CGA-5P9J-7V7M-MWQH

Bulletin has no description...

CGA-PQ9P-39WG-CHV4

Bulletin has no description...

CGA-GFQ2-7V5R-GX22

Bulletin has no description...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno root@kitploit: $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! root@kitploit: $ deno run --allow-run --allow-net check.ts https://example.com/...

CVE-2023-7016-POC

This repository does not have a README...

FiddleZAP

FiddleZAP FiddleZAP es una versión simplificada de EKFiddle para OWASP ZAP. Con ZAP como tu proxy web, puedes marcar tráfico malicioso basado en expresiones regulares predefinidas. Ejemplo: Alerta, resaltado y etiquetado cuando una expresión regular coincide con una cadena dentro del código fuent...

RedPersist

RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...

PSAsyncShell

PSAsyncShell PSAsyncShell is an Asynchronous TCP Reverse Shell written in pure PowerShell. Unlike other reverse shells, all the communication and execution flow is done asynchronously, allowing to bypass some firewalls and some countermeasures against this kind of remote connections. Additionally...

banrays

Ban-Rays Glasses to detect smart-glasses that have cameras I'm experimenting with 2 main approaches: Optics: classify the camera using light reflections. Networking: bluetooth and wi-fi analysis. So far fingerprinting specific devices based on bluetooth BLE is looking like easiest and most reliab...

ssh-tpm-agent

SSH agent for TPM ssh-tpm-agent is a ssh-agent compatible agent that allows keys to be created by the Trusted Platform Module TPM for authentication towards ssh servers. TPM sealed keys are private keys created inside the Trusted Platform Module TPM and sealed in .tpm suffixed files. They are bou...

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...

CVE-2019-2215

CVE-2019-2215 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885 Samsung S7 and S7 Edge with Kernel 3.18.x seem not vulnerable could be however, with more work with PoC adjustments. Could not see more,...

CVE-2024-4577-Exploit

CVE-2024-4577 Exploit Exploit of the PHP CGI Argument Injection vulnerability CVE-2024-4577 to achieve Remote Code Execution RCE on a vulnerable PHP version running in a Windows environment, discovered by Orange Tsai. For more details, check out DEVCORE's Blog. Requirements Language Used = Python...

CVE-2022-22965-spring4shell

CVE-2022-22965-spring4shell CVE-2022-22965 Spring4Shell research & PoC for learning purposes Blog post A more detailed analysis and explanation of the vulnerability can be found on my blog post. Comments on initial research Based on the initial research I did on...

struts1-patch

struts1-patch Detailed description and usage, see: http://security.tencent.com/index.php/blog/msg/50 struts1 CVE-2014-0114 classLoader manipulation vulnerability patch struts.jar...

CVE-2024-31982

CVE-2024-31982 PoC and Bulk Scanner Overview POC for CVE-2024-31982: XWiki Platform Remote Code Execution 14.10.20. This POC is based on this security advisory . How to Use Single Target Scan To scan a single target endpoint: root@kitploit: python CVE-2024-31982.py -u target Bulk Target Scan To...

gh-safe-repo

gh-safe-repo Create GitHub repositories with safe defaults applied automatically. Replaces the five-minute post-creation settings checklist with a single command. root@kitploit: gh-safe-repo create Branch protection, immutable tags, Dependabot, restricted Actions permissions, secret scanning with...

frameworks_base_AOSP_10_r33_CVE-2021-39696

This repository does not have a README...

unredactor

Un-Redactor A PDF editing tool that lets you unredact, put your own information over a redaction box, and extract all text. This tool is for forensics purposes. It does not "recover" data truly destroyed by redaction tools. It can process large data sets and convert all at once to a HTML pages wi...

log4j-log4shell-affected

log4j-log4shell-affected Lists of affected components and affected apps/vendors by CVE-2021-44228 aka Log4shell or Log4j RCE for security responders. We believe it is important to classify the vendors and products between: 1. Internal risk - what you need to patch first to remove risk internally ...