CVE-2026-34910-PoC

CVE-2026-34910 / CVE-2026-34909 — UniFi OS Unauthenticated RCE & File Read Unauthenticated Command Injection RCE CVE-2026-34910 + Path Traversal Arbitrary File Read CVE-2026-34909 in UniFi OS Server. CVSS 10.0 Critical each · CISA KEV listed · actively exploited by a Mirai-derived botnet azsxd...

LeetObfuscator

LeetObfuscator root@kitploit: ██╗ ███████╗███████╗████████╗ ██║ ██╔════╝██╔════╝╚══██╔══╝ ██║ █████╗ █████╗ ██║ ██║ ██╔══╝ ██╔══╝ ██║ ███████╗███████╗███████╗ ██║ ╚══════╝╚══════╝╚══════╝ ╚═╝ ██████╗ ██████╗ ███████╗██╗ ██╗███████╗ ██████╗ █████╗ ████████╗ ██████╗ ██████╗...

Zeek-Intelligence-Feeds

Zeek Intel Threat Feed w/ Combined Indicators This is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible. Getting Started These instructions will get you a copy of the project up and running. Dependencies ZEEK 3.0 or...

dploot

dploot dploot is Python rewrite of SharpDPAPI written in C by Harmj0y, which is itself a port of DPAPI from Mimikatz by gentilkiwi. It implements all the DPAPI logic of these tools, but this time it is usable with a python interpreter and from a Linux environment. If you don't know what is DPAPI,...

TeamPass

Teampass Self-hosted password management your whole team can trust Folder-level access control · authenticated AES-256-GCM encryption · compliance evidence Your secrets never leave your infrastructure. 🌐teampass.net · 📖Documentation · 💬Discussions · 🐳Docker Hub Contents About Who it's for Securit...

watermarks-remover

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a...

secure-vault-for-commercial

Secure Vault 📄 Technical paper: SecureVaultTechnicalPaperv3.5.0.pdf · Cite on Zenodo Local-first file encryption for Windows, secured by a physical USB key instead of a password. ⚠️ v3.5.0 includes a breaking security fix — see CHANGELOG.md before updating from an earlier version. Table of Content...

CVE-2026-72898

🔴 CVE-2026-72898 - Unauthenticated SQL Injection Metabase — Unauthenticated SQL Injection → Full Administrator Takeover 📌 Overview CVE-2026-72898 is a maximum-severity CVSS 10.0 unauthenticated SQL injection vulnerability in Metabase that allows a remote attacker to inject arbitrary SQL into the...

aotopsy

AOTopsy A Dart AOT snapshot analyzer. Turns libapp.so — the compiled Dart code inside a Flutter release APK — into function names, class layouts, call graphs, behavioral signals, and readable pseudocode. No Dart VM, no SDK compilation, no runtime fallback. Fork notice: AOTopsy is a fork of...

universal-android-debloater-next-generation

通用安卓去臃肿工具 下一代 !warning 免责声明 ：使用风险自负。我们不对您的设备可能发生的任何问题负责。 这是 UAD 项目 的一个独立分支。该项目旨在通过移除不必要且晦涩的系统应用来提升隐私和效率（能耗、速度、内存）。 这还可以通过减少攻击面来提升安全性。更多详情请阅读维基。 文档 关于 UAD-ng（及相关内容）的一切都可以在维基上找到，例如： 快速上手 本应用的功能 使用指南 推荐的安卓应用替代品 如何通过从源码构建获取最新版本 OEM 厂商的一些奇怪行为 推荐的 APK 分析应用 隐私 UAD-ng 不会收集或传输任何用户数据。唯一的外部连接是向 GitHub 发送的 G...

linux

Linux kernel The Linux kernel is the core of any Linux operating system. It manages hardware, system resources, and provides the fundamental services for all other software. Quick Start Report a bug: See Documentation/admin-guide/reporting-issues.rst Get the latest kernel: https://kernel.org Buil...

VCG

==================================================================================== VCG VisualCodeGrepper Current version: 2.3.2 ==================================================================================== Contents: 1. Overview 2. Latest additions to VCG V2.3.2 3. Using VCG Input...

ublockdnsclient v0.3.1

uBlockDNS Client uBlockDNS Client is an independent project and is not affiliated with, endorsed by, or related to uBlock Origin or its maintainer. uBlockDNS Client brings DNS-level ad and tracker blocking to your entire device. It uses community-maintained filter lists such as EasyList and...

moltis

Moltis — A secure persistent personal agent server in Rust One binary — sandboxed, secure, yours. Installation • Comparison • Architecture • Security • Features • How It Works • Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...

yoloai

yoloAI Sandboxed runner for AI coding agents. No permission fatigue, no credentials in the box, no changes to your project until you approve them. AI coding agents work best with the guardrails off, and that's a terrible way to run them on your real machine. yoloAI gives the agent a disposable...

react2shell

React2Shell Proof of Concept exploit for CVE-2025-55182 Unauthenticated Remote Code Execution vulnerability a.k.a React2Shell. The script used to get shell on Next.js versions before; 15.0.4 and below 15.1.8 and below 15.2.5 and below 15.3.5 and below 15.4.7 and below 15.5.6 and below 16.0.6 and...

MemProcFS-Analyzer

MemProcFS-Analyzer MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to optimize your memory analysis workflow. MemProcFS - The Memory Process File System by Ulf Frisk https://github.com/ufrisk/MemProcFS Features: Fast and easy memory analysis! You can...

JQueryingU

JQueryingU 说明： 基础客户端检测代码由 Christian Ludwig（https://jsfiddle.net/ChristianL/AVyND/）创建，并于 2016 年被 APT 29 使用。APT 29 将弹窗修改为 POST 请求，并在一次会议跟踪活动中利用它来剖析用户系统并识别点击者，随后才发送恶意载荷。 代码已被修改，改为通过 Base64 编码的伪造分析 GET 请求发送信息，而非 APT 29 使用的明文 POST。脚本中通过 https://ajax.googleapis.com/ajax/libs/swfobject/2.2/swfobject.js...

React2Shell-CVE-2025-55182-Testing-Environment

React2Shell CVE-2025-55182 テスト環境 CVE-2025-55182 のコンテナ化テスト環境。React Server Components における重大な CVSS 10.0 リモートコード実行脆弱性です。 ⚠️ 警告 この環境は意図的に脆弱であり、以下の目的にのみ使用すべきです： セキュリティ研究と教育 隔離環境でのペネトレーションテスト 脆弱性のメカニズムの理解 使用禁止： 本番環境へのデプロイ インターネットへの公開 悪意のある目的での使用 脆弱性の詳細 CVE : CVE-2025-55182 React, CVE-2025-66478 Next.js...

xwiki_solrsearch-rce-exploit

solrsearch-rce-exploit 针对 XWiki SolrSearch 的未授权 RCE PoC CVE-2025-24893。命令执行 + 反向 Shell。 CVE-2025-24893 – XWiki SolrSearch RCE PoC 针对 XWiki SolrSearch 模板注入导致未授权远程代码执行的概念验证。 已在 XWiki Debian 15.10.8 （修复版本：15.10.11 / 16.4.1 / 16.5.0RC1）上测试通过。 ⚠️ 仅用于教育目的。请勿在未经授权或明确许可的系统上运行。 功能 通过...