CVE-2021-3156

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo Baron Samedit Root Exploit No BruteForce All research credit: Qualys Research Team Check out the details on their blog. Manually installed Ubuntu 20.04 LTS and Sudo version 1.8.31 on Docker container for testing purpose and running the command...

CGA-5XWJ-HJR3-384P

Bulletin has no description...

CGA-P22J-64G2-6P2C

Bulletin has no description...

CGA-W637-CXPV-2934

Bulletin has no description...

CVE-2020-9460

CVE-2020-9460 root@kitploit: ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ Cross Site Scripting - Oempro Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignNam...

DLLHijackingScanner

UAC bypass - DLL hijacking Description This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification. Summary Generate Header from CSV Arguments Generate the list of vulnerable PE and DLL DLLHijacking.exe Log file Execution Result test.dll Sources Generate...

sub.Monitor

sub.Monitor root@kitploit: Fast & user-friendly subdomain monitoring tool for continous attack surface management. Why? Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains removing the necessity for prior database management...

hades

概要 Hades は、最新のAV/EDRが一般的に使用する防御機構をバイパスすることを目的として、いくつかの回避技術を組み合わせた概念実証ローダーです。 使用方法 最も簡単な方法は、Linux上で make を使用してプロジェクトをビルドすることです。 root@kitploit: git clone https://github.com/f1zm0/hades && cd hades make...

hades

About Hades is a proof of concept loader that combines several evasion technques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs. Usage The easiest way, is probably building the project on Linux using make. root@kitploit: git clone https://github.com/f1zm0/hades...

shodanwave

Shodanwave Shodanwave 是一款用于探索和获取摄像头信息（特别是 Netwave IP 摄像头）的工具。该工具利用名为 Shodan 的搜索引擎，可以轻松地在网络上搜索摄像头。 该工具能做什么？看，列表在这里！ 搜索 暴力破解 SSID 和 WPAPSK 密码泄露 电子邮件、FTP、DNS、MSN 密码泄露 漏洞利用 这是 Shodanwave 运行的一个示例，密码未通过暴力破解找到，因此工具尝试泄露摄像头内存。如果工具找到了密码，就不会尝试泄露内存。 asciicast 如何使用？ 要使用 Shodanwave，您需要一个 API 密钥，该密钥可在...

ebpfmon

ebpfmon ebpfmon is a tool for monitoring eBPF programs. It is designed to be used with bpftool from the linux kernel. ebpfmon is a TUI terminal UI application written in Go that allows you to do real-time monitoring of eBPF programs. Installation eBPFmon can be built from source or there is a...

altdns

Altdns - Subdomain discovery through alterations and permutations Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in words that could be present in subdomains under a domain such as test, dev, staging as well as takes in a list of...

CVE-2011-2523

CVE-2011-2523 Exploitation 🚀 Usage This poc script allows you to exploit the CVE-2011-2523 VsFTPd 2.3.4 Backdoor Command Execution help ⚒️ Installation root@kitploit: git clone https://github.com/ByteForgeFr/CVE-2011-2523 cd CVE-2011-2523 Install the needed requirements pip install pwntools argpar...

CA-Common-Services-privilege-escalation-cve-2016-9795-revisited

CA Common Services privilege escalation CVE-2016-9795 revisited Description In one of my pentests, I stumbled across the casrvc SUID binary which is part of CA Common Services suite. As I found out, the binary is vulnerable to local privilege escalation. As a matter of fact, a public CVE...

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

CVE-2026-8461

cve-id ⚡ 简单用法 仅在安全且经过授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 授权的渗透测试环境 示例设置： root@kitploit: git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash / WSL source...

POC-CVE-2026-19681

CVE-2026-19681 —— 文件上传处理中的命令注入（需认证） 状态：已确认 ，基于 6.7.2-14.el9 实验室环境（2026-08-20）。通过 POST /rest/file/upload 暂存的文件名为 p;sleep$IFS20;-EvvfJk（context 前缀携带元字符），随后 POST /rest/auditFile（type=scapLinux、version=1.2）恰好停滞 20.1 秒并返回错误 106（"Error adding Tailoring file to SCAP zip file"）——这是注入后正常的错误路径。执行发生在 zip -9...

Mailphish

Mailphish Coded By Pro MCracker Mailphish Will Help You To Create Professional Phishing Emails Fast And Easy Visit Our Websites For Learn Hacking Methods https://crackcodes.xyz And https://crackcodes.in If You Copy The Code And Make Your Own, Don't forget To Give Me Some Credit Kid! You Don't Get...

CVE-2026-27145

cve-id ⚡ Uso Simple Utiliza este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados Configuración de ejemplo: root@kitploit: git clone cd Ejemplo de uso:...

CVE-2024-8190

CVE-2024-8190: Ivanti Cloud Service Appliance Authenticated Command Injection Proof of concept to exploit CVE-2024-8190 on vulnerable devices. Blog Post Root cause and indicators of compromise here: https://www.horizon3.ai/attack-research/cisa-kev-cve-2024-8190-ivanti-csa-command-injection/ Usage...