CVE-2024-21626

PoC уязвимости CVE-2024-21626 Полную статью с подробным объяснением читайте здесь. Связанная статья В ходе исследования CVE-2024–21626 я обнаружил уязвимость, которая была упущена в более старых версиях Docker и runC. Чтобы узнать больше о том, что я нашел, прочитайте следующую статью: «Изучение...

launchd-portrep

launchd-portrep launchd-portrep es un exploit para una vulnerabilidad de reemplazo de puertos en launchd, el proceso inicial del espacio de usuario y el demonio de gestión de servicios en macOS. Al enviar un mensaje Mach manipulado al puerto de bootstrap, se puede forzar a launchd a desasignar su...

libnfc

root@kitploit: - Free/Libre Near Field Communication NFC library Libnfc historical contributors: Copyright C 2009 Roel Verdult Copyright C 2009-2015 Romuald Conty Copyright C 2010-2012 Romain Tartière Copyright C 2010-2013 Philippe Teuwen Copyright C 2012-2013 Ludovic Rousseau Additional...

fragattacks

FragAttacks: هجمات التجزئة والتجميع 1. مقدمة يحتوي هذا المستودع على أداة FragAttacks. يمكنها اختبار عملاء ونقاط وصول Wi-Fi بحثًا عن هجمات التجزئة fragmentation والتجميع aggregation. تؤثر هذه الثغرات على جميع شبكات Wi-Fi المحمية. لمزيد من المعلومات حول هذه الثغرات، انظر fragattacks.com. الموارد...

mfoc

MFOC is an open source implementation of "offline nested" attack by Nethemba. This program allow to recover authentication keys from MIFARE Classic card. Please note MFOC is able to recover keys from target only if it have a known key: default one hardcoded in MFOC or custom one user provided usi...

ADReaper

ADReaper ADReaper es una herramienta escrita en Golang que enumera un entorno de Active Directory con consultas LDAP en pocos segundos Instalación Puedes descargar binarios ejecutables precompilados para Windows/Linux desde últimos lanzamientos Instalar desde código fuente Para compilar desde el...

CVE-2022-44721-CsFalconUninstaller

CVE-2022-44721 Crowdstrike Falcon Uninstaller CrowdStrike Falcon is a cloud-powered endpoint detection and response EDR and antivirus AV solution. On each end-device a kernel level managed sensor is deployed and makes use of the cloud-based capabilities. The sensor can be configured with an...

CVE-2024-21533-PoC-ggit

Vulnerabilidad de inyección de argumentos CVE-2024-21533 en ggit ggit se describe a sí mismo como: root@kitploit: Envoltorios de comandos git locales basados en promesas Recursos: Código fuente del proyecto en GitHub: https://github.com/bahmutov/ggit Paquete npm del proyecto:...

CVE-2026-60137_CVE-2026-63030

CVE-2026-60137 + CVE-2026-63030 — WordPress Unauthenticated RCE Vulnerability: REST Batch Route Confusion + WPQuery SQL Injection → Full RCE CVSS v3.1: 10.0 / 10.0 — CRITICAL | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected: WordPress 6.9.0–6.9.4, 7.0.0–7.0.1 | Patched: 6.9.5, 7.0.2 root@kitploit:...

SharpPrivesc

SharpPrivesc Practicing C and bringing Privesc attack surfaces together. Still noob stuff. Privesc checks and the like. I preferred Spectreops command line parsing classes so decided to utilize theirs over other .net packages like command line parser etc. To-Do: Menu More Privesc Check modules...

exploit-CVE-2016-7434

CVE-2016-7434 ntpd DOS exploit Ntpd suffer from a null pointer reference which is possible to trigger to crash the application. According to NTP.org, "If ntpd is configured to allow mrulist query requests from a server that sends a crafted malicious packet, ntpd will crash on receipt of that...

gotigate

gotigate Exploit CVE-2022-40684 Install root@kitploit: ▶ go install github.com/gustavorobertux/gotigate@latest Basic Usage root@kitploit: ▶ gotigate TARGET IP or youraddress.com "height":1, "interface":"", "csf-device":"", "table-visualization":"", "device-list-online":"",...

selenium-wire

Selenium Wire is no longer being maintained. Thank you for your support and all your contributions. Selenium Wire Selenium Wire extends Selenium's Python bindings to give you access to the underlying requests made by the browser. You author your code in the same way as you do with Selenium, but y...

gopacket

GoPacket Esta biblioteca proporciona capacidades de decodificación de paquetes para Go. Consulte godoc para obtener más detalles. La versión mínima de Go requerida es la 1.5, excepto para pcapgo/EthernetHandle, afpacket y bsdbpf, que necesitan al menos la 1.9 debido a las dependencias de...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox is an advanced threat protection solution that creates isolated environments to analyze suspicious files, URLs, and network traffic for malicious behavior. It uses a...

gf

gf A wrapper around grep to avoid typing common patterns. What? Why? I use grep a lot. When auditing code bases, looking at the output of meg, or just generally dealing with large amounts of data. I often end up using fairly complex patterns like this one: root@kitploit: ▶ grep -HnrE...

cfn_nag

Background The cfn-nag tool looks for patterns in CloudFormation templates that may indicate insecure infrastructure. Roughly speaking, it will look for: IAM rules that are too permissive wildcards Security group rules that are too permissive wildcards Access logs that aren't enabled Encryption...

CVE-2023-20198-Scanner

Cisco IOS XE Device Scanner User Guide for CVE-2023-20198-Scanner This is a webshell fingerprinting scanner designed to identify implants on Cisco IOS XE WebUI's affected by CVE-2023-20198 and CVE-2023-20273. This Python script checks for compromised Cisco IOS XE devices by making HTTP and HTTPS...

CVE-2025-64328_FreePBX-framework-Command-Injection

CVE-2025-64328 FreePBX Inyección de Comandos Autenticada en el módulo framework Repositorio simple de prueba de concepto para CVE-2025-64328 FreePBX Inyección de Comandos Autenticada en el módulo framework. Artículo completo aquí:...

CVE-2022-30525_check

CVE-2022-30525check Description: This script checks for the presence of the OS command injection vulnerability CVE-2022-30525 in Zyxel USG FLEX devices running firmware versions 5.00 through 5.21 Patch 1. The vulnerability allows an attacker to modify specific files and execute OS commands on a...