cve-2023-41993-test

オリジナル poc から po6ix ポストエクスプロイテーション 私は nikiasbの と Linus Henzeの regexp exploits, 5aeloの Phrack論文/Pwn2Own 2018 exploit chain, LiveOverflowブログ/youtubeシリーズ から コピーした...

cve-2019-13720

cve-2019-13720 CVE-2019-13720 Exploit 도구 2019년 11월 5일: POC 공개: https://www.youtube.com/watch?v=0HdRJImwYww 2019년 11월 6일: 도구 공개. [email protected]...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDATM icros oft SQL D atabase A ttacking T ool은 원격으로 Microsoft SQL 데이터베이스의 보안을 테스트하는 오픈 소스 침투 테스트 도구입니다. MSDAT 사용 예시: 원격으로 Microsoft 데이터베이스가 수신 대기 중이며, 데이터베이스에 연결하기 위한 유효한 자격 증명을 찾고 싶을 때 유효한 Microsoft SQL 계정이 있으며, 권한을 상승시키고 싶을...

iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC

Siri Shortcuts と Shared Web Credentials における不適切な入力検証 発見者: Joseph Goydish II 発見日: 2025年8月20日 深刻度: 高 概要 このレポートは、AppleのSiri ShortcutsおよびShared Web...

zettelforge

ZettelForge 사이버 위협 인텔리전스를 위해 구축된 유일한 에이전틱 메모리 시스템입니다. 시니어 분석가가 떠나면 23년치의 컨텍스트도 함께 사라집니다. 고객 환경, 이전 조사, 위협 행위자 TTP, 오탐 패턴, '아, 이거 전에 봤어' 같은 힘들게 얻은 모든 정보가요. ZettelForge는 이러한 컨텍스트가 팀에 남도록 설계된 에이전틱 메모리 시스템입니다. 분석가 노트와 위협 보고서에서 CVE, 위협 행위자, IOC, ATT&CK 기술을 추출하고, 별칭을 해결하며APT28 = Fancy Bear = STRONTIUM ...

postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation

A heap buffer overflow flaw was found in the PostgreSQL tochartimestamptz function. An attacker can exploit this by supplying an overly long POSIX timezone abbreviation to execute arbitrary code as the database's operating system user, potentially resulting in complete system compromise...

postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions

A flaw was found in PostgreSQL. An unprivileged database user can exploit an integer wraparound vulnerability in the tsvector and tsquery data type functions. By providing crafted large inputs, the server can be forced to undersize an allocation, leading to an out-of-bounds write. This could...

postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation

A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...

postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound

A flaw was found in PostgreSQL fuzzystrmatch. A low-privileged database user can exploit an integer wraparound vulnerability by providing extreme inputs to the levenshtein or levenshteinlessequal SQL functions. This allows the user to execute arbitrary code as the operating system user running th...

bitlocker-attacks

BitLocker 攻撃 BitLocker に対する公開攻撃の一覧です。BitLocker を攻撃する 可能性 はあるものの、正確な手法がまだ公開されていない公開攻撃（baton drop など）は対象外です。 ほとんどの攻撃は、VMK が TPM のみによってシールされる設定（デフォルト設定）を対象としています。これは、自動 BitLocker が回復キーの Microsoft アカウントへのエスクローと併せて使用する設定です。 既定では、Windows 8 以降、Secure Boot が有効な場合に Secure Boot 整合性検証が使用されます。 VMK を TPM...

CVE-2021-44228

Log4Shell POC CVE-2021-44228 このリポジトリの目的は、CVE-2021-44228（通称 Log4Shell）を悪用するために必要なすべてのコンポーネントを提供し、 その悪用方法を示すことです。 この脆弱性を悪用するために必要な要素は次のとおりです。 1. 脆弱なアプリケーションをエクスプロイトへリダイレクトする LDAPサーバー 。 2. 脆弱なバージョンの Log4J を使用する 脆弱なアプリケーション CVE-2021-44228 に対して脆弱な Spring Boot Web アプリケーション。 3. 脆弱なアプリケーションによってロードされる Jav...

wazuh

Wazuh Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh solution consists of an endpoint security agent, deployed to the monitored...

CVE-2026-31431-EXPLOIT

CVE-2026-31431 - Copy Fail Esta vulnerabilidad permite a un atacante local sin privilegios obtener privilegios de root en un sistema Linux vulnerable. ⚠️ AVISO LEGAL Este código se proporciona únicamente con fines educativos y de investigación en seguridad. Demuestra una vulnerabilidad hipotética...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE 익스플로잇 테스트 지원: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32,Win2003 x64 원래 exp는 XP, 2003을 지원하지 않았으며, 현재 코드는 원본을 기반으로 이 두 시스템에 대한 지원을 추가했습니다. Usage root@kitploit: CVE-2018-8120 explo...

CVE-2024-49369

CVE-2024-49369 개요 이 취약점은 Icinga JSON-RPC 프로토콜을 이용하여 Icinga 에이전트를 실행 중인 모니터링 노드를 공격합니다. Master/Satellite 인스턴스를 사칭함으로써 공격자는 에이전트를 장악하고, 임의 명령을 실행하거나, 민감한 정보를 획득할 수 있습니다. 사용 방법 스캔 취약한 에이전트를 서브넷에서 스캔하려면 다음 명령을 실행하세요: root@kitploit: python3 main.py scan --subnet 192.168.0.0/24 --vuln --batch 25 이 명령은...

dirtycow-lab

dirtycow-lab Ubuntu 16.04.1 における Dirty COW CVE-2016-5195 脆弱性の悪用。 cat README.md :/。 4. 実行と権限昇格 : chmod +x /dirty && /dirty → su root パスワード dirtyCowFun。 5. フラグ : cat /root/flag.txt → 4GEEKSY0uG0tR00t。 ✅ 結果 root@kitploit: root@ubuntu:/home/student whoami root root@ubuntu:/home/student id uid=0root...

xzk8s

xzk8s Dockerfile和Kubernetes清单，用于复现CVE-2024-3094 构建镜像 我们使用易受攻击的xz utils的Debian版本作为基础镜像。我们还需要修补库。补丁版liblzma库取自xzbot仓库。 root@kitploit: FROM debian:experimental-20240311@sha256:16cc2b09c44d991d36f63153f13a7c98fb7da6bd2ba9d7cc0f48baacb7484970 use debian with a vulnerable version of xz utils as the bas...