CVE-2023-48022

CVE-2023-48022 Bishop Fox의 작업을 수정한 CVE-2023-48022 익스플로잇 사용 방법 jobs.py에서 IP와 포트를 설정하세요. malicious.py에서 페이로드를 설정하세요. $ pip install ray $ python3 jobs.py...

Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution

CVE-2023-38831 リバースシェルのデモンストレーション このリポジトリには、CVE-2023-38831 のラボ環境でのデモンストレーションに関する PDF サマリーとスクリーンショットが含まれています。この脆弱性により、攻撃者は圧縮ファイルに悪意のあるペイロードを埋め込んで実行できます。この場合、ペイロードはリバースシェルをトリガーします。 内容: summaryreport.pdf: ラボプロセスの詳細な説明 /screenshots: 手順と結果の視覚的な証拠 注意: このリポジトリには、実行可能なコードやマルウェアは含まれていません。...

CVE-2026-84810 claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan

claude-skill-antivirus fails to analyze executable files when scanning local skill directories, reading only SKILL.md while ignoring Python source, bytecode, and other artifacts in the scripts directory. Attackers can distribute skills with malicious code in non-manifest files that receive a SAFE...

scansploit

=SCANSPLOIT= Инструмент для внедрения вредоносных полезных нагрузок в штрихкоды Штрихкоды code128 QR-коды DataMatrix EAN13 Требования Python3 PyStrich pip3 install pystrich В случае ошибки jpeg: sudo apt-get install libtiff5-dev zlib1g-dev libfreetype6-dev liblcms2-dev libwebp-dev tcl8.6-dev...

godofwar

GodOfWar - Вредоносный сборщик WAR-файлов для Java Инструмент командной строки для генерации WAR-полезных нагрузок для целей тестирования на проникновение / red teaming, написанный на Ruby. root@kitploit: . hhh hhhhhhh hhhhhhhh hhhhhhhh+ hhhhhhhh' hhhhhhhh. hhhhhhhhh ..-- hhhhhhhhh -sh/.. +...

CVE-2020-15916

KO GenLANConfigAttack - 는 CVE-2020-15916 을 악용하는 PoC로, 기기의 LAN 구성을 무단으로 변경할 수 있는 취약점입니다. 기능 LAN 구성 취약점 악용 악성 페이로드를 전송하여 네트워크 설정 변경 LAN 제어를 위한 보안 메커니즘 우회 사용 방법 1. 이 저장소를 클론합니다: root@kitploit: git clone https://github.com/geniuszly/CVE-2020-15916 2. 종속성을 설치합니다: root@kitploit: pip install -r...

CVE-2024-32002

CVE-2024-32002 RCE PoC 概述 此仓库包含 CVE-2024-32002 的概念验证（PoC），这是一个 Git 子模块中的远程代码执行（RCE）漏洞。该漏洞利用演示了如何通过递归克隆 Git 仓库来触发恶意载荷。 仓库设置 在运行 PoC 之前，请在你的远程 Git 服务器上创建以下仓库，你也可以根据需要更改名称： hulk.git submod.git smash.git 如果你更改了名称，请相应更新 PoC 脚本中的仓库路径。 漏洞利用详情 该漏洞利用通过 Git 子模块在递归克隆仓库时在目标系统上执行载荷。此 PoC 已在 macOS 上测试。 定义仓库路径...

CVE-2024-32002

CVE-2024-32002 RCE PoC 概要 このリポジトリには、Git サブモジュールにおけるリモートコード実行（RCE）脆弱性である CVE-2024-32002 の Proof of Concept（PoC）が含まれています。このエクスプロイトは、悪意のあるペイロードが Git リポジトリの再帰的クローンによってどのようにトリガーされるかを示しています。 リポジトリのセットアップ PoC を実行する前に、リモート Git サーバー上に以下のリポジトリを作成してください。必要に応じて名前を変更しても構いません。 hulk.git submod.git smash.git...

Astra Linux – Vulnerability in http-parser

HTTP request smuggling in Node.js versions 10, 12, and 13 causes the delivery of malicious payloads when transfer-encoding is malformed...

RUSTSEC-2026-0265 `proc-macro1` was removed from crates.io due to malicious code

It was reported proc-macro1 contained a build script that would download a malicious payload. This crate had two versions, both published on 2026-08-20. The crate was removed from crates.io and related user accounts were locked. This crate was used as part of a malware campaign targeted at users ...

`proc-macro1` was removed from crates.io due to malicious code

It was reported proc-macro1 contained a build script that would download a malicious payload. This crate had two versions, both published on 2026-08-20. The crate was removed from crates.io and related user accounts were locked. This crate was used as part of a malware campaign targeted at users ...

Malicious code in ranux-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2844c37c95371d0fa96d0a814be948335590d5b65500a8f4b2a577c8748e23 The package main index.js is obfuscator.io-transformed with a rotated string-array decoder and, at top level, uses createDecipheriv with a hardcoded...

CVE-2026-68772 ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted...

CVE-2026-68772

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execute arbitrary code by planting a malicious pickle file. Attackers can replace a stored artifact.pkl file with a crafted...

Malicious code in tailwindcss-hide-scrollbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac906893a6ea1562025bfa35bf4f1998cfd745619f21c4dc3880aa386dc3cfe1 dist/index.js exports a small tailwind scrollbar-hide plugin followed by a trailing evalatob'' that executes on every require/import of the package...

MAL-2026-12817 Malicious code in beaver-ui-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f257786868c5d56c3f9f79e674980d07bfad3a42194819837623614554abb77 On require'beaver-ui-list', index.js loads ext.js, which selects a payload path based on OS and architecture, downloads a native binary from hardcode...

Malicious code in @zahlen/checkout-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45fa3b05e748470cdc08e19b2e86efb8a34c85f155e5972c1b0c0598c150a0bd The package's fesm2022 ESM entry declared as module in package.json and executed on import of the library ends with a trailing evalatob'...' payload...

Malicious code in checkout-common-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0e9681cb5e7a197ca8d77ba29e20a4709fa0ff476f2ffb02f935785c6633e0 On require, index.js loads ext.js which selects a platform-specific payload URL from a rotating list of Cloudflare Workers subdomains hosts assembled...

MAL-2026-12277 Malicious code in tinkoff-statist-browser-typed-client-sme.users.origination.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfbb507be06c5d117ac6bfdff47a2441c2198b0d5702e4da97f598bc0d880a3 The package's main entry require's loader.js, which at import time downloads a per-platform binary from string-concatenation-obfuscated Cloudflare...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...