reverse_ssh

反向SSH 艺术作品致谢 https://www.instagram.com/smart.hedgehog.art/ 想要使用SSH实现反向Shell？现在你可以了。 使用原生SSH语法管理和连接反向Shell 动态、本地和远程转发 原生SCP和SFTP实现，用于从目标检索文件 完整的Windows Shell 多种网络传输协议，例如http、websockets、tls等 客户端与服务器相互认证，建立高信任控制通道 以及更多！text +----------------+ +---------+ | | | | | | +---------+ RSSH | | Reverse | | ...

CVE-2024-20674

CVE-2024-20674 Esta es mi versión de un exploit del CVE público CVE-2024-20674 para lograr una omisión de la autenticación mutua Kerberos mediante un bug lógico en el manejo del lado del cliente de Kerberos U2U TGT-REP. Esto puede utilizarse, por ejemplo, para servir GPOs arbitrarios al suplantar...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: SCTP: Added mutual exclusion in procsctpdoudpport. We must serialize calls to sctpudpsockstop and sctpudpsockstart, or risk a crash, as syzbot reported: Oops: General protection fault, likely due to a non-canonical address...

InstagramMutualFollowerChecker

Instagram 互关粉丝检查器 一个基于 Node.js/Express 的 Web 应用，通过抓取关注者数据来检查 2 个或更多 Instagram 账号间的互关关系。 功能特性 ✅ 检查多个 Instagram 账号间的互关粉丝 ✅ 支持公开账号以及你关注的私密账号 环境要求 Node.js v12 或更高版本 npm 或 yarn 安装步骤（在终端中输入） 1. 克隆项目： root@kitploit: git clone https://github.com/OscarFromNZ/InstagramMutualFollowerChecker 2. 进入项目目录：...

pared

Pared Pared es un plano de control ligero y seguro y un panel administrativo web en tiempo real escrito en Crystal para la seguridad de hosts Linux. Proporciona gestión centralizada para las interfaces DBus/CLI de firewalld y las conexiones de NetworkManager, con TLS mutuo mTLS, autenticación...

twint-utils

twint-utils 这些是 Twint 的实用工具。请查看我们的协作指南以参与贡献。 互关检测器 Mufos.py 使用 Twint 检测指定种子账号的互关关注者。它可以集成到用于社交网络或环境检测的其他更复杂的流程中。目前对于粉丝/关注量巨大的账号来说，它太慢而无法实用。这里有一个托管版本，你可以在游乐场模式下打开并试用。 媒体下载器 接受 twint.output.tweetslist 作为参数。 root@kitploit: from twintutils.tweets import mediadownloader tweets = twint.output.tweetslis...

CVE-2026-88883

Renovate versions before 44.14.4 (Mend Renovate CE/EE images before 15.4.0, mend-renovate-enterprise-edition Helm chart before 10.4.0) contain an incomplete log sanitisation flaw for TLS private keys used in Mutual TLS. The value of hostRules[].httpsPrivateKey was redacted in its own field but no...

CVE-2026-88883 Renovate before 44.14.4 TLS Private Key Log Sanitisation

Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...

EUVD-2026-75433

Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...

CVE-2026-88883 Renovate before 44.14.4 TLS Private Key Log Sanitisation

Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...

AndroidAuto

Open Android Auto Una implementación de código abierto de la app del lado del teléfono de Android Auto. Esta app se ejecuta en tu teléfono y se proyecta en la unidad principal del automóvil a través de USB, reemplazando el APK propietario de Google com.google.android.projection.gearhead. ⚠️ TRABAJ...

PT-2026-89394

Renovate is an automated dependency update tool. In versions before 44.14.4 and Mend Renovate CE/EE images before 15.4.0 and the mend-renovate-enterprise-edition Helm chart before 10.4.0, log sanitisation for TLS private keys used for Mutual TLS was incomplete. While the value of...

CVE-2026-29145-Tester

CVE-2026-29145 Testing Environment 📌 Overview This repository contains a proof-of-concept PoC environment designed to test for CVE-2026-29145. The vulnerability is an authentication bypass in Apache Tomcat's Mutual TLS CLIENTCERT implementation. When OCSP Online Certificate Status Protocol is...

CVE-2026-29145-Tester

Entorno de Pruebas CVE-2026-29145 📌 Descripción General Este repositorio contiene un entorno de prueba de concepto PoC diseñado para probar la CVE-2026-29145. La vulnerabilidad es una omisión de autenticación en la implementación de TLS mutuo CLIENTCERT de Apache Tomcat. Cuando OCSP Protocolo de...

EUVD-2026-63095

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext...

The vulnerability of the hid_post_reset() function in the drivers/hid/usbhid/hid-core.c file of the Linux kernel subsystem for user interface devices allows a hacker to cause a service failure.

The vulnerability of the hidpostreset function in the drivers/hid/usbhid/hid-core.c file of the Linux kernel subsystem for user interface devices leads to a mutual locking mechanism being activated. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bpf_selem_unlink() function in the kernel/bpf/bpf_local_storage.c module, which supports the BPF interpreter for the Linux operating system’s kernel, allows a malicious actor to trigger a service failure.

The vulnerability of the bpfselemunlink function in the kernel/bpf/bpflocalstorage.c module, which is part of the BPF interpreter support for the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the qcom_slim_ngd_ssr_pdr_notify() function in the drivers/slimbus/qcom-ngd-ctrl.c driver of the SLIMbus kernel in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the qcomslimngdssrpdrnotify function in the drivers/slimbus/qcom-ngd-ctrl.c driver of the SLIMbus kernel in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the bpf_iter_unix_seq_show() function in the net/unix/af_unix.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the bpfiterunixseqshow function in the net/unix/afunix.c module, which is part of the Linux kernel’s networking functions, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mlx5e_tc_query_route_vport() function in the drivers/net/ethernet/mellanox/mlx5/core/en_tc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5etcqueryroutevport function in the drivers/net/ethernet/mellanox/mlx5/core/entc.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability may allow an attacker to cause a...