NotCVE-2026-0010

Summary Vulnerability: Unauthenticated IPC Local Privilege Escalation to SYSTEM via Barrier Daemon TCP Port 24801 Vendor: debauchee Barrier project Product: Barrier 2.4.0 final release, 2021-11-01 CWE: CWE-306: Missing Authentication for Critical Function Description Barrier's Windows service...

CVE-2019-0230-PoC

CVE-2019-0230 CVE-2019-0230 Exploit This is CVE-2019-0230 Exploit : usage python3 cve-2019-230.py example: root@kitploit: python3 cve-2019-0230-poc.py pentest.com whoami Testing pentest.com! Command being passed for RCE: whoami 2020/10/22/...

CVE-2015-6967-EXPLOIT

CVE-2015-6967-EXPLOIT CVE-2015-6967 PoC Exploit This Python script exploits a vulnerability in Nibbleblog CVE-2015-6967 to upload a reverse shell on a vulnerable target. The script takes user input for the target URL, user credentials, and your host IP/port, and then proceeds to exploit the...

dorkscout

dorkscout dokrscout is a tool to automate the finding of vulnerable applications or secret files around the internet throught google searches, dorkscout first starts by fetching the dorks lists from https://www.exploit-db.com/google-hacking-database and then it scans a given target or everything ...

Process-Dump

Process Dump Process Dump is a Windows reverse-engineering command-line tool to dump malware memory components back to disk for analysis. Often malware files are packed and obfuscated before they are executed in order to avoid AV scanners, however when these files are executed they will often...

CVE-2023-34992

CVE-2023-34992: Fortinet FortiSIEM 未授权命令注入 概念验证漏洞利用，用于在易受攻击的FortiSIEM设备上以root权限盲执行命令 博客文章 根本原因和入侵指标在此： https://www.horizon3.ai/attack-research/disclosures/cve-2023-34992-fortinet-fortisiem-command-injection-deep-dive 使用方法 root@kitploit: % python3 CVE-2023-34992.py -h usage: CVE-2023-34992.py -h -...

AWSBucketDump

AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It's similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features that allow you to grep for delicious files as well as download interesting files if you're n...

MagicArch

MagicArch: Automated Arch Linux Setup for Pentesting by MagicBytes MagicArch is a comprehensive post-installation script built with Ansible, designed to transform a basic Arch Linux installation into a fully equipped Pentesting Distro customized for pentesting and performance. With a focus on...

DropSpawn_BOF

DropSpawn Introduction DropSpawn is a CobaltStrike BOF used to spawn additional Beacons via a relatively unknown method of DLL hijacking. Works x86-x86, x64-x64, and x86-x64/vice versa. Use as an alternative to process injection. Windows executables will follow the DLL search order when trying to...

RedbloodC2

Public version of Redblood C2 root@kitploit: This is a simple command and control server to handle sessions and your victims installation root@kitploit: $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage root@kitploit: After install node.j...

SlackShell

SlackShell 描述与更新日志 v1.0 此PowerShell模块包含多种利用Slack API创建命令与控制通道的函数。主函数Start-Shell会连接至用户指定的Slack频道，并使用提供的API认证令牌对指定Slack团队和用户进行身份验证。频道中输入的任何命令都将在主机上的PowerShell中执行。 SlackShell项目需要PowerShell v3及以上版本，因为其使用Invoke-RestMethod进行API调用。未来开发将继续使用当前PowerShell...

CVE-2026-86295 D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-86295

A command injection vulnerability in D-Link DIR-895L (firmware A1_102b07) affects the sendACK function in the udhcpcd/serverpacket.c component. Manipulation of the Hostname argument allows remote, unauthenticated attackers to inject commands, with a CVSS 3.1 base score of 8.3 (HIGH) . A proof-of-...

EUVD-2026-72334

A vulnerability was found in D-Link DIR-895L A1102b07. This affects the function sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. The manipulation of the argument Hostname results in command injection. The attack can be executed remotely. The exploit has been made public and...

githubFind3r

githubFind3r githubFind3r is a very fast command line repo/user/commit search tool enter image description here Installation root@kitploit: git clone https://github.com/atmoner/githubFind3r.git cd githubFind3r npm install Run it root@kitploit: node githubFind3r.js...

AndroidKernelVulnerability

Android 内核漏洞 概述 2017 年 11 月，syzkaller 系统检测到 Linux 内核 的一个 use-after-free 漏洞。2018 年 2 月，一些 Linux 内核和 Android 版本中修补了此漏洞。 此修复从未包含在 Android 月度安全公告 中，因此许多新发布的设备（如 Pixel 和 Pixel2）并未修补此漏洞。 2019 年 9 月，Project Zero 向 Android 通报了此漏洞的安全影响。随后，Android 为此漏洞分配了 CVE-2019-2215，使其更为正式和公开。 CVE-2019-2215 是 binder.c...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

alterx

AlterX Features • Installation • Usage • Running AlterX • Join Discord root@kitploit: Fast and customizable subdomain wordlist generator using DSL. Features Fast and Customizable Automatic word enrichment Pre-defined variables Configurable Patterns Pattern Mining - Automatically discover subdomai...

CVE-2022-26134

CVE-2022-26134 Confluence Server 和 Data Center - CVE-2022-26134 - 严重级别未经验证的远程代码执行漏洞 摘要| CVE-2022-26134 - 严重级别未经验证的远程代码执行漏洞 影响 Confluence Server 和 Data Center ---|--- 受影响产品| Confluence Confluence Server Confluence Data Center 受影响版本| 所有受支持的 Confluence Server 和 Data Center 版本均受影响。 1.3.0 之后的 Confluen...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...