sdrtrunk

MacOS Tahoe 26.1 Users - Attention: Changes to USB support in Tahoe version 26.x cause sdrtrunk to fail to launch. Do the following to install the latest libusb and create a symbolic link and then use the nightly build which includes an updated usb4java native library for Tahoe with ARM processor...

wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

preflight

Preflight.sh Preflight.sh 是一个命令行工具，用于扫描你的代码库，检查上线就绪状态。它能在你部署到生产环境之前，识别缺失的配置、集成问题、安全隐患、SEO 元数据缺口以及其他常见错误。 别在生产环境丢人现眼。直接运行命令即可。 安装 Homebrew macOS/Linux root@kitploit: brew install preflightsh/preflight/preflight npm root@kitploit: npm install -g @preflightsh/preflight Go root@kitploit: go install...

CVE-2010-1240

CVE-2010-1240 - 在 PDF 中嵌入后门 ⚠️ 仅供教育和授权的安全研究使用 描述 Windows 和 Mac OS X 上的 Adobe Reader 和 Acrobat 9.x（低于 9.3.3）及 8.x（低于 8.2.3）未限制“启动文件”警告对话框中一个文本字段的内容，这使得远程攻击者更容易诱骗用户执行 PDF 文档中指定的任意本地程序，例如，某文本字段声称“打开”按钮将允许用户阅读加密消息。 演示 操作指南 1. 首先，运行 msfconsole root@kitploit: msfconsole 2. 然后，设置用于嵌入 PDF 的载荷...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

vibe-coding-security

Vibe Coding Security Antes de que tuitees tu lanzamiento, ejecuta estas 69 comprobaciones. Se corresponden con los patrones exactos detrás del CVE de RLS de Lovable CVE-2025-48757, 170+ apps, 2025, la filtración de Moltbook 1,5 millones de tokens de API, febrero de 2026 y la brecha de la platafor...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447：ES文件管理器未认证HTTP服务 一个独立实现、注重安全的研究工具和技术分析，针对 CVE-2019-6447 ——该漏洞涉及受影响的Android版ES文件管理器暴露的未认证HTTP服务。 仅限授权研究。 请仅对您拥有或明确获得测试许可的设备使用本项目。CLI默认仅进行非侵入式TCP探测。请求设备数据或文件的操作需要显式的实验室授权标志。 执行摘要 属性| 值 ---|--- 受影响产品| Android版ES文件管理器文件管理应用 受影响版本| 4.1.9.7.4及更早版本 暴露服务| TCP/59777上的未认证HTTP服务器 攻击前提|...

CVE-2010-1240

CVE-2010-1240 PDF启动操作研究工具 用于演示 Adobe Reader 中 CVE-2010-1240 漏洞（通过恶意 PDF 启动操作）的教育研究工具。 ⚠️ 免责声明 本工具严格用于教育目的 和安全研究 ，旨在演示 CVE-2010-1240 漏洞。仅应在受控环境中使用，以学习 PDF 安全机制和漏洞研究。 请勿将此工具用于恶意目的。 📋 描述 本项目演示了 CVE-2010-1240 ，这是 Adobe Reader 中一个通过恶意 PDF 启动操作实现任意代码执行的关键漏洞。该漏洞影响 Adobe Reader 和 Acrobat 9.3.3 及 8.2.3...

OrganizerTransaction

Este es un PoC para CVE-2021-39749, que permite iniciar actividades de otras aplicaciones en Android 12L Beta independientemente de su configuración de permission y exported En Android 12L, el acceso a TaskFragmentOrganizer intencionalmente ya no requiere el permiso MANAGEACTIVITYTASKS Usar la...

CVE-2026-21112

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2026-21100

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...

CVE-2026-21112

CVE-2026-21112 is an improper input validation flaw in Samsung Tips prior to Android 17 . A local attacker with low privileges can launch an arbitrary activity with Samsung Tips privilege , resulting in high confidentiality impact on the vulnerable system. User interaction is required to trigger ...

CVE-2026-21112

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

EUVD-2026-74653

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

EUVD-2026-74641

Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity...

CVE-2026-21097

Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity...

CVE-2026-21097

CVE-2026-21097 is an improper authentication flaw in Samsung Mobile's ActivityTaskManagerService , present prior to SMR Sep-2026 Release 1 . A local privileged attacker can exploit it to launch an arbitrary activity , resulting in low impact to confidentiality, integrity, and availability on the ...

preflight v0.22.0

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

CVE-2026-28663

In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28642

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...