Analysis-for-stage1-shellcode-loader-from-hacking-

Analyse des Stage-1-Shellcode-Loaders von Hacking Team Flussdiagramm des Codes Netzwerk-IoC https://172\.20\.20\.164 root@kitploit: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0;...

pwn2own2018

Pwn2Own 2018: Safari + macOS RCE no Safari, escape da sandbox e LPE para o kernel no macOS 10.13.3. Uso Instale o nasm e o tornado: root@kitploit: brew install nasm pip3 install tornado Verifique o config.py se quiser alterar o host ou as portas. Em seguida, inicie o servidor com ./server.py e...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

CVE-2019-13272

CVE-2019-13272 PTRACETRACEME CVE-2019-13272 स्थानीय विशेषाधिकार वृद्धि भेद्यता विश्लेषण PTRACETRACEME Linux कर्नेल में एक विशेषाधिकार वृद्धि भेद्यता है, जिसे जैन हॉर्न ने जुलाई 2019 में खोजा था। भेद्यता विश्लेषण: Ptrace एक सिस्टम कॉल है, यह एक ऐसी विधि प्रदान करता है जो एक प्रोसेस tracer को दूसरे...

exploits-rconfig

Exploits Drei Exploits für rconfig = 3.9.4 : root@kitploit: CVE-2019-19509 : authenticated RCE CVE-2019-19585 : Local Privilege Escalation root CVE-2020-10220 : unauthenticated SQLi rconfigrootRCEunauth.py : chaining the three CVEs above to get root reverse shell without authentication...

kube-trivy

Ein einfacher und umfassender Schwachstellenscanner für Kubernetes Zusammenfassung KubeTrivy ist eine Erweiterung von trivy für Kubernetes. KubeTrivy ist ein einfacher und umfassender Schwachstellenscanner für Kubernetes. KubeTrivy erkennt Schwachstellen in Betriebssystempaketen Alpine, RHEL,...

crtsh

crtsh Cliente de API para crt.sh O crtsh permite obter informações sobre um site HTTPS. Ex.: Pesquisar subdomínios. Esta ferramenta utiliza os logs de Transparência de Certificados. Para mais informações, consulte https://crt.sh/ Exemplo Subdomínios Pesquise subdomínios de example.com Organização...

malwoverview

Malwoverview !Alt...

envsec

envsec Gestione sicura dei segreti d'ambiente utilizzando i depositi nativi del sistema operativo. Demo Funzionalità Memorizza i segreti nel deposito nativo del sistema operativo non in file di testo semplice Multipiattaforma: macOS, Linux, Windows Organizza i segreti per contesto es. myapp.dev,...

SSRF-CVE-2020-15002

Краткое описание Логика проверки URL, применяемая при обработке /appsuite/api/oxodocumentfilter&action=addfile, имеет три дефекта, которые могут быть использованы для выполнения атаки SSRF типа «время проверки — время использования» ToCToU. Эта проблема позволяет злоумышленникам выполнять HTTP...

CVE-2026-23550

CVE-2026-23550 Modular DS header'User-Agent'; $userAgentMatches = $userAgent && Str::is'ModularConnector/ Linux', $userAgent; $originQuery = $request-has'origin' && $request-get'origin' === 'mo'; $isFromQuery = $originQuery || $userAgentMatches && $request-has'type'; // When is wp-load.php reques...

leakish

Leakish Browser-Datenschutzleck-Detektor — acht Erkennungsmodule, Risikobewertung und Kontoverlauf, alles in Ihrem Browser. Erstellt mitVerdent — einem agentischen Programmierassistenten. Jedes Erkennungsmodul, das Analyse-Dashboard, der API-Key-Authentifizierungsablauf, die zweisprachige...

CVE-2025-24893

Exploit per CVE-2025-24893 CVE-2025-24893 è una vulnerabilità critica di remote code execution RCE non autenticata che colpisce la piattaforma XWiki. Questa falla permette a qualsiasi utente guest di iniettare ed eseguire codice Groovy arbitrario—senza autenticazione—tramite una richiesta RSS...

yc-mk8s-copy-fail-mitigation

Copy Fail / Dirty Frag Mitigation für Yandex Managed Kubernetes Automatische Anwendung der Mitigation für die Schwachstellen CVE-2026-31431, CVE-2026-43284 und CVE-2026-43500 im Linux-Kernel auf allen Worker-Nodes des Yandex Managed Kubernetes Clusters. Beschreibung der Schwachstelle CVE-ID:...

EUVD-2026-66818

In OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with includesubtree to the GET /v3/roleassignments endpoint. The domain's project record has...

CVE-2026-4112

SonicWall SMA 8200v: Privilege Escalation durch Cross-Parameter Blind SQL Injection Firmware: 12.5.0-02283 Platform Hotfix auf 12.5.0-02002 Basis SonicWall Advisory 1. Zusammenfassung Eine Blind-SQL-Injection-Schwachstelle nach der Authentifizierung in der Verwaltungskonsole der SonicWall SMA...

vexhub-crawler

VEX Hub Crawler vexhub-crawler è un componente del VEX Hub che recupera automaticamente i documenti VEX dai repository sorgente. Panoramica Il crawler identifica i repository sorgente a partire dai PURL Package URL registrati e copia i documenti VEX in VEX Hub. Questo processo garantisce che VEX...

retryabledns

पुनः प्रयास योग्य DNS रिज़ॉल्वर miekg/dns पर आधारित और bogdanovich/dnsresolver से प्रेरित। विशेषताएँ सिस्टम डिफ़ॉल्ट DNS रिज़ॉल्वर और उपयोगकर्ता द्वारा प्रदान किए गए दोनों का समर्थन करता है I/O त्रुटियों, टाइमआउट या नेटवर्क विफलताओं के मामले में DNS अनुरोधों को पुनः प्रयास करता है मनमाना क्वेरी...

svja

svja La RDPS Super Vulnerable Java Application è esattamente questo: un'applicazione Java super vulnerabile, creata per il beneficio di tutti, per vedere una varietà di vulnerabilità comuni, spesso "complesse". Questo software è stato creato come parte del Roniel and DaRon Podcast Show...

poc-cve-2024-0132

poc-cve-2024-0132 Ambiente de reprodução: SO: ubuntu 22.04 com driver NVIDIA docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Passo de reprodução: executar a imagem do contêiner poc Alvo: Acessar arquivos do host no contêiner Chamar as APIs do daemon do docker via docker.sock no contêiner...