massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2026-41551

CVE-2026-41551 Reproduktion Schwachstelle: Relative Pfad-Traversierung in den Siemens ROS-Diensten fileserver / fileserver2 CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Betroffene Versionen: ros-sharp alle name.substr10; // "package://" entfernen std::string package =...

CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING Questo PoC è stato interamente generato da un'IA. Uso: root@kitploit: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi Una versione non patchata di ffmpeg andrà in crash durante l'elaborazione di baseline.avi...

CVE-2020-25068

CVE-2020-25068 Conacwin v3.7.1.2 的 Python 漏洞利用程序。 Setelsa Conacwin v3.7.1.2 存在本地文件包含漏洞。该漏洞允许远程未认证攻击者通过 http:IP:PORT/../../path/filetodisclose 目录遍历 URI 读取服务器上的内部文件。 更多参考/信息可查阅： https://vulners.com/cve/CVE-2020-25068...

CVE-2025-60500

CVE-2025-60500 — Upload di file non sicuro / difetto logico in QDocs Smart School Smart School 7.1 Data di pubblicazione: 2025-10-17 Autore / Scopritore: Lebas Vivien Stato: Riservato CVE: CVE-2025-60500 riservato Riepilogo Un upload di file non sicuro / difetto logico in QDocs Smart School —...

CVE-2024-23334

CVE-2024-23334 漏洞利用和概念验证 本仓库包含 CVE-2024-23334 的概念验证 PoC 漏洞利用代码，展示了某 Web 应用程序中允许未授权访问服务器敏感文件的漏洞。PoC 包含一个容器化的 Web 服务器和一个用于检测漏洞的漏洞利用脚本。 仓库结构 root@kitploit: . ├── .gitattributes ├── .git/ ├── Dockerfile ├── exploit.py ├── requirements.txt ├── server.py ├── static/ │ └── safefile.txt └── test.log 文件和目...

CVE-2021-43798-poc

CVE-2021-43798-poc Lettura arbitraria dei file in Grafana 8.x python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...

poc-cve-2024-0132

poc-cve-2024-0132 Ambiente de reprodução: SO: ubuntu 22.04 com driver NVIDIA docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Passo de reprodução: executar a imagem do contêiner poc Alvo: Acessar arquivos do host no contêiner Chamar as APIs do daemon do docker via docker.sock no contêiner...

Java-Compressed-file-security

Java-Compressed-file-security java web संपीड़ित फ़ाइल सुरक्षा भेद्यता परीक्षण वातावरण: root@kitploit: Windows For Apache Tomcat/8.5.16 0x01 निर्देशिका ट्रैवर्सल-दुर्भावनापूर्ण संपीड़ित फ़ाइल बनाना कोड: root@kitploit: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp...

CVE-2024-27630

CVE-2024–27630 漏洞详情 概述 在 Savane v3.12 及更早版本中，从 /bugs/index.php 删除文件时缺少对 fileid 参数的验证，导致不安全的直接对象引用 IDOR 漏洞，这使得拥有错误跟踪器的组中的认证管理员可以任意删除任何错误跟踪器的文件附件，从而导致这些文件不可用。由于文件 ID 随每次新上传而递增，因此可以创建一个脚本，通过 fileid 迭代删除服务器上的所有文件附件。 CWE 分类： CWE-639：通过用户控制密钥绕过授权 报告者： Ally Petitt 受影响产品： Savane 受影响版本： 3.12 及更早版本 技术细节...

CVE-2023-46818

Metasploit 模块 Metasploit 模块 root@kitploit: use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit 在 ISPConfig 3.2.11p1 之前版本中发现了一个问题。如果启用了 adminallowlangedit，管理员可以通过语言文件编辑器实现 PHP 代码注入。...

apxutil

Uma ferramenta para manipular arquivos de archive de CLP Schneider Electric Esta ferramenta pode extrair e remontar arquivos de "archive" de CLPs, usados por vários CLPs Schneider Electric, incluindo pelo menos M580, M340 e Quantum. Os arquivos de archive com extensão .sta são na verdade um arqui...

Hijack-service-binaries

Hijack-service-binaries 현재 사용자가 수정할 수 있는 Windows 서비스 바이너리를 식별하는 PowerShell 보안 감사 도구입니다—잠재적인 권한 상승 벡터입니다. 개요 이 스크립트는 모든 Windows 서비스system32 및 svchost 제외를 스캔하고 현재 사용자에게 서비스 실행 파일에 대한 Write, Modify 또는 FullControl 권한이 있는지 확인합니다. 위험한 권한이 감지되면 취약한 서비스에 대한 자세한 정보와 함께 사용자에게 경고합니다. 기능 🔍 시스템이 아닌 모든 Windows...

MassCyberCenter-Mentorship-Project-

MassCyberCenter-Mentorship-Project- Обзор Этот репозиторий документирует мой путь и результаты в рамках программы наставничества MassCyber Center. Программа наставничества поставила перед нами задачу выполнить проект по кибербезопасности и затем представить его на демонстрационном мероприятии с...

CVE-2020-3452_Cisco_ASA_PathTraversal

CVE-2020-3452CiscoASAPathTraversal Скрипт Proof-of-concept для CVE-2020-3452 — уязвимости Path Traversal в Cisco ASA/FTD. Поддерживает автоматизированное извлечение известных целевых файлов с жёстким ограничением на количество успешных загрузок для безопасности. Предназначен только для...

CVE-2019-17662

CVE-2019-17662 Golang-реализация эксплойта для CVE-2019-17662 TinyVNC Arbitrary File Read, приводящего к обходу аутентификации Копия скрипта MuirlandOracle на Python...

CVE-2026-1306

CVE-2026-1306 — midi-Synth WordPress Um PoC / runner de listas executável, baseado em Python e com suporte a múltiplos alvos, para o CVE-2026-1306 no plugin midi-Synth do WordPress. Para que serve? Coleta o valor de midiSynthnonce via HTTP nas páginas dos sites alvo onde o shortcode midiSynth est...

CVE-2024-27665

CVE-2024-27665 O Unifiedtransform v2.X é vulnerável a Cross-Site Scripting XSS Armazenado através do recurso de upload de arquivos no módulo Syllabus. Fornecedor: https://github.com/changeweb/Unifiedtransform PoC Passo 1: Faça login no aplicativo e navegue até o módulo Acadêmico. Passo 2: Crie...

CVE-2026-0740

ninja.py Uno script sperimentale/strumento che sfrutta gli endpoint di upload file per il plugin Ninja Forms su siti WordPress. Invia richieste in sequenza ai target elencati in list.txt e scrive gli upload riusciti nel file shell.txt. Requisiti Python 3 requests solitamente installato insieme a...

CVE-2025-8110

Gogs Arbitrary File Write to RCE CVE-2025-8110 - Exploit à usage éducatif Ce dépôt contient un script de preuve de concept PoC en Python pour démontrer et analyser la vulnérabilité référencée sous le nom CVE-2025-8110 dans le service Git auto-hébergé Gogs versions 0.13.3 et antérieures. ⚠️ Clause...