ROPInjector

ROPInjector A tool written in C Win32 to convert any shellcode in ROP and patch it into a given portable executable PE. It supports only 32-bit target PEs and the x86 instruction set. Published in Blackhat USA 2015, "ROPInjector: Using Return Oriented Programming for Polymorphism and Antivirus...

CVE-2024-51747

CVE-2024-51747 Log in with an administrator account and download the database in the system settings Modify projecthasfiles in the sqlite.db database Compress the modified sqlite.db with gzip and upload it. After uploading it to the project and clicking the file to view/download, the attacker can...

CVE-2022-24924

Improper access control vulnerability in LiveWallpaperService CVE-2022-24924SVE-2021-24089 Windows version tested: Windows 10 20H2 Build 19042.1348 64bit Live Wallpaper Version: 3.0.9.0 or earlier There is a LiveWallpaperService that works by default in Samsung laptops, but there was a...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

CVE-2022-1388

CVE-2022-1388 Nuclei Template for CVE-2022-1388. I have used the shadow file for poc , you can use the passwd '/etc/passwd' file as well. Change the Extractor according to your choice. POC Reference: https://support.f5.com/csp/article/K23605346...

CVE-2022-21587-POC

CVE-2022-21587-POC- CVE-2022-21587 POC root@kitploit: file exploit.py will overwrite to file .pl not recommended for use, will affect the system file EBS not overwrite, will create a new shell file install slipit: git clone https://github.com/usdAG/slipit root@kitploit: cd slipit python3 setup.py...

POC-S

POC-S: POC-T Strengthen Version POC-T Enhanced Edition Documentation for POC-T wiki is in the doc directory Preface: Currently Legal Disclaimer Using POC-S to attack targets without prior mutual consent is illegal. POC-S is intended for security testing purposes only. Features Compatible with POC...

Octopus

¿Qué es Octopus? Octopus es un servidor C2 de preoperación de código abierto basado en Python que puede controlar un agente de Octopus PowerShell a través de HTTP/S. El propósito principal de crear Octopus es usarlo antes de cualquier operación de red team, donde en lugar de comenzar el compromis...

CVE-2022-2869-detector

CVE-2022-2869 CodeQL Detector This project implements a general CodeQL detector for the root weakness behind CVE-2022-2869: an unsigned subtraction that may underflow because the program has not established a sufficient lower-bound/order guard before the arithmetic. Why this version is different...

CVE-2021-41773

CVE-2021-41773 Go language poc&exp project. Disclaimer: This project comes from the author's daily study notes. Do not use related technologies and tools for illegal testing. The author shall not be liable for any adverse consequences arising therefrom. Usage: root@kitploit: ./main -u Single URL...

CVE-2023-20178

CVE-2023-20178 这是Cisco Secure Client（测试版本5.0.01242）和Cisco AnyConnect（测试版本4.10.06079）中任意文件删除漏洞的PoC。 当用户连接到VPN时，vpndownloader.exe进程会在后台启动，并在c:\windows\temp目录下创建具有默认权限的目录，格式如下：.tmp。创建此目录后，vpndownloader.exe会检查该目录是否为空，如果不为空，则会删除其中的所有文件/目录。这种行为可被滥用以NT Authority\SYSTEM账户权限执行任意文件删除操作。...

CVE-2017-0144

🔵 EternalBlue CVE-2017-0144 Critical Microsoft SMBv1 Remote Code Execution Vulnerability 📌 Overview EternalBlue is a critical vulnerability in Microsoft's Server Message Block version 1 SMBv1 protocol that allows remote attackers to execute arbitrary code on vulnerable Windows systems without...

metasploitable-pentest-report

Metasploitable 2 — Penetration Test Report Disclaimer: This penetration test was conducted in a private, isolated VMware lab environment for educational purposes only. No real systems were accessed. All IP addresses have been anonymised. Overview Field| Details ---|--- Tester| Prafullya Shandilya...

CVE-2025-4138_tarfile_filter_bypass

CVE-2025-4138 — Python tarfile filter="data" Bypass Arbitrary file write outside the extraction directory via PATHMAX symlink chain. Affected Versions Python 3.12.0 – 3.12.10 Python 3.13.0 – 3.13.3 Fixed in 3.12.11 / 3.13.4 Credit: Reporter: Caleb Brown Google How It Works Python's tarfile data...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

ir-rescue

ir-rescue ir-rescue is composed of two sister scripts that collect a myriad of forensic data from 32-bit and 64-bit Windows systems ir-rescue-win and from Unix systems ir-rescue-nix. The scripts respect the order of volatility and artifacts that are changed with the execution e.g. , prefetch file...

linux-4.1.15_CVE-2022-42703

Linux kernel release 4.x http://kernel.org/ 这些是 Linux 4.x 版本的发行说明。请仔细阅读，因为它们会告诉你这是什么、如何安装内核以及如果出问题该怎么做。 什么是 Linux？ Linux 是 Unix 操作系统的一个克隆，由 Linus Torvalds 从头编写，并得到来自网络上众多黑客的松散团队的协助。它旨在符合 POSIX 和单一 UNIX 规范。 它拥有你在一个现代完整的 Unix 中期望的所有特性，包括真正的多任务处理、虚拟内存、共享库、按需加载、写时复制共享可执行文件、适当的内存管理，以及包括 IPv4 和 IPv6...

CVE-2023-4166

CVE-2023-4166 fofa: Tongda OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u single URL target file python3 CVE-2023-4165.py -f url.txt Then just verify the address...

gemini-2.5-pro-nf-tables-red-teaming

Gemini 2.5 Pro nftables Red Teaming Case Study CVE-2023-32233 LLM Safety Research | Responsible Disclosure | AI Alignment Evaluation Researcher : Niranj R Mahaswar Destawell Google AI Vulnerability Reward Program : 889286 — Out of Scope Summary This repository documents a comparative LLM red...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...