chisel

Chisel Chiselは、HTTP上で転送され、SSHで保護される高速なTCP/UDPトンネルです。クライアントとサーバーの両方を含む単一の実行ファイルです。Go（golang）で書かれています。Chiselは主にファイアウォールを通過するのに役立ちますが、ネットワークへの安全なエンドポイントを提供するためにも使用できます。 目次 特徴 インストール デモ 使用方法 貢献 変更履歴 ライセンス 特徴 使いやすい 高性能 SSHプロトコル（crypto/ssh経由）を使用した暗号化接続 認証接続;...

CVE-2020-0688

python3 CVE-2020-0688.py mail.chinabaiker.com [email protected] password command...

CVE-2018-6574

CVE-2018-6574 Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow go get remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. from mitre RCE command The...

CVE-2019-13272

CVE-2019-13272 - Pkexec Local Privilege Escalation ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author BCOLES Description In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the...

rocacheck

rocacheck パッケージ rocacheck は、RSA 鍵が破損した Infineon コードによって生成され、Coppersmith攻撃の再来 ROCA / CVE-2017-15361 による素因数分解に対して脆弱かどうかをチェックする鍵指紋アルゴリズムの Go 実装です。...

octosuite

GitHubデータ分析のためのターミナルベースのツールキット。 root@kitploit: $ octosuite user torvalds root@kitploit: from pprint import pprint import octosuite user = octosuite.Username="torvalds" exists, profile = user.exists if exists: pprintprofile インストール root@kitploit: pip install octosuite 使用法 TUI（対話型）...

RE11S_1.11-formAccept-CommandInjection

RE11S1.11-formAccept-CommandInjection During my internship at Qi An Xin Tiangong Lab, I discovered a command injection vulnerability in the RE11S1.11 router. By analyzing the webs file in the bin directory, I found that the function formAccept contains a command injection vulnerability. The...

CVE-2025-32463

CVE-2025-32463 🚨 Privilege escalation to root usingsudo chroot. No need for gcc installed. 🚀 What is CVE-2025-32463? CVE-2025-32463 is a Linux vulnerability that allows a local attacker to escalate privileges to root by abusing the sudo chroot command. Unlike similar exploits, this technique does...

CVE-2018-1049-POC

This Python script is a custom reimplementation of the Metasploit module exploit for CVE-2018-1049, which targets VyOS Vyatta via a privilege escalation vulnerability in a Perl script misused through sudo. You need valid SSH credentials. You gain root via command injection in a sudo-permitted...

nishang

Nishang Nishang es un conjunto de scripts y payloads que permite el uso de PowerShell para seguridad ofensiva, pruebas de penetración y red teaming. Nishang es útil durante todas las fases de las pruebas de penetración. Por Nikhil Mittal Fundador de Altered Security - ¡Formación práctica en red...

HIK-CVE-2021-36260-Exploit

hikvisionbrute Brute Hikvision CAMS with CVE-2021-36260 Exploit run go run src/main.go -help to get help with running args run example go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt...

XeytanWxCpp-RAT

WARNING THIS PROJECT IS STILL IN THE EARLY PHASES OF DEVELOPMENT. AT THIS MOMENT IN TIME, THE APPLICATION LOOKS HORRIBLE, THERE IS AN ODD BUG FIRST TODO POINT, SEE BELOW THAT HAS TO BE FIXED ASAP. Introduction RAT application written in C++ using wxWidgets framework. Features Get client's system...

log4shell-vulnerable-app

Log4Shell示例漏洞应用程序（CVE-2021-44228） 本仓库包含一个存在CVE-2021-44228（别名 Log4Shell）漏洞的Spring Boot Web应用程序。 它使用了Log4j 2.14.1（通过 spring-boot-starter-log4j2 2.6.1）和JDK 1.8.0181。 运行应用程序 运行它： root@kitploit: docker run --name vulnerable-app --rm -p 8080:8080...

CVE-2023-31702

CVE-2023-31702 — eScan Management Console SQL Injection Authenticated Overview CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GetUserCurrentPwd endpoint, where th...

CVE-2024-10914-Exploit

SilverX Exploit Tool 📌 Description SilverX Exploit Tool is a penetration testing script designed to detect and exploit vulnerabilities in web applications. It provides a shell-like interface for executing commands remotely on vulnerable systems. ⚠️ Disclaimer This tool is for educational and...

CVE-2020-17144

weaponized tool for CVE-2020-17144Microsoft Exchange 2010 MRM.AutoTag.Model unsafe deserialize vulnerability build install .net framework 3.5 first, then make. usage root@kitploit: CVE-2020-17144 After exploit, access http://target/ews/soap/?pass=whoami to get command execution. And you can also...

dnsx-action

dnsx Action makes it easy to orchestrate dnsx with GitHub Action. Example Usage GitHub Action runningdnsx on list of hosts root@kitploit: - name: 💥 dnsx - DNS Resolver uses: projectdiscovery/dnsx-action@main with: list: hosts.txt GitHub Action runningdnsx with custom resolvers root@kitploit: -...

SharpSpray

SharpSpray SharpSpray is a Windows domain password spraying tool written in .NET C. Introduction SharpSpray is a C port of DomainPasswordSpray with enhanced and extra capabilities. This tool uses LDAP Protocol to communicate with the Domain active directory services. Features Can operate from...

DBShield

DBShield Protects your data by inspecting incoming queries from your application server and rejecting abnormal ones. How it works? For example, this is how web server normally interacts with database server: By adding DBShield in front of database server we can protect it against abnormal queries...

wardriving

Wardriving Here you can find all the data about the Wardriving Workshop from Ekoparty 2017. Faraday Plugins The files starting with import are all modules to be used with the Faraday Plugin. In order to run them, download and copy to you faradayinstallation/bin/. For more info on the Faraday Plug...