Lucene search
+L

238341 matches found

Kitploit
Kitploit
β€’added 2026/09/23 10:00 a.m.β€’10 views

CVE-2023-36874_BOF

CVE-2023-36874 Windows Error Reporting LPE BOF Introduction This is a mature and operational CobaltStrike BOF implementation of Filip Dragovic's @filipdragovic CVE-2023-36874 Windows Error Reporting LPE exploit. He did the heavy lifting in terms of creating a working exploit by reversing the...

7.8CVSS7.6AI score0.43409EPSS
SaveExploits6References2
Kitploit
Kitploit
β€’added 2026/09/23 9:45 a.m.β€’9 views

ARP-poisoning-packet-sniffer

ARP Poisoning - Packet Sniffer Two scripts written to perform ARP poisoning on target computers on the same network and to monitor network traffic. The arpspoofy.py script is used to perform ARP poisoning on a target computer on the same network. While the arpspoofy.py script performs ARP poisoni...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 9:42 a.m.β€’7 views

cve-2023-4911-exploit-optimized

Security Notice : This repository contains working exploit code for educational and research purposes. Use responsibly and only on systems you own or have explicit permission to test. CVE-2023-4911 Exploit Looney Tunables Optimized, multi-processing exploits for CVE-2023-4911 targeting x8664 and...

7.8CVSS7.1AI score0.81422EPSS
SaveExploits28References4
Kitploit
Kitploit
β€’added 2026/09/23 9:42 a.m.β€’12 views

CVE-2022-22077

βœ… CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...

8.4CVSS7.6AI score0.00135EPSS
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/23 9:42 a.m.β€’694 views

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/23 9:41 a.m.β€’10 views

CVE-2024-22026

CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...

6.7CVSS7.5AI score0.01096EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/23 9:41 a.m.β€’8 views

CVE-2024-28995

CVE-2024-28995 Automated Path Traversal & Local File Read Features Version Detection : Retrieves the Serv-U version from the server header. Vulnerability Check : Compares the detected version against a known vulnerable version 15.4.2 or lower. Default Path Testing : Tests predefined paths for bot...

8.6CVSS8.3AI score0.99614EPSS
SaveExploits8References1
Kitploit
Kitploit
β€’added 2026/09/23 9:38 a.m.β€’17 views

VectoredOverloading

VectoredOverloading Vectored Overloading is a local PE injection technique that was first observed in the KidKadi malware. It works by manipulating the load of a legitimate DLL using Hardware Breakpoints HWBP and Vectored Exception Handling VEH to change the DLL section object on-the-fly...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 9:37 a.m.β€’16 views

sast-scan

Introduction root@kitploit: β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•— β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•— β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•— β–ˆβ–ˆβ–ˆβ•— β–ˆβ–ˆβ•— β–ˆβ–ˆβ•”β•β•β•β•β•β–ˆβ–ˆβ•”β•β•β•β•β•β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ•— β–ˆβ–ˆβ•‘ β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘ β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β–ˆβ–ˆβ•— β–ˆβ–ˆβ•‘ β•šβ•β•β•β•β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•‘ β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•‘β•šβ–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘ β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•‘β•šβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘ β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•‘ β•šβ–ˆβ–ˆβ–ˆβ–ˆβ•‘ β•šβ•β•β•β•β•β•β• β•šβ•β•β•β•β•β•β•šβ•β• β•šβ•β•β•šβ•β• β•šβ•β•β•β• Scan is a free open-source security tool for modern DevOps teams. With an...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 9:34 a.m.β€’7 views

CVE-2015-1328-GoldenEye

CVE-2015-1328-GoldenEye about exploit: The overlayfs implementation in the linux aka Linux kernel package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveragi...

7.8CVSS7.7AI score0.37679EPSS
SaveExploits24
Kitploit
Kitploit
β€’added 2026/09/23 9:32 a.m.β€’14 views

DNSnitch

DNSnitch Disclaimer I use that for myself, it's here if someone needs it though. Feel free to open an issue if you find bugs! The Interactive Terminal DNS Firewall DNSnitch is a local, privacy-first DNS server that puts you in complete control of your network traffic. Unlike passive blocklists,...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 9:28 a.m.β€’10 views

sudo-CVE-2017-1000367

sudo-CVE-2017-1000367 http://www.openwall.com/lists/oss-security/2017/05/30/16 Compile: gcc -o sudopwn sudopwn.c -lutil Disclaimer: I had no clue what I was doing ;- Requirements System must be selinux-enabled sudo needs to be built with selinux support sudo -r User needs to have sudo permissions...

6.9CVSS7.3AI score0.07953EPSS
SaveExploits8
Kitploit
Kitploit
β€’added 2026/09/23 9:24 a.m.β€’8 views

Windows_MSKSSRV_LPE_CVE-2023-36802

CVE-2023-36802 Local Privilege Escalation POC authors: chompie For demonstration purposes only. Complete exploit works on vulnerable Windows 11 22H2 systems. Adapting the exploit to all vulnerable systems is left as an exercise to the reader. Git gud, etc. Usage: root@kitploit:...

7.8CVSS7.7AI score0.27909EPSS
SaveExploits4References1
Kitploit
Kitploit
β€’added 2026/09/23 9:23 a.m.β€’10 views

CVE-2023-1326

CVE-2023-1326 A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is...

7.8CVSS7.5AI score0.00874EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 9:18 a.m.β€’8 views

AV-EDR-Killer

AV/EDR Killer https://github.com/user-attachments/assets/1eda3340-2af2-4136-b74e-be7a3f4b3924 This project demonstartes how a legit, and signed driver can be weponized to gain kernel level access. 🚨 The vulnerable driver: wsftprm.sys , signed by TPZ SOLUCOES DIGITAIS LTDA, and previously exposed ...

6.5CVSS7.1AI score0.00325EPSS
SaveExploits2References1
Kitploit
Kitploit
β€’added 2026/09/23 9:18 a.m.β€’18 views

prismor

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website β€’ Onboard with Skill !Kimi...

5.9AI score
SaveExploits0References30
Kitploit
Kitploit
β€’added 2026/09/23 9:15 a.m.β€’10 views

phantom-brain

PHANTOM BRAIN v0.9 Offline AI-powered pentesting analysis tool with real hardware integration Local LLM analysis via Ollama for WiFi, Sub-GHz, NFC/RFID and WPA2 captures β€” no internet required, no cloud APIs, 100% offline. The main LLM runs on a Windows PC. The Raspberry Pi acts as a lightweight...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/09/23 9:14 a.m.β€’10 views

SharpRelay

Usage The only requirement for this attack to work is to have a beacon with local administrator privileges or with the ability to load drivers. The attack using SharpRelay works as follows: Upload the signed WinDivert driver into any folder on the compromised host Run SharpRelay to modify the...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/23 9:07 a.m.β€’35 views

rocacheck

rocacheck Package rocacheck is a Go implementation of the key fingerprint algorithm that checks if an RSA key was generated by broken Infineon code and is vulnerable to factorization via the Return of Coppersmith's Attack ROCA / CVE-2017-15361...

5.9CVSS8.2AI score0.09825EPSS
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/23 9:04 a.m.β€’12 views

santamon

Santamon Lightweight macOS detection sidecar for Santa that evaluates Endpoint Security telemetry locally with CEL rules and forwards only matched detection signals to a backend server. Experimental. Built for home labs and small fleets. Early release – expect bugs and API changes. What It Does...

6.1AI score
SaveExploits0References9
Rows per page
Query Builder