CVE-2026-14382

CVE-2026-14382 Bin trigger Bug fix root@kitploit: $250000492218546 High CVE-2026-14382: Insufficient validation of untrusted input in ANGLE. Reported by anonymous on 2026-03-13 The root cause of this vulnerability appears to be similar to that of CVE-2025-6558. Based on my current analysis, I...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

nCPU

A complete computer in which every layer — arithmetic, OS, compiler, display — is either a trained neural network or runs entirely on GPU. The model doesn't run on the computer. The model is the computer. nCPU is one repository pursuing one thesis from five directions: a computer can be built out...

angr

angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

cve-2022-44268-detector

cve-2022-44268-detector - detect malicious PNGs cve-2022-44268-detector is a Go program that consumes PNGs and reports whether they appear to be malicious images generated by an exploit for CVE-2022-44268, an ImageMagick vulnerability that allows attackers to read arbitrary file contents using...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server auditing. Features SSH1 and SSH2 protocol server support; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

CVE-2019-9193byVulHub

CVE-2019-9193byVulHub PostgreSQL Arbitrary Command Execution with Admin Privileges CVE-2019-9193 Description PostgreSQL is a powerful open-source relational database management system. A vulnerability present in versions 9.3 through 11 allows administrators or users with COPY TO/FROM PROGRAM...

diaphora

δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...

diaphora

δiaphora インストール Hex-Raysプラグインマネージャーでインストールします： root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip 手動インストールの手順は以下のとおりです。 Diaphora（διαφορά、ギリシャ語で「差分」の意）バージョン3.4は、現在（2026年）利用可能な中で最も先進的なプログラム差分解析ツール（IDAプラグインとして動作）です。SyScan...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Supports both x32 and x64. Tested on: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64. Usage root@kitploit: CVE-2018-8120 exploit by @unamerhttps://github.com/unamer Usage: exp.exe command Example:...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC Critical – CVSS 9.9 – Authenticated Remote Code Execution in PMM 3.7. Description This proof‑of‑concept exploits a vulnerability where an internal PostgreSQL user in PMM retains 'SUPERUSER' privileges. An authenticated attacker with 'pmm-admin' rights can abus...

USP

USP 功能 该 Go 程序通过在 Linux 系统上创建一条 udev 规则来建立持久化，该规则会触发指定载荷（二进制文件或脚本）的执行。它提供两种触发选项： USB 持久化： 每当插入 USB 设备时执行载荷。 启动持久化： 利用 /dev/random 设备在系统启动时执行载荷。 此外，它还提供了一个清理选项以移除已建立的持久化。 用法 1. 编译 Go 脚本： go build -o usp 2. 使用 root 权限运行脚本（sudo）： sudo ./usp 可以使用以下标志自定义行为： -f : 指定载荷写入的路径（默认：/usr/local/bin/persistence...

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST An OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 ...

CVE-2017-1000117

CVE-2017-1000117 Project Introduction One of the selected topics for the cybersecurity course project Reproduction of CVE-2017-1000117 vulnerability PoC + Exploit Git + SSH Vulnerability Introduction: Vulnerability Name: Git command injection vulnerability CNNVD ID: CNNVD-201708-670 Hazard Level:...

frinet

Frinet 通过将 Frida 与增强版 Tenet 相结合，Frinet 有助于大型程序研究、漏洞研究以及 iOS、Android、Linux、Windows 和大多数架构上的根因分析。Synacktiv 网站上的博客文章 此版本是对 synacktiv/frinet 的完全重写（最初是 gaasedelen/tenet 的一个分支）。 你仍然可以在 legacy 分支 上找到旧版本。 该项目已在 SSTIC 2026（法语）上展示：视频/幻灯片/论文。 新架构基于四个组件： Indexer：一个 Rust CLI，用于从跟踪文件中生成优化索引。 Backend：一个 Rust...

n00bRAT

n00bRAT v0.7 这是一个小型C程序，模拟最精简的HTTP服务器，用于指纹识别安全扫描器。它允许用户通过这个伪造的HTTPv0.1协议控制机器。 这个n00b服务器是在大学的《道德黑客》课程中作为RAT（远程访问木马）创建的。 它是什么/为什么存在/等等。 使用任何PDF阅读器阅读 n00bRAT报告 以获取信息 如何安装 方法1： a. 打开命令终端 b. 切换到n00bRAT目录 c. 执行以下命令：gcc -o http ABKn00bRAT.c 方法2： a. 打开命令终端 b. 切换到n00bRAT目录 c. 执行以下命令：make 如何使用 方法1： a...

oss-bounty-program

ProjectDiscovery 开源赏金计划 宗旨 ProjectDiscovery 开源赏金计划旨在通过奖励来自全球社区的有意义贡献，实现安全民主化。 我们的工具被世界各地的研究人员、防御者和开发者广泛使用。该计划确保任何人在任何地方都能为改进 ProjectDiscovery 项目做出贡献，并因其工作获得公正的认可或奖励。 我们的目标是： 降低参与安全研究和开发的门槛 激励高影响力的开源贡献 营造一个透明、公平且协作的社区 为每个人改善安全生态系统 范围 范围内项目 该计划适用于 ProjectDiscovery 官方开源仓库，包括但不限于： Nuclei Katana...

MATE

MATE MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code. MATE unifies application-specific and low-level vulnerability analysis using code property graphs CPGs, enabling the discovery of highly application-specific vulnerabilities that...