CVE-2024-27686

MikroTik RouterOS Denial of Service Vulnerability 📌 Description This document describes a Denial of Service DoS vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by...

moukthar

Moukthar Android用リモート管理ツール デモ 機能 権限バイパス Android 12以下 キーロガー 通知リスナー SMSリスナー 電話録音 画像キャプチャとスクリーンショット 動画録画 永続化 連絡先の読み取りと書き込み インストール済みアプリの一覧表示 ファイルのダウンロードとアップロード 端末の位置情報取得 インストール リポジトリをクローン root@kitploit: git clone https://github.com/Tomiwa-Ot/moukthar.git...

wahh_extras

wahhextras The Web Application Hacker's Handbook - Extra Content For all of you who have read "The web application hacker's handbook vol2", there are several references to extras, questions, source code that are not easy to found. I've collected all in this repository. TOC Web applications...

QCSuper

QCSuper QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G and for certain models 5G radio frames, among other things. It will allow you to generate PCAP captures of it using either a rooted Android phone, an USB dongle or an existing capture i...

reFlutter

This framework helps with Flutter apps reverse engineering using the patched version of the Flutter library which is already compiled and ready for app repacking. This library has snapshot deserialization process modified to allow you perform dynamic analysis in a convenient way. Key features:...

sqlmate

sqlmate There are some features that we think SQLMap should have. Like finding admin panel of the target, better hash cracking etc. If you think the same, SQLMate is for you. What it does? Feed it a SQL injection dork via --dork option and it will find vulnerable sites for you. After that, it wil...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Original CVE source written by xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Rewritten so the exploit can be run in 1 shell original exploit requires 2 shells. root@kitploit: Compile make all Create mount point for fuse filesystem mkdir -p...

CVE-2026-49097

camel-irc irc.sendTo Header Injection Reproducer CVE-2026-49097 This project demonstrates a message-header injection in Apache Camel's camel-irc component, tracked as CVE-2026-49097. IrcProducer reads the irc.sendTo header to choose the destination of the outgoing IRC message; when present it...

CVE-2026-43655-AppleM2ScalerCSCDriver-UAF

CVE-2026-43655: AppleM2ScalerCSCDriver shared scheduler use-after-free Public technical disclosure for CVE-2026-43655 , an AppleM2ScalerCSCDriver / IOSurfaceAccelerator use-after-free reachable from the default iOS app sandbox with no special entitlements. Apple addressed this issue in iOS 26.5 /...

jeopardize

소개 Jeopardize 도구는 피싱 도메인에 대한 기본적인 위협 인텔리전스 및 대응 기능을 가능한 한 최소 비용으로 제공하기 위해 개발되었습니다. 등록된 피싱 도메인 후보타이포스쿼팅, 호모그래프 등를 탐지하고 분석하여 위험 점수를 할당합니다. 그 후 해당 피싱 사이트의 로그인 폼에 유효한 것처럼 보이는 자격 증명을 전송합니다. 왜? 이런 시나리오를 상상해보세요. 공격자가 피싱 도메인 acmebnak.comacmebank의 타이포스쿼팅을 등록하고, 원본 acmebank.com의 로그인 폼을 복사한 후 스폰서 트윗을 통해 이...

jeopardize

Introduction Jeopardize tool is developed to provide basic threat intelligence&response capabilities against phishing domains at the minimum cost as possible. It detects registered phishing domain candidates typosquatting, homograph etc., analyzes them and assigns a risk score to them. After then...

CVE-2023-30547

CVE-2023-30547 PoC Exploit for VM2 Sandbox Escape Vulnerability alt img Description vm2 3.9.17 is vulnerable to arbitrary code execution due to a flaw in exception sanitization. Attackers can exploit this by triggering an unsanitized host exception within handleException, enabling them to escape...

Antiphishing

Antiphishing — Predictive Phishing Intelligence for Suricata DONATE · DASHBOARD VECTORS · CONTRIBUTING · SUBMIT A VECTOR · REST API CTI · WIKI Predictive Phishing Intelligence for Suricata — Preemptive Defense from Day Zero Antiphishing is an open-source GPLv3 Cyber Threat Intelligence CTI...

CVE-2022-1388

CVE-2022-1388 POC for CVE-2022-1388 affecting multiple F5 products. Follow the Horizon3.ai Attack Team on Twitter for the latest security research: Horizon3 Attack Team James Horseman Zach Hanley Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog:...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

certsync

certsync certsync는 NTDS를 원격으로 덤프하는 새로운 기법입니다. 이번에는 DRSUAPI 없이 골든 인증서golden certificate와 UnPAC the hash를 사용합니다. 다음 단계로 작동합니다: 1. LDAP에서 사용자 목록, CA 정보 및 CRL 덤프 2. CA 인증서와 개인 키 덤프 3. 각 사용자에 대해 오프라인으로 인증서 위조 4. 각 사용자에 대해 UnPAC the hash를 수행하여 NT 및 LM 해시 획득 root@kitploit: $ certsync -u khal.drogo -p...

openSSL_1.0.1g_CVE-2014-3507

OpenSSL 1.0.1g 2014년 4월 7일 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. 설명 OpenSSL 프로젝트는 강력하고 상용 수준의 완전한 기능을 갖춘 오픈 소스 툴킷으로, Secure Sockets LayerSSL v2/v3 및 Transport Layer SecurityTLS v1 프로토콜과 함께 강력한 범용 암호화 라이브러리를 구현하는 협력적 노력입니다...

CVE-2025-30208

🔥 CVE-2025-30208 Vite Arbitrary File Read Vulnerability Scanner Advanced vulnerability scanner for CVE-2025-30208 with enterprise-grade features Professional penetration testing tool for Vite Arbitrary File Read vulnerability detection 🚀 Quick Start • 📋 Features • 🔧 Usage • 📊 Examples • 🛡️ Securit...

CVE-2026-27971_POC

CVE-2026-27971 — Qwik server$ Unauthenticated RCE PoC !WARNING This repository contains an active remote-code-execution proof of concept. Use it only against systems you own or are explicitly authorized to test. The author assumes no responsibility for unauthorized use or damage. A standalone...

wsh

wsh wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow...