CVE-2023-38646

...

CVE-2024-26229-exploit

CVE-2024-26229 LPE en Windows Este repositorio es una reescritura del código desde aquí, pero sin dependencias adicionales. PARCHEADO: 9 de abril de 2024...

cve-2025-24054

CVE-2025-24071：通过 .library-ms 文件泄漏 NTLM Hash（Metasploit 模块） 此仓库包含一个 Metasploit 模块 ，用于利用 CVE-2025-24071——Windows 资源管理器中的漏洞，当从 ZIP 存档中提取恶意的 .library-ms 文件时，会泄漏 NTLM Hash。 开发者：FOLKS-IWD 概述 该漏洞发生在用户提取包含特制 .library-ms 文件的 ZIP 存档时。Windows 资源管理器会自动向文件中指定的远程服务器发起 SMB 认证请求，在无需用户交互的情况下泄漏用户的 NTLM Hash。 此...

mcafee-sitelist-pwd-decryption

Herramienta de descifrado de contraseñas en Python3 para el archivo SiteList.xml de McAfee. Autor: [email protected] Blog: http://funoverip.net Fecha: 10 de febrero de 2016 Referencias: https://funoverip.net/2016/02/mcafee-sitelist-xml-password-decryption/...

llm-circuit-finder

llm-circuit-finder I replicated Ng's RYS method and found that duplicating 3 specific layers in Qwen2.5-32B boosts reasoning by 17% and duplicating layers 12-14 in Devstral-24B improves logical deduction from 0.22→0.76 on BBH — no training, no weight changes, just routing hidden states through th...

CVE-2018-8611

This repository does not have a README...

PowerLurk

PowerLurk PowerLurk is a PowerShell toolset for building malicious WMI Event Subsriptions. The goal is to make WMI events easier to fire off during a penetration test or red team engagement. Please see my post Creeping on Users with WMI Events: Introducing PowerLurk for more detailed information:...

heimdal

Heimdal Heimdal is an implementation of: ASN.1/DER, PKIX, and Kerberos. For information how to install see here. There are man pages for most of the commands. Bug reports and bugs are appreciated. Use GitHub issues. For more information see the project homepage https://heimdal.software/heimdal/ o...

CVE-2024-21533-PoC-ggit

CVE-2024-21533 Argument Injection vulnerability in ggit ggit describes itself as: root@kitploit: Local promise-returning git command wrappers Resources: Project's GitHub source code: https://github.com/bahmutov/ggit Project's npm package: https://www.npmjs.com/package/ggit Article write-up on thi...

sectemplates

Sectemplates Me complace anunciar la creación de SecTemplates.com, un sitio web donde profesionales de la seguridad informática y equipos de ingeniería de startups que carecen de un equipo de seguridad pueden encontrar plantillas para ayudar a impulsar sus programas. El enfoque principal de este...

collection-document

Project Description Collection of quality safety articlesTo be rebuilt Some are inconvenient to release. Some forget update,can see me star. collection-document awesome 以前的链接中大多不是优质的 渗透测试部分不再更新 因精力有限，缓慢更新 Author: tom0li Blog: https://tom0li.github.io root@kitploit: - Project Description -...

binwalk

Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...

CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Exploit en Python para la vulnerabilidad de carga de archivos sin restricciones en Chamilo - CVE-2023-4220 El código contenido en este repositorio tiene fines exclusivamente educativos. Descripción: La carga de archivos sin restricciones en la funcionalidad de carga de archivos...

CVE-2023-3519

CVE-2023-3519 This Nuclei template checks for the presence of the CVE-2023-3519 vulnerability in a target web server. Vulnerability CVE-2023-3519 is a vulnerability that allows unauthenticated remote code execution in the Citrix Application Delivery Controller ADC and Gateway appliances. An...

ActiveMQ_Crack

ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...

gundog

gundog gundog - 基于 PowerShell 的 Microsoft 365 Defender 引导式狩猎 Gundog 为您提供 Microsoft 365 Defender 中的引导式狩猎。目前尤其（即便不是唯一）适用于电子邮件和终结点警报。 功能 您提供一个 AlertID（您可能通过电子邮件通知收到），gundog 将尽可能多地搜索相关数据。它不会像门户中的高级搜寻那样提供灵活性，但会为您提供警报、所有相关实体以及一些丰富信息的快速初步概览。 它执行的所有搜索都基于警报时间戳——因此我们只关心警报前后不久的事件。 它还会为您搜索到的每个实体提供 PowerShell...

gundog

gundog gundog - PowerShell based guided hunting in Microsoft 365 Defender Gundog provides you with guided hunting in Microsoft 365 Defender. Especially if not only for Email and Endpoint Alerts at the moment. Functionality You provide an AlertID you might received via Email notification and gundo...

agent-bom

Supported backends vary by capability. Capability matrix...

faraday-cli

Faraday en la terminal Usa faraday directamente desde tu terminal favorita faraday-cli es el cliente oficial que hace que automatizar tus flujos de trabajo de seguridad sea más fácil. Antes de instalar, recomendamos crear y activar un entorno virtual de Python para evitar afectar los paquetes de...

faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...