CVE-Tracker

CVE-Tracker Con la ayuda de este script automatizado, nunca perderá el rastro de los CVE recién publicados. Lo que hace exactamente este script de PowerShell es ejecutar Microsoft Edge al iniciar el sistema, navegar a 2 URL y luego poner el navegador en modo pantalla completa. Como hackers éticos...

ResetNightmare

ResetNightmare Proof-of-concept POC tool for ResetNightmare CVE-2026-27912. ResetNightmare is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched...

hijagger

hijagger - check package registries for hijackable packages This tool checks every maintainer from every package in the NPM and Python Pypi registry for unregistered domains or unregistered MX records on those domains. If a domain is unregistered you can grab the domain and initiate a password...

repokid

Repokid Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles in an AWS account. Getting Started Install root@kitploit: mkvirtualenv repokid git clone [email protected]:Netflix/repokid.git cd repokid pi...

CVE-2026-96751

A vulnerability has been found in pmTicket Project-Management-Software up to 078fa56a782490c5059a0814f84df27984f4d7e2. This affects the function setSync of the file /ajax/addproject.php. Such manipulation of the argument connsettings leads to sql injection. The attack may be launched remotely. Th...

CVE-2026-93577

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to an integer overflow issue when...

CVE-2026-89078

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due to a double free issue when parsing a...

CVE-2023-32243

CVE-2023-32243 Essential Addons for Elementor - Unauthorized Account Takeover. PoC is now published. It was created for educational/research purposes only! Use it at your own risk!...

CVE-2023-38545-libcurl-SOCKS5-heap-buffer-overflow

Disclaimer This article is intended solely for technical discussion and learning. Any direct or indirect consequences or losses caused by the use of the information provided herein shall be borne solely by the user. The author assumes no responsibility for such consequences or losses...

thanatos

Thanatos Thanatos es un agente C2 para Windows y Linux escrito en rust. Instalación Para instalar Thanatos, necesitarás tener Mythic configurado en una máquina. En el directorio raíz de Mythic, usa mythic-cli para instalar el agente. root@kitploit: sudo ./mythic-cli install github...

bmc-tools

BMC-Tools Analizador de caché de mapas de bits de RDP. Entrada bmc-tools procesa archivos bcache.bmc y cache????.bin encontrados dentro de los perfiles de usuario de Windows. Uso root@kitploit: ./bmc-tools.py -h -s SRC -d DEST -c COUNT -v -o -b -w WIDTH Con el siguiente significado de los...

Findomain

Findomain La solución completa para el reconocimiento de dominios. Soporta captura de pantallas, escaneo de puertos, importación de datos de otras herramientas, monitoreo de subdominios y más. Recibe alertas sobre tus hallazgos a través de servicios como Discord, Slack y Telegram. Múltiples clave...

CVE-2024-35250-BOF

CVE-2024-35250-BOF Beacon Object File BOF implementation of CVE-2024-35250 for Cobalt Strike. Compiled with Visual Studio. Acknowledgments All credit for the exploit code goes to the original author varwara. Disclaimer I am not responsible for any crimes against humanity or nuclear war that you m...

AdminSnatcher

AdminSnatcher Atrapemos el panel de administración de cualquier sitio web en segundos. Uso: 1. Ve a la terminal y cd a la ruta. 2. Escribe: python3 adminsnatcher.py --url https://example.com Requisitos 1. Python 3 2. Las siguientes bibliotecas deben estar instaladas en Python3: Requests Random...

CVE-2024-4367-PoC

CVE-2024-4367 & CVE-2024-34342: Arbitrary JavaScript execution in PDF.js A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. If pdf.js is...

cyph

Cyph Cyph is a cryptographically secure messaging and social networking service, providing an extreme level of privacy combined with best-in-class ease of use. Cyph’s patented technology — built by former SpaceX engineers, audited by Cure53, and the basis of research presentations at Black Hat an...

cyph

Cyph Cyph es un servicio de mensajería y redes sociales criptográficamente seguro, que proporciona un nivel extremo de privacidad combinado con la facilidad de uso de primer nivel. La tecnología patentada de Cyph construida por ex ingenieros de SpaceX, auditada por Cure53 y base de presentaciones...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

exploit_mitigations

Mitigaciones de explotación El objetivo es listar las mitigaciones de explotación añadidas a lo largo del tiempo en varios sistemas operativos, software, librerías o hardware. Resulta útil saber si una vulnerabilidad determinada es fácilmente explotable o no según las mitigaciones de explotación...

donut

Versión actual: v1.1 Índice de contenidos 1. Introducción 2. Cómo funciona 3. Compilación 4. Uso 5. Subproyectos 6. Desarrollo con Donut 7. Preguntas y discusiones 8. Aviso legal 1. Introducción Donut es un código independiente de la posición que permite la ejecución en memoria de archivos...