pacpoc

PACPoC: A local PoC exploit for CVE-2019-2205 To try out this exploit install the "malicious" app PacTest.apk and make exploit.pac available over http with, for example python -m SimpleHTTPServer. Then go to proxy settings on an Android device, select proxy autoconfig, and enter the URL to...

WebKit-UAF-ANGLE-OOB-Analysis

WebKit-UAF-ANGLE-OOB-Analysis CVE-2025-43529, CVE-2025-14174 Notes and PoC material for a WebKit/ANGLE chain on iOS 26.1. This is not a full exploit; it separates verified primitives from the pieces that still fail. Author: zeroxjf Based on: jir4vv1t's CVE-2025-43529 exploit Status: Partial chain...

CVE-2026-20700

dyld-signing-oracle-poc A controlled exploration of dyld's page-in linking and chained fixup machinery as a PAC signing oracle, in the context of CVE-2026-20700. On arm64e, every function pointer is hardware-authenticated. The goal here is to show that dyld itself can be directed — through a...

CVE-2026-82776

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82778

An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...

CVE-2026-82777

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82778

CVE-2026-82778 affects the CONPROSYS PAC Series (a product line by Contec), where an information exposure through directory listing occurs. A remote unauthenticated attacker can access a specific URL to obtain the directory list without authentication. The CVSS 3.1 score is 4.3 (Medium) with low ...

CVE-2026-82778

An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...

EUVD-2026-77231

An exposure of information through directory listing issue exists in CONPROSYS PAC Series. Accessing a specific URL on this product may allow a remote unauthenticated attacker to obtain the directory list without authentication...

CVE-2026-82777

CVE-2026-82777 is an OS Command Injection vulnerability in CONTEC CONPROSYS PAC Series controllers. The root cause is improper neutralization of special elements used in an OS command, allowing an attacker with low-privilege (authenticated) access to execute arbitrary OS commands on the device. T...

CVE-2026-82777

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

EUVD-2026-77230

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82776

A cross-site scripting (XSS) vulnerability exists in the CONPROSYS PAC Series . When exploited, an arbitrary script may be executed in the context of a logged-in user's web browser, with changed scope (CVSS 3.1: 6.1 MEDIUM ), indicating the impact extends beyond the vulnerable system to the subse...

EUVD-2026-77229

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

CVE-2026-82776

Cross-site scripting vulnerability exists in CONPROSYS PAC Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...

bbs

BBS The old bbs can be found here Description bbs is a router for SOCKS and HTTP proxies. It exposes SOCKS5, HTTP CONNECT or port forwarding services and forwards incoming requests to proxies or chains of proxies based on the request's target. Routing can be configured with a PAC script if built...

noPac-detection

About Detection script for CVE-2021-42278 and CVE-2021-42287 Usage root@kitploit: The detection script uses the domain account credentials to determine the possibility of the vulnerabilities. usage: noPac-detection.py -h -debug -dc-ip -targetUser credentials optional arguments: -h, --help show th...

noPac

noPac CVE-2021-42287/CVE-2021-42278 Escáner y Explotador. Otra explotación de bajo esfuerzo para pasar de usuario de dominio a administrador de dominio. Si un Controlador de Dominio es vulnerable, devolverá un TGT sin PAC, todas las miradas en tickets de tamaño pequeño. Mitigación ¡Parchea tus...

cve-2025-53779-kerberos_bypass_reproduction

CVE-2025-53779: Microsoft Windows Kerberos Authentication Bypass CVSS Score: 9.8 Critical Status: Active exploitation in the wild Disclosure: Microsoft August 2025 Patch Tuesday Zero-Day Overview CVE-2025-53779 is a critical authentication bypass vulnerability in Microsoft Windows Kerberos protoc...

NoPacScan

NoPacScan NoPacScan is a CVE-2021-42287/CVE-2021-42278 Scanner,it scan for more domain controllers than the original script, and more accurate than it.It scan DC with DNS search msdcs.aaa.com,it's better than LDAP and SAMR, and it will automatically scan all DC we find.If you use LDAP or SAMR...