f_hid-4.14-backports

fhid backports for Linux 4.14.190 SM-A525F Three fixes to drivers/usb/gadget/function/fhid.c, carried by hand to a 4.14.190 Android vendor kernel and verified on the device they run on. 4.14 is end-of-life. No stable backport exists for any of these, and none is coming. That is the whole reason...

CVE-2026-56121_exploit

CVE-2026-56121 — Feast Registry Unauthenticated RCE dill.loads Unauthenticated remote code execution in the Feast feature store's registry gRPC server. The ApplyFeatureView RPC rebuilds an OnDemandFeatureView from the request proto. Doing so base64-decodes spec.userdefinedfunction.body and passes...

CTF_CVE_DSP_1

🚩 Vuln Gallery CTF Welcome to Vuln Gallery , an intermediate-level Linux-based CTF Capture The Flag. This challenge will guide you from the initial exploitation of a modern web application to privilege escalation on a misconfigured Linux system. Your mission is to exploit the vulnerabilities, mov...

CVE-2026-34160

CVE-2026-34160 — Unauthenticated SSRF in Chamilo LMS via PENS plugin pens.php Severity : High CVSS 7.5 CWE : CWE-918 Server-Side Request Forgery Affected : chamilo/chamilo-lms 2.x commit af6b7002 and earlier Advisory : GHSA-g2xj-4cch-j276 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34160 TL;D...

CVE-2025-54123

CVE-2025-54123 Hoverfly Command Injection to RCE PoC Overview This repository contains a Python proof-of-concept PoC script for interacting with Hoverfly instances affected by CVE-2025-54123. The script supports: Authentication using username/password credentials Authentication using an existing...

flagyard-ctf-writeups-

BlogHub Exploit Kit Flagyard Training Labs - Web / Medium / 1...

CVE-2026-6875

CVE-2026-6875 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual...

Exploit for Missing Authentication for Critical Function in Smartertools Smartermail

SmarterMail ConnectToHub RCE A Python-based exploit for CVE...

Exploit for Missing Authentication for Critical Function in Smartertools Smartermail

SmarterMail ConnectToHub RCE A Python-based exploit for CVE...

iOS-remote

iOS-remote iOS-remote connects to iOS devices via USB for displaying and controlling in web browser. It does NOT require jailbreaking. Because of displaying in web browser, iOS-remote supports Linux, macOS, Windows. iOS Version Support The support of this project depends on the version of...

SigDigger

SigDigger - The free digital signal analyzer SigDigger is a free digital signal analyzer for GNU/Linux and macOS, designed to extract information of unknown radio signals. It supports a variety of SDR devices through SoapySDR, and allows adjustable demodulation of FSK, PSK and ASK signals, decode...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips Lectura Arbitraria de Archivos → Robo de SECRETKEYBASE → RCE Resumen CVE-2026-66066 es una cadena de severidad crítica CVSS 9.5 de lectura arbitraria de archivos previa a la autenticación hasta ejecución remota de código en Ruby on...

CVE-2026-21019-Kubernetes-CronJob-Suspended-Execution-via-Time-Manipulation

CVE-2026-21019 – Kubernetes CronJob Suspended Execution via Time Manipulation Program Code YAML + Python exploit root@kitploit: cronjobvuln.yaml - CronJob that checks current time without external validation apiVersion: batch/v1 kind: CronJob metadata: name: backup spec: schedule: "0 2 "...

binfinder

binfinder Find binary files not installed through package manager Prerequisites Software go version = 1.12 docker version = 19 How to build and run binfinder Build root@kitploit: $ make build Once the build is complete, you can run bindfinder by running: root@kitploit: $ ./binfinder --images...

smb-usermap

Samba "username map script" Command Execution This module exploits a command execution vulnerability in Samba versions 3.0.20 through 3.0.25rc3 when using the non-default "username map script" configuration option. By specifying a username containing shell meta characters, attackers can execute...

windows_kernel_shadow_stack

Proof of Concepts This project aims to highlight certain aspects of the shadow stack mitigation implemented by Microsoft in Windows 11. The code is specifically focused on Windows 11 24H2. It may not work on other version of Windows 11, due to the kernel offset management. The project is divided...

CVE-2021-4034

CVE-2021-4034 root@kitploit: sudo apt install golang-go sudo apt install gccgo-go root@kitploit: grep PRETTY /etc/os-release id gcc cve-2021-4034-poc.c -o cve-2021-4034-poc ./cve-2021-4034-poc...

mojarragadget

mojarragadget 描述 我们在 Mojarra 库中发现了一条新的 Java gadget 链，本仓库包含 2 个 POC，用于在 2.3 和 3.0 版本上复现该漏洞。 更多信息请参阅： https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-1.html https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-2.html 构建 版本 2.3 root@kitploit: cd...

IPSpinner

🔁 IPSpinner IPSpinner is a local proxy which can be used to redirect all incoming requests through different chosen providers. The purpose is to create a pass-through proxy that rotates the source IP address of each request. As an example, running a bruteforce operation through IPSpinner will hel...

CVE-2026-3888-snap-confine-systemd-tmpfiles-LPE

CVE-2026-3888 — snap-confine / systemd-tmpfiles Escalada de Privilegios Local Escalada de privilegios local desde un usuario sin privilegios hasta root completo en Ubuntu Desktop 24.04+ explotando una condición de carrera TOCTOU entre snap-confine y systemd-tmpfiles. Se proporcionan dos variantes...