Root-My-Galaxy

Root My Galaxy Root My Galaxy 是一款一键安装工具，适用于明确支持的 Samsung 型号与内核组合。该应用程序本身与设备偏移量、原生漏洞利用载荷以及 KernelSU 构建产物保持分离。 最新版本 设备数据源与原生载荷维护在 Root-My-Galaxy-Payloads 中。 应用程序 该应用会选择型号列表与三段式内核版本均匹配手机的载荷。例如，6.6.98-android15-8-... 匹配 6.6.98。高级模式会按这两个值过滤目录，并允许手动选择，同时显示型号与内核版本警告。 构建 要求： Android Studio JBR 21 Android...

CVE-2025-66478-Research-Proof-of-Concept

CVE-2025-66478-Research-Proof-of-Concept Overview This repository contains research and a proof-of-concept implementation related to CVE-2025-66478, a vulnerability affecting certain Next.js / React Server Components configurations. The project was developed in a controlled laboratory environment...

cve-2019-0604-SP2010-netv3.5

cve-2019-0604-SP2010-netv3.5 Recently, I came across a Sharepoint 2010 SP2 and all the Proof of Concept that I tested didn't work until I realized that the server was on .net 3.5 which require a different library. Here is the .dll for .net 3.5. The code came from...

CVE-2025-32433.py

CVE-2025-32433.py This Python PoC simulates SSH message flows, including key exchange, channel open, and command requests, to analyze server behavior. Intended for controlled lab testing, it demonstrates protocol handling, pre-auth message processing, and payload interactions for research and...

CVE-2016-3714

CVE-2016-3714 ImageMagick Code Execution CVE-2016-3714 imagickbuilder.py = Simple Payload Builder to Exploit CVE-2016-3714 imagickbypassshell.php = PHP based web shell leveraging the PHP imagick extension wrapper to bypass disabled functions Few Images of things working: Payload Builder: imagick...

-Remcos-RAT-Fileless-svchost-Injection-Obfuscated-Payload-Analysis-

1. Remcos – svchost Injection via Native API Calls The following Binary Ninja snippet reveals the core injection mechanism used by Remcos to inject its payload into svchost.exe. What This Code Does: CreateProcessW with the CREATESUSPENDED flag starts a new svchost process in a suspended state...

cve-2024-4367-poc

CVE-2024-4367 POC for PDF.js POC for PDF.js' CVE-2024-4367 vuln - The pdf-modify.py script can be used to modify your PDFs and inject payloads. Usage 1. Ensure CVE-2024-4367-POC-base-placeholder.pdf is in the working directory. 2. Uncomment/modify the payloadnew variable in pdf-modify.py. 3. Run...

RHEL 8 : redis:6 (RHSA-2026:69542)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69542 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

RHEL 8 : redis:6 (RHSA-2026:69533)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69533 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

CVE-2026-88404

CVE-2026-88404 is a remote code execution (RCE) vulnerability in Univer v1.0.0-alpha.2 , specifically in the UniscriptExecutionService.execute() function located in /services/script-execution.service.ts. An attacker can execute arbitrary code by supplying a crafted payload to this function. The a...

RHEL 8 : redis:6 (RHSA-2026:69534)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69534 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

CVE-2025-53770

CVE-2025-53770 This is a scanner for the SharePoint unauthenticated Remote Code Execution vulnerability, assigned CVE number CVE-2025-53770. The code for this was written by reverse-engineering a payload seen in the wild. Use at your own risk, I am not responsible for any negative impact this mig...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina Info : New Microsoft Office zero-day used in attacks to execute PowerShell Summary On the 29th of May 2022, the NaoSec team, an independent Cyber Security Research Team, discovered a malicious Office document shared on Virustotal. This...

CVE-2025-55182-MassPayloadAttack

CVE-2025-55182 Mass Payload Attack React2Shell A modified Mass RCE Exploit script for CVE-2025-55182 React2Shell targeting Next.js applications. This tool is a modification of the original PoC script by pax-k. While the original script targets a single host, this version is enhanced to support ma...

mythic_ornn

Mythic Ornn 基于LLM的Mythic Agent、Payload-Type和C2 Profile生成器。 手工编写Mythic agent非常繁琐：每个agent都需要重新实现相同的线缆协议、payload-type脚手架和C2管道。Mythic Ornn通过将官方Mythic开发者文档转化为生成管道的检索层，跳过了这些样板代码。LLM查阅本地精简版的文档副本，并生成与文档化消息格式开箱即用的agent。 该管道以两种模式运行，共享相同的文档和规则： 提示模式 — template/AGENT.md...

cve-2020-14343-lab

CVE-2020-14343 – Laboratorio de carga insegura de YAML en PyYAML 1. Descripción general del proyecto Este proyecto demuestra CVE-2020-14343 en un entorno Docker controlado y aislado. El laboratorio contiene dos entornos: Un entorno vulnerable que utiliza PyYAML 5.3.1 Un entorno parcheado que...

CVE-2023-42793

Acerca de CVE-2023-42793 Primero necesitarás obtener el token utilizando un exploit diferente. Sin embargo, el siguiente exploit te permitirá obtener RCE en el servidor Linux, ya que codifica el payload en URL y lo envía al servidor. Cómo usar root@kitploit: python3 ./main -t TEAMCITYTOKEN -u...

Project-CVE-2026-65351

BROWSER BOMB / 资源耗尽攻击载荷 由 Xer0TLabs 与 Persephrak 去中心化联盟开发的浏览器压力测试脚本的分析与文档概述。 警告：仅限教育、研究和授权测试用途。运行此脚本将立即冻结或崩溃目标浏览器标签页、应用程序或操作系统。 1. 项目概述 本仓库包含一个全面的浏览器崩溃工具，旨在现代网络浏览器中同时触发硬件和软件瓶颈。通过激进地攻击 RAM 堆、GPU 显存、音频管线以及布局渲染引擎，该脚本会在宿主机上制造灾难性的拒绝服务（DoS）条件。 它针对多种渲染引擎进行了定向优化，包括 Chromium（Blink）、Gecko 和 WebKit（Safari）。...

follina.py

'Follina' MS-MSDT n-day Microsoft Office RCE 漏洞 快速 POC，用于在本地测试环境中复现 “Follina” Office RCE 漏洞。运行脚本会在当前工作目录生成一个 clickme.docx（或 clickme.rtf）载荷文件，并启动一个承载该载荷文件（www/exploit.html）的 Web 服务器。载荷和 Web 服务器参数均可配置（参见帮助和示例）。 ⚠ 切勿在生产环境中使用，否则你会被视为傻瓜 用法： root@kitploit: $ python .\follina.py -h usage: follina.py -h ...

SharpWnfSuite

SharpWnfSuite This is the repository for Windows Notification Facility WNF tools. Currently, a C port of the tools in wnfun developed by Alex Ionescu @aionescu and Gabrielle Viala @pwissenlit has been uploaded. When I develop additional tools for Windows Notification Facility, they will be upload...