Exploit for Integer Overflow or Wraparound in Microsoft

CVE-2026-62735 Information - This vulnerability was ori...

Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means

In early August, GitGuardian researchers found that a recent Shai-Hulud infostealer worm variant had evolved to scan for credentials across 469 locations across developer environments, Continuous Integration/Continuous Deployment CI/CD tooling, cloud configurations, and even AI tool configs...

Adrenaline adrenaline-bof-bundle-2026-08-31-171332-c55f015

Adrenaline BOF Kit A C2-agnostic collection of Beacon Object Files BOFs for red team and offensive security operations. BOFs are organized by attack chain phase and designed to be small, modular, and automation-friendly for use in reconnaissance, enumeration, and post-exploitation workflows. Tabl...

Exploit for CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher Unauthenticated File...

KubeStalk

KubeStalk KubeStalk is a tool to discover Kubernetes and related infrastructure based attack surface from a black-box perspective. This tool is a community version of the tool used to probe for unsecured Kubernetes clusters around the internet during Project Resonance - Wave 9. Usage The GIF belo...

KubeStalk

KubeStalk KubeStalk एक उपकरण है जो ब्लैक-बॉक्स परिप्रेक्ष्य से Kubernetes और संबंधित बुनियादी ढांचे पर आधारित हमले की सतह का पता लगाने के लिए है। यह उपकरण Project Resonance - Wave 9 के दौरान इंटरनेट पर असुरक्षित Kubernetes क्लस्टरों की जांच करने के लिए उपयोग किए गए उपकरण का सामुदायिक संस्करण है।...

OFBiz-Attack

OFBiz-Attack أداة لاستغلال CVE-2023-49070/CVE-2023-51467 بيئة الاختبار vulhub/ofbiz:18.12.09 الاستخدام التشغيل root@kitploit: java -jar OFBiz-Attack.jar يحتوي على ثلاث وحدات، وهي: اكتشاف الثغرات فقط أدخل عنوان URL الخاص بالهدف، لا حاجة لإضافة مسارات إضافية، وإلا سيؤثر ذلك على استغلال الوحدات...

attack-attention

مهاجمة انتباه النماذج الأساسية تعطل المهام النهائية بفعالية التنفيذ الرسمي لـ PyTorch للورقة "مهاجمة انتباه النماذج الأساسية تعطل المهام النهائية بفعالية" ، مقبولة في ورشة عمل التعلم الآلي العدائي على الرؤية الحاسوبية: النماذج الأساسية + X ADVML ضمن مؤتمر CVPR 2025. "مهاجمة انتباه النماذج الأساسي...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

unicorn

unicorn Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David...

Dos-exploit-

Dos-exploit- CVE-2025-31650 Название эксплойта: Apache Tomcat 10.1.39 - Отказ в обслуживании DOS Автор: Abdualhadi khalifa CVE: CVE-2025-31650 import httpx import asyncio import random import urllib.parse import sys import socket from colorama import init, Fore, Style init class TomcatKiller: def...

prismor v1.44.0

Prismor Runtime security for Claude Code, Codex, and other AI coding agents. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill !Trae / Tra...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

OverlayFS-CVE-2021-3493

OverlayFS — CVE-2021–3493 || Write-up || Tryhackme 📖 Introduction Qu'est-ce qu'OverlayFS ? OverlayFS est un module du noyau Linux qui permet au système de combiner plusieurs points de montage en un seul, afin que vous puissiez accéder à tous les fichiers de chacun dans une même arborescence de...

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 Laboratoire Docker pour CVE-2022-42889 Vous pouvez soit construire l'image Docker localement, soit récupérer l'image depuis Docker Hub et exécuter le conteneur. Cloner le dépôt root@kitploit: git clone https://github.com/devenes/text4shell-cve-2022-42889.git Construire...

agent-skills v0.4.0

Elastic Agent Skills Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills...

Exploit for CVE-2026-78071

Stored XSS via Location Title in DPCalendar Free DPCalendar...

Exploit for CVE-2026-78070

SQL Injection via ORDER BY Shortcode in plgcontentdpcalendar...

netlas-cookbook

Netlas CookBook The goal of this guide is to teach anyone interested in cybersecurity, regardless of their knowledge level, how to make the most of Netlas Search Tools. This is a long read. We have collected as many simple use cases as possible and demonstrated how to automate them. ⭐️ Give us a...