CVE-2024-24919

Инструмент эксплуатации RCE уязвимости в Check Point Security Gateway CVE-2024-24919 Обзор Этот репозиторий содержит инструмент для эксплуатации уязвимости CVE-2024-24919 в Check Point Security Gateways. Инструмент представляет собой мульти-сканер, способный выявлять уязвимые устройства, и...

firstexecution

firstexecution 예상된 진입점 외부에서 코드를 실행하는 다양한 방법의 모음...

evil-twin-ap

Evil Twin Access Point Toolkit A complete, modular, and reproducible evil twin access point setup for defensive security testing, penetration testing, and wireless security research. ⚠️ Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This tool is provided for: Educational...

wifi-agent

wifi-agent wifi-agent 불법 액세스 포인트 이 프로그램은 오직 교육 목적으로만 제작되었으며, rogue 액세스 포인트 방식이 어떻게 작동하는지 확인하기 위한 것입니다. 프로그램의 불필요한 사용은 금지되며, 제조사는 누군가의 불법 사용에 대해 어떠한 책임도 지지 않습니다. 도구는 본인의 책임 하에 사용하고, 부주의한 행동을 피하십시오. 설치 지침 Gnu / Linux OS에 설치 터미널에서 root@kitploit: sudo su root@kitploit: git clone...

CVE-2004-2549

CVE-2004-2549 Беспроводная точка доступа Nortel серии 2200 - Отказ в обслуживании Публикация на Exploit-db: https://www.exploit-db.com/exploits/23786/ Автор Алекс Эрнандес, также известный как @alt3kx...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

WordPress Restrict User Access <= 2.5 - Cross-Site Scripting

WordPress Restrict User Access – Membership Plugin with Force versions before 2.6 is vulnerable to Reflected Cross-Site Scripting via the 'ruasection' parameter in the admin level edit page. id: CVE-2024-29138 info: name: WordPress Restrict User Access = 2.5 - Cross-Site Scripting author: Shivam...

Arcserve Unified Data Protection - Authentication Bypass

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin. id: CVE-2024-0799 info: name: Arcserve Unified Data Protection -...

Aquatronica Controller System <= 5.1.6 - Information Disclosure

Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

OpenEMR < 7.0.1 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.1. id: CVE-2023-2948 info: name: OpenEMR 7.0.1 - Cross-Site Scripting author: ritikchaddha,princechaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr...

Giga Messenger WordPress - Cross-Site Scripting

Giga Messenger WordPress plugin = 2.3.1 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

Joplin 3.3.3 Server - Privilege Escalation

Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint PATCH /api/users/-id t...

Aruba Instant Access Point (IAP) - Cross-Site Scripting

A remote cross-site scripting xss vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below;...

Airopy

Airopy - Захват беспроводных пакетов Получайте клиентов и точки доступа. С картами Alfa этот скрипт работает корректно. Зависимости Чтобы запустить этот скрипт, сначала установите зависимости следующим образом: root@kitploit: sudo pip3 install -r requirements.txt Как использовать В примерах я не...

sccm_sql_backdoor

sccmsqlbackdoor Management Point 저장 프로시저에 제어된 백도어를 주입하여, 합법적인 MP HTTP 서비스를 통해 간접적으로 SQL을 실행할 수 있게 해주는 개념 증명PoC 도구입니다. 설치 저장소를 클론하고 의존성을 설치하면 설치할 수 있습니다. root@kitploit: $ git clone --recurse-submodules https://github.com/synacktiv/sccmsqlbackdoor $ cd sccmsqlbackdoor $ python3 -m venv .venv &&...

CVE-2026-50751

CVE-2026-50751 Сканер Check Point IKEv1 Многопоточный сканер уязвимости CVE-2026-50751 — критической уязвимости обхода аутентификации IKEv1, затрагивающей шлюзы безопасности Check Point Quantum Security Gateways. Обзор Системы удалённого доступа VPN Check Point с включенным IKEv1 уязвимы для атак...

c41n

c41n c41n 은 자동화된 Rogue Access Point 설정 도구입니다. c41n 은 여러 유형의 Rogue Access Point 및 Evil Twin 공격의 자동화된 설정을 제공합니다. c41n 은 사용자가 정의한 특성인터페이스, 액세스 포인트 이름 및 채널으로 액세스 포인트를 설정하고, 액세스 포인트용 DHCP 서버를 설정하며, HTTP 트래픽 스니핑 또는 자격 증명 스니핑이 가능한 Captive Portal 설정 기능을 제공합니다. 설치: 설치는 저장소를 클론하고, 종속성을 설치하는 스크립트를 실행하거나 수동으...

FuzzAP

FuzzAP Python-скрипт для обфускации беспроводных сетей ''' Warning: I am not a programmer by trade, nor would I consider myself one The common SSID list was pulled from https://wigle.net/gps/gps/Stat The OUI vendor list was parsed from http://standards.ieee.org/develop/regauth/oui/oui.txt for wel...

CVE-2026-46588

camel-couchdb Воспроизведение инъекции заголовков CouchDb CVE-2026-46588 Этот проект демонстрирует инъекцию заголовков сообщений в компоненте Apache Camel camel-couchdb, отслеживаемую как CVE-2026-46588. Компонент считывает несколько заголовков Exchange для управления своим поведением —...