CVE-2026-4480

🚨 CVE-2026-4480 - 삼바 인쇄 서브시스템의 중요 원격 코드 실행 원격 코드 실행 RCE 삼바 인쇄 명령 주입 취약점 "하나의 인쇄 작업 이름이 쉘 명령이 되어서는 안 됩니다." 📖 개요 CVE-2026-4480 는 삼바의 인쇄 서브시스템에 영향을 미치는 중요한 명령 주입 취약점입니다. 특정 구성에서 삼바는 사용자 제어 인쇄 작업 이름%J을 충분한 정제 없이 쉘 명령에 전달하여, 공격자가 영향을 받는 서버에서 임의의 명령을 실행할 수 있게 할 수 있습니다. 🎯 취약점 세부 정보 🔍 근본 원인 이 문제는 삼바가 다음과...

username-anarchy

Username Anarchy Version: 0.6 20 September 2024 Author: urbanadventurer Andrew Horton Homepage: https://www.morningstarsecurity.com/research/username-anarchy Source: https://github.com/urbanadventurer/username-anarchy/ License: MIT Description Tools for generating usernames when penetration...

CVE-2026-42055

cve-id ⚡ 簡単な使い方 このプロジェクトは、以下のような安全で許可された環境でのみ使用してください。 ローカル仮想マシン Dockerコンテナ 分離されたラボ環境 許可されたペネトレーションテスト環境 設定例: root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Window...

CVE-2019-0232

CVE-2019-0232 説明 これは、CVE‑2019‑0232 の悪用ワークフローを自動化するツールであり、コマンド実行モードとリバースシェルモードの両方を提供します。コマンドの自動 URL エンコードをサポートし、一時的な HTTP サーバーを起動して nc.exe をホストし、certutil を使用して脆弱な Apache Tomcat CGI エンドポイントにアップロードし、リバースシェルをトリガーした後、自動的に HTTP サーバーを終了します。スクリプトは必須の引数を検証し、ペイロード URL を構築し、悪用リクエストを送信し、合理化され制御された悪用プロセスを保証しま...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

certificate-ripper

Certificate Ripper 🔐 A CLI tool to extract server certificates Demo Advantages It is fast Easy to use No openssl required Runs on any Operating System Can be used with or without Java, native executables are present in the releases Extracts all the sub-fields of the certificate Certificates can b...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

ddoor

ddoor cross platform backdoor using dns txt records What is ddor? ddor is a cross platform light weight backdoor that uses txt records to execute commands on infected machines. Features Allows a single txt record to have seperate commands for both linux and windows machines List of around 10 publ...

peirates v1.1.31

Peirates What is Peirates? Peirates, a Kubernetes penetration tool, enables an attacker to escalate privilege and pivot through a Kubernetes cluster. It automates known techniques to steal and collect service account tokens, secrets, obtain further code execution, and gain control of the cluster...

CVE-2025-55182-React-RSC-Exploit

CVE-2025-55182 // REACT 서버 컴포넌트 RCE 개요 CVE-2025-55182에 대한 익스플로잇 PoC입니다. React Server Components의 안전하지 않은 버전과 입력 검증 함수 취약점을 대상으로 합니다. 기술 메커니즘 벡터 : hydration 중 $1:proto :then을 통한 프로토타입 오염. 페이로드 : process.mainModule.require'childprocess'를 통한 RCE. 유출 : X-Action-Redirect 헤더를 통한 데이터 누출. 요구 사항 python3...

CVE-2021-43287

CVE-2021-43287 POC: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url EXP: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！...

custom-bytecode-analyzer

custom-bytecode-analyzer Java bytecode analyzer customizable via JSON rules. It is a command-line tool that receives a path containing one or more Jar or War files, analyzes them using the provided rules and generates HTML reports with the results. Usage root@kitploit: usage: java -jar cba-cli.ja...

CVE-2025-32432-PoC

CVE-2025-32432: ログポイズニングからRCEへのエクスプロイトツール 説明 このリポジトリには、Craft CMSの重大な脆弱性チェーンを実証するために設計された、Goで書かれたプロフェッショナルな概念実証（PoC）エクスプロイトが含まれています。このエクスプロイトは、ローカルファイルインクルージョン（LFI）につながるログポイズニング脆弱性を利用し、最終的にリバースシェルを介したリモートコード実行（RCE）を達成します。 技術的詳細 このエクスプロイトは、多段階の実行チェーンに従います： 1. ログポイズニング...

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability

CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability Mark Mallia 작성 컨테이너화와 자동화의 힘 컨테이너화는 현대 애플리케이션 제공의 중추입니다. 전체 런타임 스택을 단일의 불변 이미지로 묶어 클러스터의 모든 호스트에 예기치 않은 문제 없이 배포할 수 있습니다. Kubernetes는 이러한 이미지를 가져와 파드로 스케줄링하며, 선언적 모델로 네트워킹부터 스토리지까지 모든 것을 조율합니다. 이는 고도로 분산된 환경과 여러 앱이 서비스되는 환경에서 유용합니다. 이 스택이 대규모...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

mysql_dos

This tool crashes vulnerable MySQL servers using CVE-2017-3599, a remote integer overflow when parsing login credentials. It can be downloaded here you will need to run it from the command line Usage: mysqldos target port...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

CVE-2026-12243-NLTK-PoC

CVE-2026-12243 — NLTK パストラバーサルラボ NLTK 3.9.4 のパーセントエンコードされたパストラバーサル動作と、NLTK 3.10.0 で修正された動作を対比する、小さく再現可能な Docker ラボです。 脆弱なバージョンは、URL デコード前にリソース名を検証します。固定ペイロード %2e%2e/%2e%2e/outside/lab-secret.txt はチェックを通過し、後で ../../outside/lab-secret.txt にデコードされ、設定された NLTK...

emp3r0r v4.15.0

emp3r0r A self-healing, memory-only C2 for Linux and Windows — agents that survive broken links, never touch disk, and script their way through the Win32 API. What is emp3r0r? emp3r0r is a post-exploitation framework and C2 built for Linux and Windows environments where stealth and resilience...

kerberoast

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors kerberoast Kerberos attack toolkit -pure python- Install pip3 install kerberoast Prereqirements Python 3.6 See requirements.txt For the impatient IMPORTANT: the accepted target url formats for LDAP and Kerberos are th...