CVE-2015-1318

CVE-2015-1318 Exploit que usé para obtener un crédito extra del 10% en la nota final en la clase de Compiladores de Matthew Might. https://bugs.launchpad.net/apport/+bug/1438758 Oportunidades de bonificación http://matt.might.net/teaching/compilers/spring-2015/ Use un exploit en vulcan para obten...

reconvault

ReconVault 🔍 El organizador de notas de reconocimiento que los cazadores de bugs realmente pidieron. ReconVault es una aplicación de escritorio de estética terminal con tema oscuro para Linux, construida para investigadores de seguridad, cazadores de bugs y jugadores de CTF. Deja atrás los archiv...

CVE-2022-0847

CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...

awesome-oneliner-bugbounty

Awesome One-liner Bug Bounty A collection of awesome one-liner scripts especially for bug bounty. This repository stores and houses various one-liner for bug bounty tips provided by me as well as contributed by the community. Your contributions and suggestions are heartily♥ welcome. Definitions...

CVE-2022-45771-Pwndoc-LFI-to-RCE

Pwndoc local file inclusion to remote code execution of Node.js code on the server, discovered by @yuriisanin Features Custom Node.js code to execute server-side using --payload-file Cleanup after exploit Requirements An admin account on the PwnDoc instance Usage root@kitploit: $...

CVE-2025-3464-AsIO3-LPE

CVE-2025-3464-AsIO3-LPE CVE-2025-3464: Exploit de escalación local sin privilegios para AsIO3.sys de ASUS - Bypass de autenticación TOCTOU + Decremento de PreviousMode CVE-2025-3464: Escalación de Privilegios Local en AsIO3.sys Este exploit solo funciona en Windows 11 22H2 o anterior. Microsoft...

betwixt

Betwixt te ayudará a analizar el tráfico web fuera del navegador utilizando la interfaz familiar de Chrome DevTools. Instalación Descarga la última versión para tu sistema operativo, crea tu propio paquete o ejecuta Betwixt desde el código fuente. Configuración Para capturar tráfico, tendrás que...

cve-2023-4911-exploit-optimized

Security Notice : This repository contains working exploit code for educational and research purposes. Use responsibly and only on systems you own or have explicit permission to test. CVE-2023-4911 Exploit Looney Tunables Optimized, multi-processing exploits for CVE-2023-4911 targeting x8664 and...

CVE-2024-23334

CVE-2024-23334 PoC Descripción Este repositorio contiene una Prueba de Concepto PoC para CVE-2024-23334, que demuestra cómo actores maliciosos pueden explotar vulnerabilidades en aiohttp mediante LFI . !CAUTION Aviso legal: IMPORTANTE: Esta PoC es solo con fines educativos. ¡El acceso no autoriza...

dbslice

dbslice Extract minimal, referentially-intact database subsets for local development and debugging. The Problem Copying an entire production database to your machine is infeasible. But reproducing a bug often requires having the exact data that caused it. dbslice solves this by extracting only th...

CVE-2022-22077

✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...

CVE-2026-97155

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

CVE-2026-97151

mammoth aka mammoth.js before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document. Converting a crafted .docx file allows an attacker to add arbitrary properties to Object.prototype. In 1.11.0 through 1.12.1, applications that convert further documents in the...

UPnPHostFileRead

Description Local arbitrary file read PoC exploit for the Windows UPnP Device Host service. Reads an arbitrary file in the context of LOCAL SERVICE. Tested against Windows 11 Pro build 26200.8457. Reported to Microsoft. Assessed as "not a vulnerability". How to Build 1. Clone the repository. 2...

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supports both x32 and x64. Tested on: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 x64. Usage root@kitploit: CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe command Example: exp.exe "net user admin admin /ad"...

printix-CVE-2022-29554

CVE-2022-29554 Simple Release | Print Friendly A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to...

pd-agent

ProjectDiscovery Cloud Platform — Agent What it does • Quick Start • Install • Configuration • Scaling What it does pd-agent lets you scan your own internal networks from the ProjectDiscovery Cloud Platform. Install the agent on a machine inside the network you want to scan — a VM, a server, a...

CVE-2024-31719----AMI-Aptio-5-Vulnerability

AMI-Aptio--NvLock-Vulnerability Information CVE ID: CVE-2024-31719 Link Vulnerability Type: Incorrect Access Control Vendoer of Product: American Megatrends International, LLC. Product: AMI Aptio - 5 Atack Type: Local Attack Vector The attacker can easily bypass the NvLock module's access...

CVE-2022-0435-Poc

CVE-2022-0435stack overflow wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...