BetterBackdoor

BetterBackdoor A backdoor is a tool used to gain remote access to a machine. Typically, backdoor utilities such as NetCat have two main functions: to pipe remote input into cmd or bash and output the response. This is useful, but it is also limited. BetterBackdoor overcomes these limitations by...

CVE-2025-55182-React2Shell-RCE-Shell

‼️ CVE-2025-55182 Pwn React2Shell RCE Эксплойт с интерактивной подсказкой оболочки и массовой эксплуатацией Этот репозиторий предоставляет рабочий proof-of-concept для CVE-2025-55182, RCE, затрагивающего некоторые развертывания Next.js. Инструмент открывает интерактивную подсказку оболочки при...

PwnedCheck

PwnedCheck PwnedCheck is a command-line tool for checking whether passwords have appeared in known data breaches using theHave I Been Pwned API and supports encrypted Bitwarden vaults exports. Features Check single passwords from the command line Process passwords from a file Accept pre-hashed...

AzureGraph

AzureGraph AzureGraph is an Azure AD information gathering tool over Microsoft Graph. Thanks to Microsoft Graph technology, it is possible to obtain all kinds of information from Azure AD, such as users, devices, applications, domains and much more. This application, allows you to query this data...

git-clean-filter

This is a documented known issue, but I found this during my research & its pretty useful for RT/PT. Summary: The filter..clean directive in .git/config points at a script and .gitattributes binds that filter to a tracked file. Whenever git renders a real git diff of that file it runs the worktre...

Struts2-048

Struts2-048 CVE-2017-9791 Author: DragonEgg root@kitploit: def Usage: print 'check:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action' print 'poc:' print ' python file.py http://1.1.1.1/struts2-showcase/integration/saveGangster.action command' Demo...

datasploit

Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlate and collaborate the results, show them in a consolidated manner. Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

CVE-2026-13768

CVE-2026-13768: 特権的IoTハブ資格情報 — フリート列挙、デバイスRCE、およびホームネットワーク侵入 勧告 フィールド| 値 ---|--- CVE| CVE-2026-13768 ICSA| ICSA-26-183-03 Gardyn IoT Hub CVSS 3.1| 10.0 重大 ベクター 3.1| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L ベクター 4.0| CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L CWE| CWE-798...

Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

CVE-2025-69212_PoC

CVE-2025-69212: OpenSTAManager Proof of Concept PoC This repository contains a Proof of Concept PoC demonstrating the vulnerability identified as CVE-2025-69212 within OpenSTAManager, an OS Command Injection vulnerability caused by the P7M signed XML file decoding functionality. The versions...

CVE-2021-27877-PoC

CVE-2021-27877 概念実証 このリポジトリには、Veritas Backup Exec Agent に影響する CVE-2021-27877 用の、オリジナルの Rapid7 Metasploit モジュールの修正版が含まれています。 私のテストでは、オリジナルの Metasploit モジュールはターゲットを脆弱であると正しく識別しましたが、ペイロード配信段階が成功しなかったため、セッションの確立には一貫して失敗しました。しかし、モジュールを分析したところ、認証と基盤となるコマンド実行機能は正しく動作していることがわかりました。...

CVE-2026-8037-POC

CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode root@kitploit: python go.py Enter target URL → select function menu. Detection Target root@kitploit:...

tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE

Tugtainer v1.30.2 RCE RCE достигается за счёт использования двух уязвимостей: CVE-2026-55494 CVE-2026-62308 Коротко: уязвимость SSRF используется для обращения к неаутентифицированному сервису во внутренней сети, чтобы создать Docker-контейнер, разделяющий тот же PID с Tugtainer. Это делает...

pDNS2

pDNS2 pDNS2 project pDNS2 is yet another implementation of a passive DNS tool working with Redis as the database. pDNS2 means ‘passive DNS version2’ and favors speed in query over other database features. pDNS2 is based on Florian Weimer’s original dnslogger with improved features for speed and...

Hack-The-Box-Enigma-Findings-Report

🛡️ Hack The Box - Enigma Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Enigma. 🔍 Key Findings Insecure NFS Share Exposing Onboarding Documents - Medium Severity Internal Credential Disclosure via Unencrypted Email Content -...

CVE-2026-34048

CVE-2026-34048 Admin-only terminal bootstrap routes checked only for login state, which let a normal team member drive Coolify's realtime terminal backend and execute commands on team servers. Intro I found this issue while reviewing Coolify , an open-source self-hosted PaaS, with a very direct...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

CVE-2023-26039

CVE-2023-26039 Описание ZoneMinder — это бесплатное приложение с открытым исходным кодом для систем замкнутого телевидения CCTV на Linux, поддерживающее IP-, USB- и аналоговые камеры. Версии до 1.36.33 и 1.37.33 содержат OS Command Injection через daemonControl в...

pastego

pastego Скрейпинг/парсинг Pastebin с использованием GO и грамматических выражений PEG. pastego.png Установка $ go get -u github.com/notdodo/pastego Использование Ключевые слова поиска чувствительны к регистру pastego -s "password,keygen,PASSWORD" Вы можете использовать булевы операторы для...