CVE-2024-29988-exploit

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...

detection-rules

Detection Rules Detection Rules は、Elastic Security で使用されるルールの本拠地です。このリポジトリは、Elastic Security の Detection Engine 向けルールの開発、保守、テスト、検証、リリースに使用されます。 このリポジトリは、Elastic のブログ記事 Elastic Security opens public detection rules repo で初めて発表されました。追加のコンテンツについては、併設のウェビナー Elastic Security: Introducing the public...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

trident

trident Trident 프로젝트는 다음 요구 사항을 충족하기 위해 개발된 자동화된 비밀번호 분사 도구입니다. 여러 클라우드 플랫폼/실행 제공자에 배포할 수 있는 능력 대상의 계정 잠금 정책에 따라 분사 캠페인을 예약할 수 있는 능력 운영 보안 목적으로 인증 시도가 발생하는 IP 풀을 늘릴 수 있는 능력 새로운 인증 플랫폼을 만났을 때 신속하게 기능을 확장할 수 있는 능력 목차 trident 목차 아키텍처 배포 설치 사용법 설정 캠페인 결과 아키텍처 이 다이어그램은 Diagrams를 사용하여 생성되었습니다. Go 고퍼는...

trident

trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...

CVE-2026-63766_exploit

CVE-2026-63766 — GPT-SoVITS Unauthenticated OS Command Injection Unauthenticated remote code execution in GPT-SoVITS's Gradio web UI webui.py. The audio-processing helpers openasr, openslice, opendenoise, openuvr5 interpolate unsanitised Gradio textbox path values straight into shell commands run...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

exploit_cve-2021-29447

exploitcve-2021-29447 For educational purposes only. This exploit is supposed to be really convenient tool to get any file from server running wordpress 5.6.2 and php8. see https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 All you need is base wp-admin access and ability to...

CVE-2026-10523-Ivanti-sentry

CVE-2026-10523 - Ivanti Sentry RCE 탐지 도구 인증 우회 및 원격 코드 실행과 관련된 Ivanti Sentry 취약점을 테스트하기 위한 포괄적인 개념 증명PoC 탐지 도구입니다. 이 도구는 CVE-2026-10520 및 CVE-2026-10523에 취약한 시스템을 식별합니다. 개요 이 프로젝트는 Ivanti Sentry 인스턴스가 심각한 인증 우회 및 원격 코드 실행 결함에 취약한지 탐지하고 검증하도록 설계되었습니다. 이 도구는 Ivanti Sentry API 엔드포인트를 통해 특별히 제작된 메시지를...

CVE-2022-40146_Exploit_Jar

Apache Batik SSRF to RCE Jar Exploit Component link https://github.com/apache/xmlgraphics-batik Blog https://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading Usage Modify the line 11 in...

hyperv_local_dos_poc

Hyper-V DoS PoC. This is code files of Visual Studio 2019 driver project. 1. Compile driver. 2. Enable nested virtualization for guest OS using command: root@kitploit: Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true 3. Run driver inside guest OS. Host OS will be rebooted or generate...

RAT-via-Telegram

RAT-via-Telegram Dviros's notes: Windows Remote Post Breach Tool via Telegram Python 2.7, Originally created by Ritiek, Forked and modified by mvrozanti and then myself. The whole purpose of this tool is to demonstrate as a "PoC" the control of an already breached machine, via Telegram. As the sa...

lynis

Documentation Do you like this software? Star the project and become a stargazer. lynis Lynis - Security auditing and hardening tool, for UNIX-based systems. Lynis is a security auditing tool for systems based on UNIX like Linux, macOS, BSD, and others. It performs an in-depth security scan and...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - 인증되지 않은 SQLi를 이용한 RCE PoC 교육 및 보안 연구 전용 - 아래 법적 고지 참조 CVE-2025-57819는 FreePBX에서 원격 코드 실행을 허용하는 치명적인 인증되지 않은 SQL 인젝션 취약점입니다. 이 PoC는 공식 패치가 공개된 이후 보안 연구 및 승인된 테스트 목적으로만 게시되었습니다. 개요 FreePBX 15.x, 16.x, 17.x패치된 버전 미만는 endpoint 모듈의 AJAX 핸들러에서 인증되지 않은 SQL 인젝션에 취약합니다. 이 취약점 체인은...

CVE-2023-34468

CVE-2023-34468 — Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC Short Python PoC for abusing an editable Apache NiFi ExecuteSQL processor with an H2 RUNSCRIPT payload to trigger remote command execution through a Bash reverse shell. For authorized testing and research only. Do not use against system...

adbsploit

ADBSploit A python based tool for exploiting and managing Android devices via ADB Currently on development Screenrecord Stream Screenrecord Extract Contacts Extract SMS Extract Messasing App Chats WhatsApp/Telegram/Line Install Backdoor And more... Installation root@kitploit: First Download or...

react2shellpoc

이 저장소는 특정 부류의 React Server Component 취약점이 통제된 합법적 교육 환경 내에서 어떻게 동작하는지 보여주는 개념 증명proof-of-concept을 포함하고 있습니다. 매뉴얼 root@kitploit: ┌──kali㉿kali-/Documents/tools/2025-55182 └─$ python exploit.py -h /\ /\ /\ /\ /\ /\ || CVE-2025-55182 React Server Components RCE usage: exploit.py -h -t URL -c CMD...

PowerSploit

This project is no longer supported PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment. PowerSploit is comprised of the following modules and scripts: CodeExecution Execute code on a target machine...

CVE-2001-0933

CVE-2001-0933 Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:". Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...

cloud-doctor

cloud-doctor One command grades your whole cloud account — misconfigurations, missing observability, and security posture, ranked by the five things to fix first. Point it at AWS, Cloudflare, Vercel, Supabase, Render, Fly.io, or Railway and it comes back with a score, what's broken, and a fix for...