msgpack-CVE-2021-23410-test

对 https://snyk.io/vuln/SNYK-JS-MSGPACK-1296122 的测试 这看起来不是漏洞。 root@kitploit: var assert = require'assert'; var msgpack = require'msgpack'; function sleepms return new Promiseresolve = setTimeoutresolve, ms; ; async function init var normal = "a": 1, "b": 2, "c": 1, 2, 3 ; var malicious =...

CVE-2024-7956

A vulnerability exists in the affected products that allows a threat actor to gain access to user’s projects. To exploit this vulnerability the threat actor must have basic user privileges. If exploited, the threat actor can modify and delete the project...

ranger

ranger セキュリティ専門家がリモートのMicrosoft Windowsベースのシステムにアクセスし、操作するためのツール。 このプロジェクトは、私たちは弓や矢を発明したわけではなく、単により効率的な使用方法を考案したという考え方に基づいています。 Rangerはコマンドライン駆動の攻撃・ペネトレーションテストツールであり、インスタンス化されたカタパルトサーバーを使用してWindowsシステムに対して機能を提供する能力を持っています。ユーザーが資格情報またはハッシュセット（NTLM、LM、LM:NTLM）を持っている限り、信頼関係にあるシステムにアクセスできます。...

CVE-2025-55182

CVE-2025-55182 React2Shell Analysis Report Sections required by the assignment guidelines are marked with “Required”. 1. Environment Required 1.1. Dockerfile Required This environment uses a custom Dockerfile based on the official Node.js Alpine image. root@kitploit: FROM node:20-alpine WORKDIR...

PinTheft-go

pintheft-go Go port of pintheft - RDS zcopy double-free LPE. Member of the Dirty Frag vulnerability class. !IMPORTANT Arch Linux is one of the most exposed distributions for this vulnerability, as it is among the few where the RDS module can typically be loaded by default. How it works tl;dr The...

CVE-2020-0796

CVE-2020-0796 Exploit de LPE en SMBv3 de Windows Autores Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Análisis del exploit Análisis de PoC por SungLin Knownsec 404 Team Análisis+PoC de @ZecOps Referencias...

CVE-2017-0199-v5.0

Exploit toolkit CVE-2017-0199 - v5.0 Exploit toolkit CVE-2017-0199 - v5.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

CVE-2026-37072

CVE-2026-37072 Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php An unauthenticated attacker can exploit a Local File Inclusion vulnerability in the 'lang' GET parameter. By sending a specially crafted POST request with t...

Shellshock_vuln_Exploit

🚨 Shellshock RCE Exploit CVE-2014-6271 This is a Python exploit for the Shellshock vulnerability CVE-2014-6271, which affects GNU Bash. The exploit targets CGI scripts on vulnerable web servers and establishes a reverse shell to the attacker's machine. CVE ID CVE-2014-6271 Disclaimer This tool is...

heap-viewer

HeapViewer An IDA Pro plugin to examine the heap, focused on exploit development. Currently supports the glibc malloc implementation ptmalloc2. 3rd place winner of the 2018 Hex-Rays Plugin Contest Requirements IDA Pro = 7.0 Tested on glibc 2.23 = 2.26 GraphView for linked lists bins/tcache Struct...

CVE-2019-19781

Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh...

CVE-2023-32315

CVE-2023-32315 - Ignite Realtime Openfire Path Traversal Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author phith0n and K3ysTr0K3R Description Openfire is an XMPP server licensed under the Open Source...

CVE-2019-12840-NodeJs-Exploit

CVE-2019-12840 root@kitploit: sudo node exploit.js...

CVE-2025-32463-Chwoot-POC

CVE-2025-32463 Sudo EoP Exploit PoC Rust Using Prebuild Binary 1. Clone the repository and run the binary in the target machine. root@kitploit: git clone https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC.git cd CVE-2025-32463-Chwoot-POC ./exploit Build From Source 1. Clone the repository...

detection-rules

Detection Rules Detection Rules is the home for rules used by Elastic Security. This repository is used for the development, maintenance, testing, validation, and release of rules for Elastic Security’s Detection Engine. This repository was first announced on Elastic's blog post, Elastic Security...

WHP

M$ Windows Hacking Pack Tools here are from different sources. The repo is generally licensed with WTFPL, but some content may be not eg. sysinternals. "pes" means "PE Scambled". It's useful sometimes. Remote Exploits Windows 2000 / XP SP1 MS05-039 Microsoft Plug and Play Service Overflow, Works...

ls-poc

CVE-2026-30368 Proof of concept !IMPORTANT This is patched and now requires credentials, use the workaround to perform actions on yourself. Introduction CVE-2026-30368 allows an attacker to control student devices via a weak authentication flaw in Lightspeed Classroom management. The POC poc.js...

geoserver-CVE-2023-25157

geoserver CVE-2023-25157 White Hat 3rd Cohort Class 30 Kim Jeong-woo github link - https://github.com/custiya/geoserver-CVE-2023-25157 Vulnerability Summary CVE-2023-25157 is an SQLi vulnerability that occurred in GeoServer, an open-source map data service web application. Occurs in some versions...

CVE-2018-1133-Exploit

CVE-2018-1133-Exploit このリポジトリには、Moodle Evil Teacher エクスプロイト（CVE-2018-1133）用のPythonエクスプロイトスクリプトが含まれています。 使用方法 root@kitploit: usage: Moodle Evil Teacher Exploit -h -u URL -l LOGIN -p PASSWORD -c COMMAND -P PROXY options: -h, --help show this help message and exit -u URL, --url URL ターゲットURL -l LOGIN...

EUVD-2026-70108

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. This is particularly relevant in automated build or continuous integration CI workflows that ingest...