343883 matches found
xerosploit
Xerosploit Xerosploit ist ein Penetrationstest-Toolkit, dessen Ziel es ist, Man-in-the-Middle-Angriffe zu Testzwecken durchzuführen. Es bietet verschiedene Module, die effiziente Angriffe ermöglichen, und erlaubt außerdem Denial-of-Service-Angriffe und Port-Scans. Unterstützt durch bettercap und...
Security update for python
This update for python fixes the following issues: CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. CVE-2026-1703: files may be extracted outside the installation directory when installing and...
hershell
Hershell Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception. Supported OS are: Windows Linux Mac OS FreeBSD and derivatives Why ? Although meterpreter payloads are...
bash-4.3-fixed-CVE-2014-6271
Introduzione Questo è GNU Bash, versione 4.3. Bash è la Bourne Again SHell del progetto GNU, un'implementazione completa della specifica POSIX per la shell, ma include anche modifica interattiva della riga di comando, controllo dei job sulle architetture che lo supportano, funzionalità simili a c...
rbcd-attack
Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...
whoami-project
Whoami - Enhanced Privacy and Anonymity for Debian and Arch-based Linux Distributions Feature Request | Report a Bug About the Project Whoami is a user-friendly privacy and anonymity tool designed for Debian and Arch-based Linux distributions. With its simple interface and ease of use, it...
qark
Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...
CVE-2025-51643
CVE-2025-51643: Flash SPI non protetto consente l'estrazione del firmware in Meitrack T366G-L Descrizione I dispositivi Meitrack T366G-L GPS Tracker contengono un chip di memoria flash SPI Winbond 25Q64JVSIQ accessibile senza autenticazione o protezione anti-manomissione. Un attaccante con access...
CVE-2019-15107
CVE-2019-15107 Webmin 1.890 Esecuzione di codice remoto non autenticata Questo script è progettato per sfruttare la vulnerabilità di esecuzione di comandi non autenticata in Webmin 1.890. Ti permette di eseguire comandi arbitrari su un server Webmin target o di ottenere una shell inversa. Utilizz...
CVE-2024-23692
CVE-2024-23692 BURP POC root@kitploit: GET /?n=%0A&cmd=ipconfig+/all&search=%25xxx%25url:%password%.exec|.?cmd.|timeout=15|out=abc..?n..?n.RESULT:.?n..^abc.====.?n. HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept:...
Security update for rsyslog
This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...
cve-2017-5123
CVE-2017-5123 Questa repository contiene una dimostrazione di CVE-2017-5123 , un backdoor di comando e controllo via ICMP, e un'applicazione web vulnerabile CWE-78 OS Command Injection. Parte di CSC 4308 - Challenge 3. Prerequisiti Linux Kernel : dalla 4.13 fino alla ma esclusa 4.13.7 Node.js :...
Security update for rsyslog
This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...
Security update for rsyslog
This update for rsyslog fixes the following issue: Heap buffer overflow in the core RainerScript replace function bsc1275926. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the comma...
CVE-2020-14882
CVE-2020-14882 CVE-2020-14882/14883/14750 USO 1. clone este repositório 2. instale a biblioteca requests 3. python3 14882.py EXEMPLO root@kitploit: λ python3 14882.py -u http://...:7001 -c whoami + Command success result: win-t63ko18er74\administrator referência...
CVE-2023-33869-RCE-PoC
Center for Energy Security and Reliability - UNC Charlotte CVE-2023-33869 ist eine Command-Injection-Sicherheitslücke, die die Firmware-Version D7.0.88 des Enphase Envoy betrifft. Diese Schwachstelle ermöglicht es einem Angreifer, beliebige Befehle mit Root-Rechten auf dem betroffenen Gerät...
nopowershell
NoPowerShell NoPowerShell è uno strumento implementato in C che supporta l'esecuzione di comandi simili a quelli di PowerShell rimanendo invisibile a qualsiasi meccanismo di logging di PowerShell. Questo binario compatibile con .NET Framework 2 può essere caricato in Cobalt Strike per eseguire...
CVE-2026-23744-PoC
CVE-2026-23744-PoC PoC sulla vulnerabilità in MCP Server. Automatizzato per la parte POST con il corpo corretto. percorso vulnerabile: root@kitploit: /api/mcp/connect metodo tramite curl: root@kitploit: curl http://evil.com:6274/api/mcp/connect --header "Content-Type: application/json" --data...
CVE-2021-29156
CVE-2021-29156 Proof-of-Concept c 2021 GuidePoint Security Charlton Trezevant [email protected] Contesto Oggi GuidePoint è lieta di rilasciare uno strumento Proof-of-Concept funzionante per CVE-2021-29156, una vulnerabilità di iniezione LDAP in ForgeRock OpenAM v13.0.0. Questa vulnerabilità...
CVE-2019-9978
CVE-2019-9978 - Social Warfare Wordpress plugin RCE 3.5.3 Esecuzione di codice remota nel plugin Social Warfare per Wordpress precedente alla versione 3.5.3. Questa PoC non richiede l'esecuzione di un server HTTP aggiuntivo. Basta inserire il proprio IP locale e la porta desiderata e l'exploit...