dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

ldap_shell

LDAP shell This project is a fork of ldapshell from Impacket. It provides an interactive shell for Active Directory enumeration and manipulation via LDAP/LDAPS protocols, making it useful for both system administrators and security professionals. Installation These tools are only compatible with...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

WAF-A-MoLE

WAF-A-MoLE Un fuzzer guiado basado en mutaciones para Cortafuegos de Aplicaciones Web basados en ML, inspirado en AFL y basado en el FuzzingBook de Andreas Zeller y otros. Dada una consulta de inyección SQL de entrada, intenta producir una consulta semánticamente invariante que sea capaz de eludi...

system_bt_aosp10_cve-2022-20140

Pila Bluetooth Fluoride Compilación y ejecución en AOSP Simplemente compile AOSP - Fluoride está allí por defecto. Compilación y ejecución en Linux Instrucciones para Ubuntu, probado en 14.04 con Clang 3.5.0 y 16.10 con Clang 3.8.0 Descargar fuente root@kitploit: mkdir /fluoride cd /fluoride git...

system_bt_AOSP10_r33_CVE-2021-0589

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

System_bt_AOSP10_r33_CVE-2021-0589

Pila Bluetooth Fluoride Compilar y ejecutar en AOSP Solo construya AOSP: Fluoride está ahí por defecto. Compilar y ejecutar en Linux Instrucciones para Ubuntu, probadas en 14.04 con Clang 3.5.0 y 16.10 con Clang 3.8.0 Descargar fuente root@kitploit: mkdir /fluoride cd /fluoride git clone...

AMSI.fail

AMSI.fail Originally C Azure Function Later ported to JS with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process. The snippets are randomly selected from a small pool of techniques/variations before being obfuscated. Every snippet is...

CVE-2019-11581

CVE-2019-11581 Vulnerabilidad de inyección de plantillas en Atlassian JIRA RCE Demostración python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Descarga de la versión vulnerable https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe PoC...

ronin

ronin Sitio web Código fuente Problemas Documentación Discord | Mastodon Descripción Roninwebsite es un conjunto de herramientas Ruby gratuito y de código abierto para la investigación y el desarrollo en seguridad. Ronin contiene muchos comandos CLI y bibliotecas Rubyronin-rb diferentes para una...

CVE-2018-6574

CVE-2018-6574 Pasos para reproducir: 1. Crea un archivo .c que contenga el comando malicioso revshell: root@kitploit: include include static void malicious attributeconstructor; void malicious system""; 2. Compílalo usando GCC. Debes compilarlo en la misma arquitectura y sistema operativo que el...

alterx

AlterX Features • Installation • Usage • Running AlterX • Join Discord root@kitploit: Fast and customizable subdomain wordlist generator using DSL. Features Fast and Customizable Automatic word enrichment Pre-defined variables Configurable Patterns Pattern Mining - Automatically discover subdomai...

nfsen-exploit

nfsen-exploit Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7. Tested on Ubuntu, probably works on everything Vulnerability discovered by Paul Taylor/Foregenix Ltd Usage: python exploit.py This generates a root-level shell on the remote machine...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Script en Python para explotar RCE en Nostromo nhttpd = 1.9.6. Ayuda root@kitploit: usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit ...

CVE-2024-23897

CVE-2024-23897 Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution RCE Jenkins is a self-contained open source continuous integration/continuous delivery and deployment CI/CD automation software DevOps tool written in the Java programming language. It is us...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd 3.2.8.1 Backdoor Command Execution UnrealIRCd 3.2.8.1 backdoor command execution exploit in Python 3 CVE-2010-2075. Description UnrealIRCd version 3.2.8.1 contains a trojan horse which allows remote attackers to execute arbitrary commands CVE-2010-2075. I referenced the Metasploit...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

saas_enum

SaaS Enum SaaS Enum is a command line tool for discovering the SaaS platforms a company may be using. The tool looks for DNS entries that match known provider patterns and optionally performs lightweight web checks for confirmation. Installation root@kitploit: pip install -r requirements.txt Usag...

freevulnsearch

freevulnsearch This NMAP NSE script is part of the Free OCSAF project - https://freecybersecurity.org. In conjunction with the version scan "-sV" in NMAP, the corresponding vulnerabilities are automatically assigned using CVE Common Vulnerabilities and Exposures and the severity of the...