884035 matches found
CVE-2021-32305-websvn-2.6.0
CVE-2021-3205-websvn-2.6.0 This is a exploit of CVE-2021-3205 a web vulnerability to command injection on search.php path, this exploit allows execute commands. Requirements optparse, signal, requests Usage root@kitploit: ❯ python3 CVE-2021-3205.py --url http://10.0.2.168/websvn/ --payload "bash ...
cve-2026-39987
cve-2026-39987 Installation • Usage • Examples I'm just trying out Go :D Btw: CVE-2026-39987 PoC: Marimo:PORT/terminal/ws REDACTED@REDACTED:$ uname -a Linux ... REDACTED@REDACTED:$ exit exit INF:normalclose websocket: close 1000 normal: Terminal session ended Custom Command -c: r...
DVIA-v2
DVIA-v2 Powered by 8ksec.io DVIA-v2 written in Swift along with additional vulnerabilities Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration...
gopher47
gopher47 A third-party Gopher Assassin for the Havoc Framework it's like the videogame :D What is This? 🤔 This is a 3rd Party agent for the Havoc C2 written in Golang, mainly written as a learning project, but I'm sure it's still useful. By the time this is out, you can read more about what and w...
kavanoz
🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation root@kitploit: pip install kavanoz To install from sourc...
amd-ryzen-master-driver-v17-exploit
Cobalt Strike Beacon Object File for kernel exploitation using AMD's Ryzen Master Driver version 17. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF and executable which exploits AMD's Ryzen Master...
SharpC2
SharpC2 SharpC2 is a Command & Control C2 framework written in C. It consists of an ASP.NET Core Team Server, a .NET Framework implant, and a .NET MAUI client...
CVE-2020-27955
Git-lfs Exploit de ejecución remota de código RCE CVE-2020-27955 versión .bat / powershell Vulnerables: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken, etc. Descubierto por Dawid Golunski https://legalhackers.com https://exploitbox.io Probado en Windows en...
icicle
MSP430 crash analysis Crashes found in MSP430 binaries by Icicle. | Target| Description ---|---|--- I03| Goodwatch| Incorrect comparison when writing to dmesgbuffer I04| Goodwatch| Zero message length I05| Goodwatch| RNG Overflow I06| Goodwatch| Out-of-bounds access in OOK keypress I07| Goodwatch...
czds
CZDS What is CZDS? Each Top Level Domain TLD is maintained by a registry operator, who also manages a publicly available list of Second Level Domains SLDs and the details needed to resolve those domain names to Internet Protocol IP addresses. The registry operator’s zone data contains the mapping...
CVE-2024-3094-check
CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use root@kitploit: curl -fsSL...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 Detail Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. PoC Start a HTTP server root@kitploit: 1- python3 -m http.server 80 Start a netcat listener root@kitploit: 2- nc -lnvp 'Target Port' Ma...
CGA-2PRV-J2XM-WMP9
Bulletin has no description...
CGA-8FP7-WM3F-RHQ7
Bulletin has no description...
CGA-9C2W-X98P-8M3F
Bulletin has no description...
CGA-6GC7-RJ4V-W7G6
Bulletin has no description...
pyOneNote
pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development root@kitploit: pip install -U...
RasmanPotato
RasmanPotato Thanks to @Wh04m1001 for continuous communication over time Just another potato like other potatoes, using RasMan service for privilege escalation For Windows 1011 not test, Windows Server 2012 - 20192022 not test Usage root@kitploit: magicRasMan v0.1 Provided that the current user h...