binder-trace

Binder Trace Binder Trace 是一款用于拦截和解析 Android Binder 消息的工具。你可以把它视为“Binder 版 Wireshark”。 环境要求 python 版本 = 3.9 ⚙️ 安装 你需要一台已 root 的 Android 设备或模拟器。 （仅限 Linux）- 安装 xclip 或 xsel 以获得“复制到剪贴板”功能 sudo apt-get install xclip sudo apt-get install xsel 从 PyPi 安装 pip install binder-trace 检查已安装的 frida 版本（请确保已通过...

Brutal

Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...

CTF---CVE-2011-2523

Scenario Capture the Flag - CVE-2011-2523 Capture the decrypted /etc/shadow and /etc/passwd file from vulnerable Metasploitable 2 server. Setup Enviornment Step 1: Download an unzip virtual machine For this CTF, we run VMware Workstation Pro with two virtual machines. We utilize Kali Linux as the...

INF8602-CVE-2020-8835

INF8602-CVE-2020-8835 カーネルエクスプロイトのテスト 1. Dockerなしでのテスト root@kitploit: cd ../app npm i node server.js 2. 防御機能をテストするためのDockerを使用したテスト root@kitploit: Make sure to be in the same directory as the Dockerfile Build the Docker image docker build . -t inf8602/node-web-app Your docker image should be list...

Kunyu

Kunyu坤舆 - 更高效的企业资产收集 中文文档 | English 0x00 介绍 工具介绍 Kunyu 坤舆，名字取自 ，测绘实际上是一个地理信息相关的专业学科，针对海里的、陆地的、天上的地理信息进行盘点。同样应用于网络空间，发现未知、脆弱的资产也是如此，更像是一张网络空间地图，用来全面描述和展示网络空间资产、网络空间各要素及要素之间关系，以及网络空间和现实空间的映射关系。所以我认为“坤舆”还是比较贴合这个概念的。 Kunyu坤舆，旨在让企业资产收集更高效，使更多安全相关从业者了解、使用网络空间测绘技术。 应用场景 对于 kunyu 的使用，应用场景可以有很多，例如：...

CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API Arbitrary File Write Leads to Remote Code Execution RCE vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments...

CVE-2026-15964-PoC

CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Unauthenticated privilege escalation via unverified password change in the WordPress plugin Single Sign On For TNG. | ---|--- Severity| Critical 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Unverified Password Change Affected|...

CVE-2018-11510

A couple exploits for CVE-2018-11510 by Kyle Lovett @SquirrelBuddha and myself Matthew Fulton/@haqur. Leverages an unauthneticated command injection to get a root shell back. The metasploit module has a separate payload included in the repo. Will see if I can get them included via a pull request...

CVE-2023-49969

CVE-2023-49969 Customer Support System 1.0 - SQL Injection Vulnerability in editcustomer via "id" URL Parameter Description : A SQL Injection vulnerability exists in version 1 of the Customer Support System. An attacker with malicious intent can execute SQL commands on the MySQL database by...

Dirty-Pipe-Oneshot

Dirty-Pipe-Oneshot Compiled version of CVE-2022-0847 aka Dirty Pipe. Just one shot to root them all :D just comple the cve-2022-0847.c file root@kitploit: gcc cve-2022-0847.c -o getroot then execute it on the victim & get root :D root@kitploit: ./getroot /etc/passwd 1 ootz: Happy Rooting 🎭...

CVE-2022-1329

WP Elementor 3.6.0/1/2 Remote Code Execution root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage root@kitploit: git clo...

CVE-2018-6389

doser.py 用于HTTP请求的DoS工具（灵感来自Hulk，但功能更多），使用Python编写： 示例 999个线程发送GET请求： root@kitploit: python doser.py -t 999 -g 'https://targeted.site.com' 999个线程发送带有JSON数据的POST请求： root@kitploit: python doser.py -t 999 -p 'https://targeted.site.com' -ah 'Content-Type: application/json' -d '"json": "payload"' 用法...

esp32_esp8266_attacks

Ataques Wi-Fi en ESP32/ESP8266 Este repositorio es parte del resultado de una investigación delASSET Research Group. Este repositorio demuestra 3 ataques Wi-Fi contra los populares dispositivos IoT ESP32/8266: Zero PMK Installation CVE-2019-12587 - Secuestro de clientes ESP32/ESP8266 conectados a...

Mass-exploit-CVE-2022-29464

喵喵喵！ 只是一个基于 Python PoC 的批量利用工具，针对 WSO2 Carbon Server CVE-2022-29464 未认证 RCE 漏洞 CVE-2022-29464. 喵喵喵？要求？ Python3 Shodan Zoomeye 一个大脑 这是什么工具？ 这是一个针对 CVE-2022-29464 的批量自动扫描利用工具，基于第三方用 Python 编写的 PoC。 Py 文件可用且可读，另请参见 bash 脚本，它不包含任何编码字符串。 Massexploit 会上传一个 shell 和一个反弹 shell，并打印出访问路径。简单、快速、酷。...

Exploit for CVE-2026-65013

CVE-2026-65013-BOLA-IDOR PoC reproducible de BOLA / IDOR...

metasploit-lab-report

Metasploit Penetration Testing Lab Report 📋 Overview This repository contains a comprehensive penetration testing lab report demonstrating exploitation of known vulnerabilities in Metasploitable 2 using the Metasploit Framework. This is an educational resource documenting proper penetration testi...

CVE-2026-71206-PoC

CVE-2026-71206 — Shiori: JWT CheckToken Never Re-Validates Account State Product: go-shiori/shiori File: internal/domains/auth.go CWE: CWE-613 — Insufficient Session Expiration CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2 High CNA: Turan Security · CVE record Description Shiori's CheckToke...

CVE-2026-71203-PoC

CVE-2026-71203 — changedetection.io: Missing Authentication on /api/v1/full-spec Discloses Full OpenAPI Schema Product: dgtlmoon/changedetection.io — v0.55.7 File: changedetectionio/api/Spec.py CWE: CWE-306 — Missing Authentication for Critical Function CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A...

CVE-2021-21402

CVE-2021-21402 CVE-2021-21402 Jellyfin arbitrary file read Wker script, batchable. The logic is very simple, it checks for the existence of win.ini via GET: root@kitploit: define payload = /Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/ define info = CVE-2021-21402...