Exploit for Code Injection in Gitea

🫖 CVE-2026-60004 Gitea Validator A standalone discovery, as...

r00kie-kr00kie

r00kie-kr00kie Avertissement Ceci est un exploit PoC pour la vulnérabilité kr00k CVE-2019-15126. Ce projet est destiné uniquement à des fins éducatives et ne peut être utilisé pour enfreindre la loi ou à des fins personnelles. L'auteur de ce projet n'est pas responsable des éventuels dommages...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

domain_analyzer

Domain Analyzer v0.8.3 Qu'est-ce que c'est Domain Analyzer est un outil d'analyse de sécurité qui découvre et rapporte automatiquement des informations sur un domaine donné. Son objectif principal est d'analyser les domaines de manière non supervisée. Il possède de nombreuses fonctionnalités...

CVE-2024-49138-POC

CVE-2024-49138-POC Preuve de concept exploitant CVE-2024-49138 dans CLFS.sys. CrowdStrike a détecté que la vulnérabilité était activement exploitée par des acteurs malveillants. Testé sur Windows 11 23h2. Une analyse approfondie est disponible ici. Voici le hash de ntoskrnl.exe et clfs.sys qui on...

MoveKit

MoveKit - Kit de mouvement latéral pour Cobalt Strike Movekit est une extension du mouvement latéral intégré de Cobalt Strike qui exploite la fonction executeassembly avec les assemblies .NET SharpMove et SharpRDP. Le script aggressor gère la création de charges utiles en lisant les fichiers...

neet

NEET - Network Enumeration and Exploitation Tool Neet is a flexible, multi-threaded tool for network penetration testing. It runs on Linux and co-ordinates the use of numerous other open-source network tools, with the aim of gathering as much network information as possible in clear, easy-to-use...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x8664 32- and...

SpoolSploit

SpoolSploit Une collection d'exploits du spouleur d'impression Windows conteneurisés avec d'autres utilitaires pour une exploitation pratique. Résumé SpoolSploit est une collection d'exploits du spouleur d'impression Windows conteneurisés avec d'autres utilitaires pour une exploitation pratique...

BYOVD

BYOVD is a collection of PoCs demonstrating how vulnerable drivers can be exploited to disable AV/EDR solutions. The collection includes both undocumented drivers and those with existing coverage in LOLDDrivers or Microsoft's recommended driver block rules. Since its initial discovery, the TfSysM...

rpef

Router Post-Exploitation Framework Currently, the framework includes a number of firmware image modules: root@kitploit: 'Verified' - This module is confirmed to work and is stable. 'Unverified' - This module is believed to work or should work with little additional effort, but awaits being tested...

rpef

Фреймворк пост-эксплуатации роутеров В настоящее время фреймворк включает несколько модулей для образов прошивок: root@kitploit: 'Verified' - Этот модуль подтверждён как рабочий и стабильный. 'Unverified' - Считается, что этот модуль работает или должен заработать с небольшими дополнительными...

tabi

Advanced example This example demonstrates how to use the tabi module in order to detect all possible BGP hijacks seen from a BGP collector. Requirements WARNING : Before trying this example make sure you have at least 2GB of free memory on your computer The installation procedure is described in...

CVE-2023-24055_PoC

CVE-2023-24055 PoC KeePass 2.5x 논의 및 분석 중... https://sourceforge.net/p/keepass/discussion/329220/thread/a146e5cf6b/ https://sourceforge.net/p/keepass/feature-requests/2773/ KeePass 설정 파일에 쓰기 권한이 있는 공격자는 해당 파일을 수정하고 악성 트리거를 주입하여, 예를 들어 내보내기 트리거를 추가함으로써 평문 비밀번호를 획득할 수 있습니다...

InfectPE

Using this tool you can inject x-code/shellcode into PE file. InjectPE works only with 32-bit executable files. Why you need InjectPE? You can test your security products. Use in a phishing campaign. Learn how PE injection works. ...and so on. In the project, there is hardcoded x-code of...

0day-Rubbish batch-8-2026-08

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

MalwLess

MalwLess Simulation Tool MST MalwLess is an open source tool that allows you to simulate system compromise or attack behaviours without running processes or PoCs. The tool is designed to test Blue Team detections and SIEM correlation rules. It provides a framework based on rules that anyone can...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

mXtract

mXtract mXtract is an opensource linux based tool that analyzes and dumps memory. It is developed as a pentration testing tool, its primary purpose is to scan memory for private keys, ips, and passwords using regexes. Remember, your results are only as good as your regexes. Screenshots Scan with...