BugChecker

BugChecker Introduzione BugChecker è un debugger kernel e user simile a SoftICE per Windows 11 e anche Windows XP: supporta versioni di Windows da XP a 11, sia x86 che x64. BugChecker non richiede una seconda macchina collegata al sistema in fase di debug, come nel caso di WinDbg e KD. Questa...

OpenVAS-Vulnerability-Assessment-Incident-Response

Operation SecureScan — OpenVAS-Schwachstellenbewertung & Incident Response Projektübersicht Dieses Projekt demonstriert einen vollständigen Workflow zur Schwachstellenbewertung und Incident Response unter Verwendung von OpenVAS Greenbone Vulnerability Manager in einer kontrollierten...

CVE-2023-4911-PoC

Vulnerabilità del Dynamic Loader della GNU C Library CVE-2023-4911 Panoramica La GNU C Library glibc funge da libreria C nel sistema GNU ed è parte integrante dei sistemi basati su Linux. Al suo interno, glibc definisce funzionalità essenziali per i programmi, incluse le system call e funzioni...

CVE-2021-28079

CVE-2021-28079 - POC Jamovi file example.omv example.omv: Zip archive data, at least v2.0 to extract Alle OMV-Dateien sind archivierte Daten. Sie können sie also entpacken und ändern, um den XSS-Fehler auszunutzen. root@kitploit: 🔥\ unzip example.omv Archive: example.omv inflating:...

CVE-2022-26134

CVE-2022-26134 POC Descrizione root@kitploit: In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. POC 1. Esegui python3 confluence.p...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

xerosploit

Xerosploit Xerosploit ist ein Penetrationstest-Toolkit, dessen Ziel es ist, Man-in-the-Middle-Angriffe zu Testzwecken durchzuführen. Es bietet verschiedene Module, die effiziente Angriffe ermöglichen, und erlaubt außerdem Denial-of-Service-Angriffe und Port-Scans. Unterstützt durch bettercap und...

Security update for python

This update for python fixes the following issues: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-1703: files may be extracted outside the installation directory when installing and...

hershell

Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...

bash-4.3-fixed-CVE-2014-6271

Introduzione Questo è GNU Bash, versione 4.3. Bash è la Bourne Again SHell del progetto GNU, un'implementazione completa della specifica POSIX per la shell, ma include anche modifica interattiva della riga di comando, controllo dei job sulle architetture che lo supportano, funzionalità simili a c...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2025-51643

CVE-2025-51643: Flash SPI non protetto consente l'estrazione del firmware in Meitrack T366G-L Descrizione I dispositivi Meitrack T366G-L GPS Tracker contengono un chip di memoria flash SPI Winbond 25Q64JVSIQ accessibile senza autenticazione o protezione anti-manomissione. Un attaccante con access...

CVE-2019-15107

CVE-2019-15107 Webmin 1.890 Esecuzione di codice remoto non autenticata Questo script è progettato per sfruttare la vulnerabilità di esecuzione di comandi non autenticata in Webmin 1.890. Ti permette di eseguire comandi arbitrari su un server Webmin target o di ottenere una shell inversa. Utilizz...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

cve-2017-5123

CVE-2017-5123 Questa repository contiene una dimostrazione di CVE-2017-5123 , un backdoor di comando e controllo via ICMP, e un'applicazione web vulnerabile CWE-78 OS Command Injection. Parte di CSC 4308 - Challenge 3. Prerequisiti Linux Kernel : dalla 4.13 fino alla ma esclusa 4.13.7 Node.js :...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

Security update for rsyslog

This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882/14883/14750 USO 1. clone este repositório 2. instale a biblioteca requests 3. python3 14882.py EXEMPLO root@kitploit: λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator referência...

CVE-2023-33869-RCE-PoC

Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 ist eine Command-Injection-Sicherheitslücke, die die Firmware-Version D7.0.88 des Enphase Envoy betrifft. Diese Schwachstelle ermöglicht es einem Angreifer, beliebige Befehle mit Root-Rechten auf dem betroffenen Gerät...