CVE-2020-25790

CVE-2020-25790 Typesetter CMS File Upload Vulnerability Environment Pull Method root@kitploit: docker pull mtwf/typesettercve-2020-25790:5.1 docker run -it -d -p 80:80 mtwf/typesettercve-2020-25790:5.1 /bin/bash -c "service apache2 start;/bin/bash" Typesetter account password is admin:admin...

Bin-Finder

Description This tool looks for either the processes that have a certain binary loaded or the processes that don't. This is useful in the following scenarios: It allows to detect processes where an specific EDR/AV dll is not loaded. This could lead to EDR's exception detection. It allows to obtai...

auto-repeater

AutoRepeater : répétition automatisée de requêtes HTTP avec Burp Suite tl;dr Dans l'onglet Extender, importez AutoRepeater.jar Quelques brèves instructions AutoRepeater ne renverra que les requêtes modifiées par un remplacement défini. Lorsqu'AutoRepeater reçoit une requête qui correspond aux...

auto-repeater

AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...

CVE-2025-48703

🛡️ CVE-2025-48703 - Remote Code Execution RCE in cPanel File Manager 📌 Description CVE-2025-48703 is a Remote Code Execution RCE vulnerability in the filemanager module of a web hosting control panel e.g., cPanel. It occurs due to unsanitized input handling in the acc=changePerm function, which...

pentesting-multitool

Pentesting-Multitool Introduction Pentesting-Multitool project arises from the need to gather some pentesting tools into one tool. It will be developed using Python3 adding some external libraries as DNSPython, pythonwhois or scapy. The main functions of the script is to collect information about...

CVE-2026-85706-PoC

CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read CVE-2026-85706 is a critical path-traversal / missing-authentication issue in the GitLab CE/EE Repository Commits and Repository Files APIs: an unauthenticated attacker can make the server read arbitrary files and obtain their...

sc2pe

sc2pe Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE. Both 32-bit and 64-bit x86, x64 shellcode is supported - resulting in 32-bit or 64-bit PE. Releases are compiled for both linux-x64 and win-x64. Description It is compiled to Native AOT format to demonstrate how...

hashmuncher

Hash Muncher Grab NetNTLMv2 hashes using ETW with administrative rights on Windows Requires elevated administrator access on Windows 8.1 / Windows 2016 or later Uses Event Tracing for Windows ETW to get access to raw packet data for SMB authentication packets Decodes NTLM message types 2 and 3...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

metasploit_in_termux

Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...

charlotte

charlotte c++ fully undetected shellcode launcher ; releasing this to celebrate the birth of my newborn description 13/05/2021: 1. c++ shellcode launcher, fully undetected 0/26 as of 13th May 2021. 2. dynamic invoking of win32 api functions 3. XOR encryption of shellcode and function names 4...

ntdsdotsqlite

NTDS.Sqlite This software can be used either directly as a CLI utility or as a library to get an SQLite database from an NTDS.DIT one. Encrypted bits can be decrypted if the associated system hive is provided altogether. Installation python -m pip install ntdsdotsqlite Usage ntdsdotsqlite NTDS.DI...

rmm

Recon MindMap RMM Taking inspiration from the TBHM v4 recon edition by Jason Haddix Workshop, I developed a command-line interface CLI tool that will simplify the task of organizing a list of domains and subdomains. The aim is to create a tool that can easily generate complex domain structures...

snapchange

Snapchange Lightweight fuzzing of a memory snapshot using KVM Snapchange provides the ability to load a raw memory dump and register state into a KVM virtual machine VM for execution. At a point in execution, this VM can be reset to its initial state by resetting the dirty pages found by KVM or...

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

CVE-2022-44268 ImageMagick Чтение произвольного файла PoC PoC для CVE-2022-44268 ImageMagick Чтение произвольного файла PoC - Генератор полезной нагрузки Этот проект создан только в образовательных целях и не может быть использован для нарушения закона или личной выгоды. Автор этого проекта не...

PPLFault

PPLFault By Gabriel Landau at Elastic Security. From PPLdump Is Dead. Long Live PPLdump! presented at Black Hat Asia 2023. PPLFault 2024-02 UPDATE: Microsoft patched PPLFault on 2024-02-13. Seethis thread for related discussion. Exploits a TOCTOU in Windows Code Integrity to achieve arbitrary cod...

Mystikal

Mystikal macOS Initial Access Payload Generator Intended to be used with https://github.com/its-a-feature/Mythic Related Blog Post: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Usage: 1. Install Xcode on build machine Required for Installer Package w/ Installer Plugin 2. Install...

MALW

CVE-2007-4559 - Polemarch exploit Full working exploit for Polemarch server https://www.polemarch.org/, using CVE-2007-4559, allowing: Injection of a cryptominer for monero using TOR for better hiding. Injection of a rootkit targeting most common sysadmin tools. POC Proof of concept using...

PowerShell-for-Hackers

2022 Hak5 hacker of the Year Table of Contents 1. Description 2. The Functions 3. Contact 4. Acknowledgments PowerShell Functions For Hackers 🤓💻 I am currently the 1 ranked payload contributor to Hak5. I decided to make this repository to share all of the functions I have come up with to develop ...