Lucene search
+L

71256 matches found

Kitploit
Kitploit
added 2026/09/13 9:21 a.m.9 views

page_table_walk

Capture the Flag in Physical Memory You've read about paging. The diagrams make sense. Four levels, 9 bits each, page frame, offset. Sure. But then you hit a challenge that requires actually walking page tables, and you realize you don't know it. You know about it. Big difference. What worked for...

7.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 6:01 a.m.8 views

wvctf

WebVulnCTF WVCTF or WebVulnCTF is a gamified web platform which promotes training in pentesting and web application development security in an entertaining way. Through a rewards system, the user must search for a set of flags in the vulnerable application, that correspond to frequent...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:23 a.m.6 views

cicd-goat

Entorno CI/CD deliberadamente vulnerable. Hackea pipelines CI/CD, captura las banderas. 🚩 Creado por Cider Security Adquirida por Palo Alto Networks. Tabla de Contenidos...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 5:00 a.m.7 views

CVE-2026-0023-Update-Ownership-PoC

CVE-2026-0023 - PoC de Bypass de Confianza de Propiedad de Actualización de Android Un entorno de laboratorio Android completo para reproducir y estudiar CVE-2026-0023. Este repositorio demuestra cómo CVE-2026-0023 permite que un instalador normal influya en una bandera interna de instalación de...

7.8CVSS6.3AI score0.00084EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:00 a.m.6 views

cookiescanner

cookiescanner Tool for check the cookie flag in multiple sites. Intro Tool created to do more easy the process of check the cookie flag when we are analyzing multiple web servers. If you want to know for why could be useful this tools? https://www.owasp.org/index.php/SecureFlag...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:01 a.m.168 views

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 1:21 a.m.21 views

dnsrecon

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS in early 2007. This time I wanted to learn about Python and extend the functionality of the original tool and in the process re-learn how DNS works and how could it be used in the process of a...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 12:50 a.m.6 views

CVE-2023-42860

CVE-2023-42860 Exploit para CVE-2023-42860 solo con fines de investigación. Este exploit funciona en versiones de macOS anteriores a la 13.3, aunque el changelog de Apple afirma que se corrigió en la versión 14.1. Pasos 1. Descarga el InstallAssistant.pkg 2. Modifica la variable TARGETFILE en el...

7.7CVSS7.1AI score0.00488EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 11:58 p.m.160 views

caronte

caronte$ Caronte is a tool to analyze the network flow during capture the flag events of type attack/defence. It reassembles TCP packets captured in pcap files to rebuild TCP connections, and analyzes each connection to find user-defined patterns. The patterns can be defined as regex or using...

5.5AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 11:45 p.m.8 views

page-cache-corruption-lpes

Page Cache Corruption LPEs 3 Linux kernel local privilege escalation exploits. Same bug class as Dirty COW and Dirty Pipe. Root shell in seconds. Every major distro affected. All three corrupt the kernel's page cache — the in-memory copy of files that processes actually read and execute. The...

8.8CVSS6.6AI score0.00583EPSS
SaveExploits19References3
Kitploit
Kitploit
added 2026/09/12 11:18 p.m.7 views

CTFd

What is CTFd? CTFd is a Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes. Features Create your own challenges, categories, hints, and flags from the Admin Interface Dynamic...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 11:08 p.m.11 views

ctf-party

ctf-party Qué es...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 11:01 p.m.13 views

zipbrk

zipbrk 2.2.0 Zip break is a tool to disect, modify, and reassemble zip files for a variety of tasks. It is designed to be cross-platform and as simple as possible to port between varied systems. It has been tested on Windows 9x/2k/XP, Windows Vista/7/8, Fedora 23/24/25/26/27, Kali, Debian 8/9,...

7.8CVSS6.6AI score0.65764EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/12 10:04 p.m.4 views

Oh365UserFinder

Oh365 User Finder v1.1.2 Oh365UserFinder se utiliza para identificar cuentas y dominios válidos de O365 sin el riesgo de bloqueo de cuentas. La herramienta analiza las respuestas para determinar si la bandera "IfExistsResult" es nula o no, y responde adecuadamente si el usuario es válido. La...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 9:27 p.m.7 views

ThreatIngestor

ThreatIngestor Utilities Scripts to improve ThreatIngestor usage and help with minimizing errors. All scripts contain the following optional argument to allow for higher verbosity in stdout: root@kitploit: python3 scripts/ -v A quick list of all available scripts: Script| Example| Description...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 7:21 p.m.9 views

CVE-2026-24061-lab

CVE-2026-24061 — Laboratorio de Reproducción ⚠️ Con fines educativos únicamente. Entorno de laboratorio aislado. Francés abajo Resumen Bypass de autenticación crítico CVSS 9.8 en GNU InetUtils telnetd ≤ 2.7. Al inyectar -f root como variable USER mediante la opción Telnet NEWENVIRON, un atacante n...

9.8CVSS8.2AI score0.97993EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/12 6:50 p.m.6 views

Debuggable-App-Exploit

CVE-2024-31317 Exploit de Aplicación Depurable Un exploit basado en Python para CVE-2024-31317 Inyección de Zygote en Android que hace que cualquier aplicación Android instalada sea depurable inyectando argumentos maliciosos de zygote a través del ajuste hiddenapiblacklistexemptions. Incluye...

7.8CVSS7.5AI score0.00779EPSS
SaveExploits12References1
Kitploit
Kitploit
added 2026/09/12 6:41 p.m.4 views

CVE-2022-0847-eBPF

CVE-2022-0847-eBPF Un programa eBPF para detectar y defender ataques en CVE-2022-0847. En el espacio del kernel, el programa detecta las llamadas al sistema splice ; si dicha llamada contiene un pipe como fd de salida y los flags del buffer del pipe están establecidos en PIPEBUFFLAGCANMERGE ,...

7.8CVSS7.2AI score0.89721EPSS
SaveExploits102
Kitploit
Kitploit
added 2026/09/12 6:09 p.m.6 views

CVE-2021-1732

CVE-2021-1732 La vulnerabilidad ocurre en el controlador gráfico de Windows win32kfull!NtUserCreateWindowEx, donde una llamada de retorno del kernel al modo usuario para asignar memoria y la configuración del atributo tagWND-flag están desincronizadas, lo que permite falsificar el valor de...

7.8CVSS7.8AI score0.78376EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/12 5:24 p.m.7 views

firepwner

CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example o...

6.8CVSS6AI score0.02634EPSS
SaveExploits0References2
Rows per page
Query Builder