CVE-2022-30190-follina-Office-MSDT-Fixed

'Follina' MS-MSDT n-day Microsoft Office RCE—修正版 このツールは https://github.com/chvancooten/follina.py をベースに修正したものです。独自のdocxテンプレートファイルを指定でき、実戦でのフィッシングに便利です。自分でフィッシング用Word文書を編集した後、-fパラメータで指定できます。 使い方: root@kitploit: usage: follina.py -h -m binary,command -b BINARY -f FILE -c COMMAND -u URL -H HOST -P...

CVE-2025-32463_chwoot

CVE-2025-32463 – sudo chroot（"chwoot"）のPoC このリポジトリは、sudo の chroot 機能における CVE‑2025‑32463 権限昇格の脆弱性を実証するための、最小限かつ再現可能な環境を提供します。 この脆弱性は、Rich Mirch（X: @0xm1rch）氏により Stratascale に報告されました。 元の投稿: 脆弱性アドバイザリ: Sudo chroot の権限昇格 NVD: CVE-2025-32463（CVSS 9.3） 影響を受けるバージョン ほとんどの Linux ディストリビューションにおいて、sudo 1.9.1...

StegaStamp

StegaStamp: Invisible Hyperlinks in Physical Photographs Project Page CVPR 2020 Matthew Tancik, Ben Mildenhall, Ren Ng University of California, Berkeley Introduction This repository is a code release for the ArXiv report found here. The project explores hiding data in images while maintaining...

bruteforce-wallet

bruteforce-wallet The purpose of this program is to try to find the password of an encrypted Peercoin or Bitcoin, Litecoin, etc... wallet file i.e. wallet.dat. It can be used in two ways: try all the possible passwords given a charset try all the passwords in a file There is a command line option...

CISCO-CVE-2020-3452-Scanner-Exploiter

Сканер и эксплуататор CISCO CVE-2020-3452 Он сканирует целевые серверы с помощью Shodan, а затем находит уязвимые серверы для CVE-2020-3452 Cisco Adaptive Security Appliance и FTD — несанкционированное удаленное чтение файлов. О программе Уязвимость в интерфейсе веб-служб программного обеспечения...

poc_CVE-2018-1002105

CVE-2018-1002105 PoC Аутентифицированный PoC Демонстрация Использование Неаутентифицированный PoC Демонстрация Использование Аутентифицированный PoC Эксплойт Proof-of-Concept для CVE-2018-1002105. Текущий эксплойт требует привилегий create и get на pods и pods/exec. Добавлена поддержка portforwar...

DBShield

DBShield Protects your data by inspecting incoming queries from your application server and rejecting abnormal ones. How it works? For example, this is how web server normally interacts with database server: By adding DBShield in front of database server we can protect it against abnormal queries...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

wifipumpkin3

Wifipumpkin3 Powerful framework for rogue access point attack. Overview wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle...

PasteJacker

PasteJacker The main purpose of the tool is automating PasteJacking/Clipboard poisoning/whatever you name it attack with collecting all the known tricks used in this attack in one place and one automated job as after searching I found there's no tool doing this job the right way 😄 Now because thi...

noPac

À propos Exploitation de CVE-2021-42278 et CVE-2021-42287 pour usurper l'identité d'un administrateur de domaine à partir d'un utilisateur de domaine standard. Modifié à partir de sam-the-admin. Utilisation root@kitploit: SAM THE ADMIN CVE-2021-42278 + CVE-2021-42287 chain positional arguments:...

pulledpork

PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...

ADReaper

ADReaper ADReaper est un outil écrit en Golang qui énumère un environnement Active Directory avec des requêtes LDAP en quelques secondes Installation Vous pouvez télécharger des binaires exécutables précompilés pour Windows/Linux depuis dernières versions Installer depuis les sources Pour...

onecli v2.0.1

The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted root@kitploit: git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setu...

VulnLab

VulnLab Un projet de laboratoire de vulnérabilités web développé par Yavuzlar. Logo Vulnérabilités SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File...

cve-2020-11651

CVE-2020-11651 이것은 CVE-2020-11651에 대한 POC로, salt stack master 및/또는 모든 관련 minion에서 사전 인증 RCE를 획득합니다. 이슈에 대한 간단한 세부 정보는 여기에서 확인할 수 있습니다. 2020-11652에 대한 POC는 포함되지 않았습니다. 이는 salt.cmd의 runner를 cmd.execcode 함수로 생성하여 master에서 명령 실행을 획득합니다. 상호작용 기능은 구현되어 있지 않으므로, 리버스 셸을 받아야 합니다. 사용법 Debian10 인스턴스에서...

Invoke-TheHash

Invoke-TheHash Invoke-TheHash contient des fonctions PowerShell pour effectuer des tâches WMI et SMB par pass-the-hash. Les connexions WMI et SMB sont accédées via le .NET TCPClient. L'authentification est effectuée en passant un hash NTLM dans le protocole d'authentification NTLMv2. Les privilèg...

PersistAssist

PersistAssist PersistAssist est un framework de persistance entièrement modulaire écrit en C. Toutes les techniques de persistance contiennent une méthode de nettoyage qui servira à supprimer la persistance en dehors du code de persistance. Ceci est un travail en cours, il y a donc de nombreuses...

rop-tool

rop-tool v2.4.2 Un outil pour vous aider à écrire des exploits binaires OPTIONS root@kitploit: rop-tool v2.4.2 Help you make binary exploits. Usage: rop-tool OPTIONS Commands : gadget Search gadgets patch Patch the binary info Print info about binary heap Display heap structure disassemble...

CVE-2020-0688

Инструменты эксплуатации и обнаружения для CVE-2020-0688уязвимость десериализации MachineKeySection по умолчанию в Microsoft Exchange сборка root@kitploit: csc ExchangeCmd.cs csc ExchangeDetect.cs использование root@kitploit: ExchangeDetect root@kitploit: ExchangeCmd sub commands: exec args exec...