doctrack

Doctrack Tool to manipulate and weaponize Office Open XML documents. Features Create Office Open XML documents Word, Excel Insert tracking pixels and UNC paths Remote Template injection Insert CustomXML parts Inspect external target URLs, metadata and Custom XML parts Installation You will need t...

donutCS

donutCS .NET Core version of donut shellcode generator. https://vimeo.com/369739318 Note: I simply glued a bunch of things together for a more personally useable version. TheWover and Odzhan did all the hard work. Install Confirmed working on Linux, Mac and Windows Kali Install Instructions Usage...

SharpFtpC2

SharpFtpC2 PoC SharpFtpC2는 두 원격 컴퓨터 간의 명령 및 응답 전달에 FTPS를 사용하는 가능성을 탐구하기 위한 작은 실험 프로젝트입니다. 이 프로젝트는 임시 터널 역할을 하는 FTP 프로토콜을 사용하여, FTP 서버에 연결된 클라이언트로 작동하는 두 컴퓨터가 통신할 수 있도록 합니다. 요청과 응답의 교환을 추적하기 위해 간단한 세션 관리 체계가 사용됩니다. SharpFtpC2는 기본적인 세션 관리 시스템을 사용합니다. 매우 초보적이지만, 통신을 동기화하고 관련성을 유지하는 역할을 하며, 이는 원격 시스템...

dvcsharp-api

Damn Vulnerable C アプリケーション API のみ はじめに 注意: これは意図的に脆弱性を持たせたアプリです。本番環境やインターネット/公開サーバーではホストしないでください。注意して使用してください。 Docker root@kitploit: docker-compose up 手動 .NET Core 2.x SDK をインストール Microsoft .NET Core SDK 依存関係をインストールし、データベースをマイグレーション: root@kitploit: dotnet restore dotnet ef database update...

Elite

非推奨（一時的） 親プロジェクトである Covenant は、もはやクライアントサイドアプリケーションを必要としません。Elite は一時的に非推奨となりました。代わりに、Covenant プロジェクトに含まれる Web インターフェースを使用してください。 Elite は、いずれ Covenant プロジェクトに合わせて代替インターフェースとして最新の状態に更新される可能性がありますが、現時点ではこのプロジェクトは更新されておらず、Covenant v0.3 以降では動作しません。 Elite Elite は、Covenant と対話するために構築された .NET Core...

SSCMS_Decrypt

sscms（siteserver cms） database decrypt 简介：SSCMS 基于 .NET Core，能够以最低的成本、最少的人力投入在最短的时间内架设一个功能齐全、性能优异、规模庞大并易于维护的网站平台。 项目地址：https://github.com/siteserver/cms Des Decrypt https://github.com/siteserver/cms/blob/master/src/SSCMS/Utils/DesEncryptor.cs root@kitploit: python3 sscmsdecrypt.py + Current Encry...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

AVIator

AviAtor가 NETCore 5로 포팅되었으며 UI가 업데이트되었습니다. AV|Ator 정보 ://이름 AV : 안티바이러스 Ator : 검사, 연금술사, 과학자, 마술사, 학자, 엔지니어이며 때로는 무에서 물체를 만들어낼 수 있는 능력을 가진 존재입니다 https://en.wikipedia.org/wiki/Ator 정보 ://목적 AV|Ator 는 백도어 생성 유틸리티로, 암호화 및 인젝션 기술을 사용하여 AV 탐지를 우회합니다. 자세히: AES 암호화를 사용하여 주어진 셸코드를 암호화합니다. 암호화된 페이로드를 포함하는 ...

BearFTP

BearFTP クマをハックしてみる勇気はあるか？ BearFTP はハニーポットFTPサーバーで、ハッカーの試みを記録し、パブリックIPブラックリストデータベースへ報告するように設計されています。 特徴: 設定ファイル対応（再コンパイル不要） サーバー上のファイルやファイル内容の編集が可能 FileZilla および WinSCP でテスト済み AntiNmap、AntiMetasploit、さらにあなたの ファイルをダウンロードしようとする者も報告します！ Windows と Linux の両方で動作 純粋なTCPClients、高いパフォーマンスが期待できます！...

simple-maven

Damn Vulnerable C Application API Only はじめに 注記: これは意図的に脆弱性を持たせたアプリです。本番環境やインターネット/公開サーバーにはホストしないでください。注意して使用してください。 kk Docker テスト root@kitploit: docker-compose up tets 手動 .NET Core 2.x SDK をインストールします Microsoft .NET Core SDK 依存関係をインストールし、データベースを移行します: root@kitploit: dotnet restore dotnet ef databa...

CVE-2025-55315-repro

CVE-2025-55315-repro このリポジトリには、HTTPチャンク転送と改行解析の動作を再現・検証するための小さなASP.NET Coreコンソールアプリが含まれています。 詳細は CVE-2025-55315 をご覧ください。 内容 Repro/Program.cs - ローカルのKestrelサーバーを起動し、2つのTCPベースのテストを実行するコンソールアプリです。これらのテストは、TcpClientを介して生のHTTPバイトを送信し、断片化された読み取りにわたるチャンク転送解析と不正な改行処理を検証します。...

ROS-20260916-73-0021

The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: let netcore.devweight always be non-zero The following problem was encountered during stability testing: NULL netdevice: The NAPI poll function processbacklog+0x0/0x530 returned 1, exceeding its budget of 0. ------------ Cut...

Security Update for Microsoft .NET Core (September 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...

Microsoft .NET Core SDK Information Disclosure Vulnerability

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Security Update for Microsoft .NET Core SDK (September 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges ove...

The vulnerability of the BPF_CALL_4() function in the net/core/filter.c module allows a hacker to compromise the privacy, integrity, and accessibility of protected information within the Linux operating system’s kernel-based networking functions.

The vulnerability of the BPFCALL4 function in the net/core/filter.c module related to the execution of kernel network functions in Linux operating systems involves a pointer shift beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the sk_setsockopt() function in the net/core/sock.c module exposes the support for networking functions in the Linux kernel. This allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sksetsockopt function in the net/core/sock.c module related to Linux kernel network functions is associated with deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the sock_ops_convert_ctx_access() function in the net/core/filter.c module allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information within Linux’s kernel-based networking functions.

The vulnerability of the sockopsconvertctxaccess function in the net/core/filter.c module relates to the execution of operations outside of buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the xdp_master_redirect() function in the net/core/filter.c module exposes network functions of the Linux kernel, allowing a hacker to cause a service failure.

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...