CVE-2020-5902

CVE-2020-5902 In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also referred to as the Configuration utility, has a Remote Code Execution RCE vulnerability in undisclosed pages. Proof of concept...

Juniper-CVE-2023-36845-Mass-Hunting

Juniper-CVE-2023-36845-Mass-Hunting Juniper RCE Remote Code Execution CVE-2023-36845 is a vulnerability that has been identified within Juniper's software. This particular flaw allows for remote code execution, meaning an attacker could run arbitrary code on a system without needing physical acce...

CVE-2024-21683-RCE

用法 python poc.py -u http://localhost:8090 -user admin -pass admin -f exploit.js -n test -p http://127.0.0.1:8080 POC...

CVE-2023-6546

CVE-2023-6546...

notes

notes 我的漏洞研究笔记存档。大部分是对 Twitter 内容的扩展阐述。...

lowkey

在 AWS 上自托管 AI 编码代理 — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ 在 YouTube 上观看完整演示 📝 阅读博客文章：我给代理开了个 AWS 账号，它就能编码、部署和调试全栈应用了 简而言之 — 部署 Lowkey： root@kitploit: curl -sfL install.lowkey.run | bash 适用于 bash 、zsh 和 AWS CloudShell 。安装程序会交互式地引导你选择 pack、profile 和部署方法。 一行命令示例（非交互式）：...

lowkey

Self-Hosted AI Coding Agents on AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Watch the full walkthrough on YouTube 📝 Read the blog post: "I Gave My Agent Its Own AWS Account" TL;DR — deploy Lowkey: root@kitploit: curl -sfL install.lowkey.run | bash Works in bash , zsh , and AWS...

cerberus-re-skill

Cerberus RE cerberus-re is a local Apple-focused reverse-engineering workbench for building a repeatable three-headed static/dynamic/instrumentation loop around Ghidra, LLDB, and Frida. It is designed for analysts and coding agents that need durable artifacts instead of terminal-only notes: Ghidr...

NoLongerEvil-Thermostat

Nest Thermostat Firmware Setup 🏆 FULU Bounty Winner 🏆 Hack House and this project are the official winners of the FULU Bounty for Nest Learning Thermostat Gen 1/2 Hardware Alternative: If you're interested in the hardware side of things, check out https://sett.homes for a drop-in PCB replacement...

CVE-2026-41096-PoC

此存储库没有 README。...

CVE-2025-6558-exp

CVE-2025-6558 - Google Chrome ANGLE/GPU Sandbox Escape...

CVE-2024-54819

CVE-2024-54819 更多详情请参阅： https://www.partywave.site 关于 CVE-2024-54819 登录 POST 请求 攻击者必须已登录 root@kitploit: POST /librarian/index.php/authentication HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:128.0 Gecko/20100101 Firefox/128.0 removed ... Content-Type:...

CVE-2022-26134

CVE-2021-46422 RCE Installation root@kitploit: git clone https://github.com/yigexioabai/CVE-2021-46422-RCE.git cd CVE-2022-26134-cve1 pip3 install -r requirements.txt Place CVE-2021-46422 RCE.py into the pocsuite3\pocs directory cd pocs pocsuite3 Usage Single URL: root@kitploit: pocsuite -r...

CVE-2019-18634

CVE-2019-18634 This is a basic reproduction of CVE-2019-18634, a privilege escalation exploit in sudo with pwfeedback enabled. This was created as part of a project for NTU SC3010 to demonstrate a security vulnerability. To reproduce the exploit, a Docker image of Ubuntu 20.04 was used. A...

tird

🏠 Home 📑 Specification 📜 man page 📄 Input Options 📖 Tutorial ❓ FAQ 📥 Install tird & tirdFS tird /tɪrd/ an acronym for "this is random data" is a file encryption tool that minimizes metadata and hides encrypted data. With tird, you can: 1. Create files filled with random data to use as containers ...

vmsan

vmsan 🔥 Firecracker microVM sandbox toolkit Create, manage, and connect to isolated Firecracker microVMs from the command line. Boot a sandboxed VM in milliseconds, run commands, transfer files — no SSH required. 📚 Read the full documentation at vmsan.dev ✨ Features...

JavaUnserializeExploits

JavaUnserializeExploits Scripts de Python y petición HTTP referenciados en la entrada de blog ¿Qué tienen en común WebLogic, WebSphere, JBoss, Jenkins, OpenNMS y su aplicación? Esta vulnerabilidad en http://foxglovesecurity.com...

xmap

XMap: インターネットスキャナー XMapは、インターネット全体のIPv6およびIPv4ネットワーク研究スキャンを実行するために設計された高速ネットワークスキャナーです。...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

festin

FestIN - パワフルなS3バケットファインダー＆コンテンツ発見 FestInとは なぜFestInか インストール Pythonを使う Dockerを使う 全オプション 使い方 検索ドメインの設定 同時実行数 HTTPクロール設定 結果の管理 プロキシの使用 DNSオプション 全文検索サポート サービス（監視モード）として実行 例：FestIn + DnsReconの組み合わせ ステップ1 - ターゲットドメインに対してdnsreconを希望のオプションで実行し、出力を保存 ステップ2 - 前の生成ファイルをFestInに与える準備 ステップ3 -...