compromise. CVE:...

CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy

CVE-2026-1111 – Smart Contract Cross‑Function Reentrancy Program Code Solidity + Python root@kitploit: // VulnerableBank.sol - Simplified reentrancy example with cross-function bypass pragma solidity ^0.8.0; contract VulnerableBank mappingaddress = uint256 public balances; function deposit public...

Metasploit-CVE-2026-54121-Certighost

Metasploit-CVE-2026-54121-Certighost Certighost originally discovered and exploited by h0j3n and Aniq Fakhrul. This repo contains Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment "chase" fallback. The CA can b...

FakeDns

FakeDns Update 4/14/2020 - Python 2 support removed and code swapped to Python3 Now with round-robin & improved options! Bugs: @crypt0s - Twitter [email protected] - Email A python regular-expression based DNS server! root@kitploit: USAGE: ./fakedns.py -h -c Config path -i interface IP...

poodle-PoC

Poodle PoC 🐩 🐩 🐩 A proof of concept of the Poodle Attack Padding Oracle On Downgraded Legacy Encryption : a man-in-the-middle exploit which takes advantage of Internet and security software clients' fallback to SSL 3.0 The Poodle attack allow you to retrieve encrypted data send by a client to a...

rebindMultiA

rebindMultiA rebindMultiA is a tool to perform a Multiple A Record rebind attack. rebindmultia.com is a domain that I've set up to assist with these attacks. It makes every IP its own authoritative nameserver for the domain IP.ns.rebindmultia.com. For example, 13.33.33.37.ns.rebindmultia.com's...

noise-java

Noise-Java Library Noise-Java is a plain Java implementation of the Noise Protocol, intended as a reference implementation. The code is distributed under the terms of the MIT license. This library is written in plain Java, making use of the Java Cryptography Extension JCE to provide cryptographic...

CVE-2026-39324

CVE-2026-39324 استغلال PoC فشل فك تشفير Rack::Session::Cookie يتراجع إلى قبول ملفات تعريف الارتباط غير المشفرة | ---|--- الاستشارة| GHSA-33qg-7wpp-89cq الحزمة| rack-session RubyGems المتأثرة| = 2.1.1 المُصححة| 2.1.2 الملخص Rack::Session::Cookie مع secrets: يجب أن يقبل ملفات تعريف الارتباط المشفرة...

CVE-2026-19478

-b91c1c?style=flat-square CVE-2026-19478 — قالب Nuclei قالب كشف غير تدميري باستخدام Nuclei لثغرة CVE-2026-19478 ، وهي خلل حرج CVSS 9.4 يتمثل في استدعاء طرق تعسفي دون مصادقة في واجهة برمجة تطبيقات GitLab GraphQL، تم إصلاحه بواسطة GitLab في 17 أغسطس 2026. الخلاصة مخطط GraphQL الخاص بـ GitLab يدعم...

CVE-2026-81889

elFinder (open-source web file manager) contains an SSRF protection bypass in php/elFinder.class.php prior to version 2.1.70 . When PHP cURL is unavailable, get_remote_contents() falls back to fsock_get_contents(), which performs a second DNS resolution to $arr['host'] independent of the IP alrea...

CVE-2026-81889 elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can bypass server-side request forgery protections when PHP cURL is unavailable because validateaddress validates $info'ip', but getremotecontent...

EUVD-2026-68768

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can bypass server-side request forgery protections when PHP cURL is unavailable because validateaddress validates $info'ip', but getremotecontent...

CVE-2026-81889 elFinder: SSRF protection bypass via DNS rebinding in the `fsock_get_contents()` fallback

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Prior to 2.1.70, elFinder URL uploads in php/elFinder.class.php can bypass server-side request forgery protections when PHP cURL is unavailable because validateaddress validates $info'ip', but getremotecontent...

CVE-2026-71257

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been consumed by another component, Commons FileUpload returns no items and Wicket falls back to reading the upload throu...

CVE-2026-71257 Apache Wicket: Configured file upload limits are not enforced when the multipart request has already been parsed

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been consumed by another component, Commons FileUpload returns no items and Wicket falls back to reading the upload throu...

EUVD-2026-68486

Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache Commons FileUpload. If the request body has already been consumed by another component, Commons FileUpload returns no items and Wicket falls back to reading the upload throu...