copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail（CVE-2026-31431）のPoCとペイロードの例です。 Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions 影響を受けるLinuxディストリビューション Distro| Kernel Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1| 6.12.0-124.45.1.el1...

RemoteKeyStrokes

RemoteKeyStrokes A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something that helps...

CVE-2023-27524-Apache-Superset-Auth-Bypass-and-RCE

CVE-2023-27524: Apache Superset 認証バイパスとRCE Apache Supersetは、データの可視化と探索に広く使われているオープンソースツールですが、認証バイパスやリモートコード実行（RCE）につながる可能性のあるセキュリティ上の脆弱性が確認されています。これらの脆弱性により、悪意のある攻撃者が標的のサーバー上で管理者権限を取得し、ユーザー認証情報を収集し、データを侵害する可能性があります。 問題となっている具体的なセキュリティ問題は、CVE-2023-27524として参照される安全でないデフォルト設定の脆弱性です。...

pwnbin

PwnBin What is PwnBin PwnBin is a webcrawler which searches public pastebins for specified keywords. All pastes are then returned after sending completion signal ctrl+c. How to use PwnBin Basic command: root@kitploit: python3 pwnbin.py -k ,"example substring",..... -o Both the keyword and...

insightsnexus

Insight Nexus - OSINT Investigation Graph Analysis Tool This local web application allows users to manipulate and connect nodes on their screen to streamline OSINT investigations and information gathering. Demo Become an Alpha Tester Sign Up Here: https://insightsnexus.org/ Features Core Graph...

vuke

vuke 취약한 비트코인 키 생성을 분석하고 재현하기 위한 연구 도구입니다. 기능 모듈식 아키텍처 - 플러그 가능한 소스와 변환 다중 입력 소스 숫자 범위 취약한 시드 테스트 워드리스트 브레인월렛 분석 타임스탬프 시간 기반 PRNG 악용 Stdin 스트리밍 파이프라인 통합 역사적 취약점 변환 직접 원시 바이트를 키로 SHA256 클래식 브레인월렛 이중 SHA256 비트코인 스타일 해싱 MD5 레거시 취약 해싱 SHA256 체인 반복/인덱스 기반 결정론적 파생 Milksad MT19937 PRNG - CVE-2023-39910...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

vhostawesome

FunWithVhosts A tool designed to efficiently check for virtual hosts across multiple IP addresses. Description FunWithVhosts automates the process of identifying virtual hosts on given IP addresses. The script checks for open ports, specifically web server ports, and then tries to retrieve conten...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 décrit une vulnérabilité d'injection de commandes système OS Command Injection dans le logiciel My Computer du système d'exploitation Pardus. Cette vulnérabilité permet à un utilisateur d'injecter des commandes système via le paramètre de nom de fichier, permettant...

CVE-2026-6111

CVE-2026-6111 脆弱性スキャナー これは、CVE-2026-6111 の脆弱性がないかウェブサイトをスキャンするためのシンプルな Python スクリプトです。ターゲット URL に改変したリクエストを送信し、レスポンス内に脆弱性が存在するかどうかをチェックします。 環境要件 Python 3 requests ライブラリ tqdm ライブラリ 必要なライブラリは pip を使用してインストールできます： pip install requests tqdm 使用方法 以下のコマンドでスクリプトを実行できます： python CVE-2026-6111.py -u -p...

apache__mina-sshd_CVE-2023-35887_2-9-2

Apache MINA SSHD Apache MINA SSHD는 클라이언트 및 서버 측에서 SSH 프로토콜을 지원하는 100% 순수 자바 라이브러리입니다. Unix 운영 체제의 SSH 클라이언트 또는 SSH 서버를 대체하는 것을 목표로 하지 않으며, SSH 지원이 필요한 Java 기반 애플리케이션을 위한 지원을 제공합니다. 이 라이브러리는 여러 I/O 백엔드를 활용할 수 있습니다: 기본 전송은 내장되어 있으며 Java의 AsynchronousSocketChannels를 사용합니다. 확장 가능하고 고성능의 비동기 I/O 라이브러리...

ps.sh

ps.sh ps.sh is a bash script that automates port scanning on specified target hosts. The aim of the scripts is reducing scan time, increasing scan efficiency and automating the workflow. Resource Features Installation Usage Contributing Licensing Credits Contributors Dependencies Features Automat...

linux-4.1.15_CVE-2022-45934

Linux内核发布4.x http://kernel.org/ 这些是Linux 4.x版本的发布说明。请仔细阅读，它们说明了这是什么，如何安装内核，以及出现问题时的处理方法。 什么是LINUX？ Linux是Unix操作系统的一个克隆，由Linus Torvalds从头编写，在网络上松散的黑客团队协助下完成。它旨在符合POSIX和单一UNIX规范。 它拥有你在现代化完整Unix中所期望的所有功能，包括真正的多任务、虚拟内存、共享库、按需加载、共享写时复制可执行文件、恰当的内存管理，以及包括IPv4和IPv6的多栈网络。...

HashCheck

PasswordHashCheck This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the fir...

defenselessV1

defenselessV1 Defenseless is a vulnerable web application written in PHP/MySQL. This is the first version of this application. The purpose of this application is to create security awareness among developers and new guys in application security. It would soon be updated with with more bugs and a...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick 任意ファイル読み取り - 概念実証エクスプロイト ビデオ 📼 https://youtu.be/quKxwNAMBIA 使い方 🛠 画像をポイズンする ☣️ root@kitploit: python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png root@kitploit: Upload poisoned PNG image...

instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

instarecon

InstaRecon 自动化的基础数字侦察。适合获取目标的初始足迹并发现额外的子域名。InstaRecon 将执行： DNS 查询（A、PTR、MX、NS） 对所有发现的主机进行递归 DNS 查询 Whois（域名和 IP）查询 使用 Google dorks 搜索子域名和 URL Shodan 查询 对整个 CIDR 进行反向 DNS 查询（仅当目标为网络时） 所有结果将整齐地打印在控制台或 csv 文件中。 InstaRecon 永远不会直接扫描目标。信息从 DNS/Whois 服务器、Google 和 Shodan 获取。 安装 安装只需执行：bash pip install -r...

TABPE

TABPE What is TABPE? TABPE a combination of TABriz + PE - Tabriz is my hometown, and I named this project after my love for my city is an open, structured dataset containing information about all PE files Windows executables including .exe, .dll, .sys, etc., on clean, fully updated versions of...

apiscope

ApiScope ApiScope is a Windows x64 research tool for tracing selected API calls in a new or running process. It follows DLL load events through the Windows debugger API and installs hooks before the debuggee continues from each event. Included hooks: ntdll.dll!NtCreateFile records the target path...