Lucene search
+L

237787 matches found

Kitploit
Kitploit
β€’added 2026/09/22 12:22 a.m.β€’7 views

CVE-2021-3560

CVE-2021-3560 Polkit - Local Privilege Escalation Original discovery by kevinbackhouse from GitHub Security Lab References https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ https://www.youtube.com/watch?v=QZhz64yEd0g https://ubuntu.com/security/CVE-2021-3560 Blog...

7.8CVSS7.9AI score0.23708EPSS
SaveExploits37References1
Kitploit
Kitploit
β€’added 2026/09/22 12:19 a.m.β€’6 views

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates A critical RCE vulnerability in Windows TCP/IP stack CVE-2025-26686 leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now By Mark Mallia Type: Remote Code...

7.5CVSS7.8AI score0.01512EPSS
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/22 12:16 a.m.β€’8 views

AV-EDR-Killer

AV/EDR Killer https://github.com/user-attachments/assets/1eda3340-2af2-4136-b74e-be7a3f4b3924 This project demonstartes how a legit, and signed driver can be weponized to gain kernel level access. 🚨 The vulnerable driver: wsftprm.sys , signed by TPZ SOLUCOES DIGITAIS LTDA, and previously exposed ...

6.5CVSS7.1AI score0.00325EPSS
SaveExploits2References1
Kitploit
Kitploit
β€’added 2026/09/22 12:05 a.m.β€’35 views

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. root@kitploit: Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 80...

5.5AI score
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/22 12:04 a.m.β€’10 views

CVE-2016-7255

CVE-2016-7255 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted...

7.8CVSS7.6AI score0.80968EPSS
SaveExploits24
Kitploit
Kitploit
β€’added 2026/09/22 12:04 a.m.β€’13 views

FortiLPE

Description Local privilege escalation PoC exploit for CVE-2025-62676 / EUVD-2025-206993 that targets FortiClient VPN running on Windows. Executes a payload in the context of SYSTEM from a normal user context via an arbitrary XML file write. The PoC has been tested against FortiClient version 7.4...

7.1CVSS7.1AI score0.00223EPSS
SaveExploits0References2
Kitploit
Kitploit
β€’added 2026/09/22 12:03 a.m.β€’11 views

CVE-2021-44731-snap-confine-SUID

CVE-2021-44731-snap-confine-SUID Local Privilege Escalation Exploit for CVE-2021-44731, snap-confine 2.54.2 and lower All credit to Qualys for finding this and providing a detailed exploit. https://www.qualys.com/2022/02/17/cve-2021-44731/oh-snap-more-lemmings.txt Quick and Dirty snap-confine LPE...

7.8CVSS8AI score0.00952EPSS
SaveExploits4
Talos
Talos
β€’added 2026/09/22 12:00 a.m.β€’25 views

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

Summary A type confusion vulnerability exists in the CldiStreamPrepareRequestForMoreProcessing functionality of Windows Cloud Files Mini Filter Driver versions: 10.0.26100.8457 WinBuild.160101.0800 and 10.0.26100.8655 WinBuild.160101.0800. A specially crafted sequence of Cloud Filter API calls ca...

7CVSS6.7AI score0.00341EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/21 11:59 p.m.β€’28 views

StackRot

StackRot CVE-2023-3269: Linux kernel privilege escalation vulnerability GitHub-CI-verified exploit A flaw was found in the handling of stack expansion in the Linux kernel 6.1 through 6.4, aka "Stack Rot". The maple tree, responsible for managing virtual memory areas, can undergo node replacement...

7.8CVSS6.9AI score0.01304EPSS
SaveExploits1References3
Kitploit
Kitploit
β€’added 2026/09/21 11:58 p.m.β€’12 views

OGhidra

OGhidra 3 - AI-Powered Reverse Engineering with Ghidra For the version using a Claude-inspired Orchestrator, see https://github.com/llnl/OGhidra/tree/orchestrator OGhidra bridges Large Language Models with Ghidra's reverse engineering platform, enabling AI-driven binary analysis through natural...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/21 11:56 p.m.β€’16 views

CVE-2023-4911

CVE-2023-4911 - Looney Tunables This is a atm very rough proof of concept for CVE-2023-4911. So far I've only verified it works on Ubuntu 22.10 kinetic. Current version of the exploit contains a fair amount of "magic" offsets. If you have suggestions on how to improve the heap shaping, feel free ...

7.8CVSS7.3AI score0.81422EPSS
SaveExploits28References1
Kitploit
Kitploit
β€’added 2026/09/21 11:55 p.m.β€’12 views

CVE-2020-0796

CVE-2020-0796 Windows SMBv3 LPE Exploit Authors Daniel GarcΓ­a GutiΓ©rrez @danigargu Manuel Blanco ParajΓ³n @dialluvioso Exploit analysis POC Analysis by SungLin Knownsec 404 Team Writeup+PoC by @ZecOps References https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796...

10CVSS8.4AI score0.9981EPSS
SaveExploits126
Kitploit
Kitploit
β€’added 2026/09/21 11:52 p.m.β€’16 views

ShunyaNet-Sentinel

ShunyaNet Sentinel UPDATED: 03/02/2026 ShunyaNet Sentinel is a lightweight, cyberpunk-themed program that ingests RSS feeds e.g., breaking news, social media, sends them to an LLM for analysis, and delivers alerts and summary reports directly to the GUI and Slack at regular intervals. The project...

5.7AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/21 11:49 p.m.β€’8 views

CVE-2024-48990-Automatic-Exploit

CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...

7.8CVSS8AI score0.20452EPSS
SaveExploits16
Kitploit
Kitploit
β€’added 2026/09/21 11:48 p.m.β€’11 views

CVE-2026-41091

πŸ›‘οΈ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...

7.8CVSS7.8AI score0.08202EPSS
SaveExploits5References1
Kitploit
Kitploit
β€’added 2026/09/21 11:47 p.m.β€’10 views

NimbusPWN-CVE-2022-29799-29800

NimbusPwn β€” networkd-dispatcher !NOTE Other distros: dnf install gcc dbus-devel pkgconf Fedora/RHEL or pacman -S gcc db...

5.5CVSS6.7AI score0.11761EPSS
SaveExploits4References1
Kitploit
Kitploit
β€’added 2026/09/21 11:43 p.m.β€’13 views

CVE-2025-49132-Mods

CVE-2025-49132 - RCE Simple πŸ“ Overview This repository contains a specialized exploit for CVE-2025-49132, a critical unauthenticated Remote Code Execution RCE vulnerability in the Pterodactyl Panel prior to v1.11.11. The vulnerability exists in the /locales/locale.json endpoint. By manipulating t...

10CVSS6.3AI score0.5446EPSS
SaveExploits30
Kitploit
Kitploit
β€’added 2026/09/21 11:40 p.m.β€’17 views

VectoredOverloading

VectoredOverloading Vectored Overloading is a local PE injection technique that was first observed in the KidKadi malware. It works by manipulating the load of a legitimate DLL using Hardware Breakpoints HWBP and Vectored Exception Handling VEH to change the DLL section object on-the-fly...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/21 11:40 p.m.β€’7 views

CVE-2026-29923

CVE-2026-29923 - Local Privilege Escalation Attack via pstrip64.sys Disclaimer: This code is provided for educational and defensive research purposes only. It was written to further the understanding of kernel exploitation and help defenders protect against similar vulnerabilities. Any...

7.8CVSS7.2AI score0.00135EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/21 11:37 p.m.β€’304 views

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

5.8AI score
SaveExploits0References12
Rows per page
Query Builder