house

root@kitploit: / | \ / / | | / // \ \ Y | /\ \ / | / /|// \ / House / / Dynamic Mobile Analysis Tool Contact: [email protected] House : ランタイムモバイルアプリケーション分析ツールキット。Web...

backdoors

后门 本项目包含用于维持系统访问的工具，以及 Hacker House 团队编写的概念验证演示。这些工具旨在模拟或演示常见的持久化技术，例如内核模式挂钩及命令与控制（C2）实现。 文件| 描述 ---|--- bindshell.go| 使用 GoLang 编写的绑定 shell 示例 bindshell.py| 使用 Python 编写的绑定 shell 示例 cmdbot.py| 通过 IRC C2 执行命令的 Python 机器人 filehider.tgz| 用于隐藏文件的 Linux 内核模块 halloween.py| Python 脚本追加器 VX 注入 PoC...

exploits

漏洞利用 来自 Hacker House 团队的漏洞利用与概念验证代码。| 文件名 | 描述 | | :------------------------------------------: | :------------------------------------------------------------------------------------------------ | | AirWatchMDMJailbreakBypass.txt | 绕过 iOS 上移动设备管理 AirWatch 的越狱检测 | | adobe-psp.tgz | Adobe CoolType...

kamerka

NOT SUPPORTED OR DEVELOPED ANYMORE PLEASE USE GUI VERSION https://github.com/woj-ciech/Kamerka-GUI ꓘamerka 2.0 aka FIST Flickr, Instagram, Shodan, Twitter Build interactive map of cameras, printers, tweets and photos. The script creates a map of cameras, printers, tweets and photos based on your...

CVE-2021-25790-Multiple-Stored-XSS

CVE-2021-25790-多个存储型XSS: 房屋租赁与房产列表系统V1.0中的多个存储型XSS漏洞 软件链接： https://www.sourcecodester.com/download-code?nid=14649&title=House+Rental+and+Property+Listing+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25790 https://nvd.nist.gov/vuln/detail/CVE-2021-25790 利用代码...

CVE-2024-39210

CVE ID CVE-2024-39210 PRODUCT Best house rental management system VERSION =1.0 PROBLEM TYPE Incorrect Access Control Description Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows...

CVE-2024-46377

CVE-2024-46377 针对 Best House Rental Management System 1.0 中任意文件上传漏洞的 PoC 概述 该 Python 脚本演示了如何利用 Best House Rental Management System 1.0 中的任意文件上传漏洞。该漏洞允许攻击者上传恶意文件（例如 PHP Web Shell）并在目标服务器上执行任意命令。 使用方法 1. 克隆仓库并进入目录： root@kitploit: git clone https://github.com/yourusername/house-rental-poc.git cd...

CVE-2024-6043

CVE-2024-6043 root@kitploit: CVE-2024-6043 CVE-2024-6043 概述 该Python工具利用CVE-2024-6043漏洞，该漏洞影响SourceCodester Best House Rental Management System 1.0。漏洞允许远程攻击者通过adminclass.php文件中的登录功能，针对username参数执行SQL注入。该工具自动化检测易受攻击的端点并注入payload以绕过认证的过程。 功能 - 自动路径检测：该工具检查目标服务器上是否存在易受攻击的adminclass.php文件。 -...

Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups

A new White House memo signed by U.S. President Donald Trump has instructed the National Coordination Center NCC to establish a program that would allow private sector companies to take advantage of their "innovative capabilities" to break into foreign Transnational Criminal Organizations TCOs an...

CVE-2026-19062 chiuwingyan house selectall.action sql injection

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2026-19062

Summary: CVE-2026-19062 affects the chiuwingyan house application, specifically the /paid/selectall.action endpoint. The vulnerability arises from manipulation of the zuname parameter, enabling a remote SQL injection. Public disclosure exists; no product version details are provided, and there is...

CVE-2026-12776

A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-12775

A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. Th...

CVE-2026-12776

A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...

EUVD-2026-38142

A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-12776 Montodel House-Rental-Management index.php houses sql injection

A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /index.php?page=houses. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-12776

Montodel House-Rental-Management is affected by an SQL injection in /index.php?page=houses triggered by manipulating the ID parameter. The flaw affects the application as a whole with a remote-access exploit published and the vendor pursuing a rolling-release strategy, making exact affected versi...

CVE-2026-12775

CVE-2026-12775 affects Montodel House-Rental-Management, with the vulnerability in the /login.php script. The issue arises from manipulating the Username argument, which leads to an SQL injection. Attacks can be conducted remotely, and public exploitation is indicated. The affected software uses ...

EUVD-2026-38141

A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. Th...

CVE-2026-12775 Montodel House-Rental-Management login.php sql injection

A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. Th...