Challenges_2022_Public

blockchain Sfida| Autore| Difficoltà| Round di rilascio ---|---|---|--- Solve Me| @bluealder| principiante| round 1 Crypto Casino| joseph8210| facile| round 2 Secret and Ephemeral| @bluealder| media| round 1 Private Log| @bluealder| difficile| round 1 EVM Vault Mechanism| joseph8210| difficile|...

2018-QWB-CTF

2018-QWB-CTF 2018 Qiangwang Cup CTFRaccolta di sfide root@kitploit: │ ├── 01Misc-4题 │ ├── Nome della challenge: ai-nimals │ │ └── Nome della challenge: ai-nimals.mhtml │ ├── Nome della challenge: welcome │ │ └── Nome della challenge: welcome.mhtml │ ├── Nome della challenge: Check-in │ │ └── Nome...

struts-pwn_CVE-2018-11776

struts-pwn - CVE-2018-11776 Exploit Ein Exploit für Apache Struts CVE-2018-11776 Verwendung Prüfen, ob die Schwachstelle für eine einzelne URL vorliegt. python struts-pwn.py --url 'http://example.com/demo/struts2-showcase/index.action' Prüfen, ob die Schwachstelle für eine Liste von URLs vorliegt...

struts-pwn_CVE-2017-9805

struts-pwn - Exploit CVE-2017-9805 Un exploit per Apache Struts CVE-2017-9805 Utilizzo Verifica se la vulnerabilità esiste su un singolo URL. python struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' Verifica se la vulnerabilità esiste su un elenco di URL. python struts-pwn.p...

CVE-2024-21338-1

CVE-2024-21338 यह PoC XSS PWN-Day प्रतियोगिता के लिए विकसित किया गया था। https://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion/threads/111240/...

elfxtract

ELFXtract ELFXtract è uno strumento di analisi automatizzato utilizzato per enumerare i binari ELF Alimentato da Radare2 e r2ghidra È stato sviluppato appositamente per le sfide PWN e dispone di molte funzionalità automatizzate Mostra quasi tutti i dettagli dell'ELF e decompila il suo ASM in codi...

ctf-skills

ctf-skills Agent Skills per risolvere sfide CTF — exploit web, pwn binario, crittografia, reverse engineering, analisi forense, OSINT e altro ancora. Funziona con qualsiasi strumento che supporti la specifica Agent Skills, incluso Claude Code. Installazionebash npx skills add ljagiello/ctf-skills...

C2-Pwn

C2-Pwn Usa l'API di Shodan per scaricare i server C2 su cui eseguire exploit noti. Richiede un account Shodan per l'API. https://www.shodan.io/ Supporto Exploit per Rat Dark Comet Remote File Download https://www.rapid7.com/db/modules/auxiliary/gather/darkcometfiledownloader Gh0st Rat buffer...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup Questa è una sfida CTF pwn che ho scritto in C e che richiede all'utente di sfruttare la vulnerabilità CVE-2021-4034. Ai giocatori vengono forniti 2 binari nella directory challenge di questo repository. Il binario chal implementa la sfida CTF e shelly.so è un binario di...

chall2026-telneted

@Hack 2026: Telneted Autore: Harsh. Categoria : Pwn Risoluzioni : 34/120 Tag : beginner Protocollo : telnet Il team di ricognizione ha trovato un altro endpoint nella rete degli Alieni, ma non riusciamo a connetterci con i nostri strumenti. Le catture di rete mostrano un utente 'astrax' che lo...

GlacierCTF2023_writeups

Glacierctf 2023 Descrição Data do CTF: 24.11.2023 - 26.11.2023 Duração: 48 horas CTF Time: https://ctftime.org/event/1992 O GlacierCTF 2023 foi a segunda edição do CTF no estilo jeopardy organizado pelos LosFuzzys. O CTF contou com desafios em diversas categorias, incluindo pwn, rev, web, crypto,...

EUVD-2026-54565

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...

PT-2026-65944

Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...

rspwner

RSPWNER RSPWNER is a Rust-based AI-assisted CTF pwn assistant...

CVE-2026-41249

CoreShop is a Pimcore enhanced eCommerce solution. In versions 5.0.1 through 5.1.0-beta.1,, the GitHub Actions workflow .github/workflows/static.yml uses the pullrequesttarget trigger but dangerously checks out the unverified code from the pull request head ref: $ github.event.pullrequest.head.re...

CVE-2026-45315

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the audio transcription upload endpoint takes the file extension from the user-supplied filename and saves the file under CACHEDIR/audio/transcriptions/.. The /cache/path route serve...

Fedora 42 : kernel (2026-8b4a8d18d2)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8b4a8d18d2 advisory. The 6.19.14-104 kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia. --...

Fedora 43 : kernel (2026-03be3dc34b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-03be3dc34b advisory. The 7.0.8 stable kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia...

Fedora 44 : kernel (2026-2aeb7d033a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2aeb7d033a advisory. The 7.0.8 stable kernel update contains a fix for the keysign-pwn vulnerability CVE-2026-46333 as well as a mitigation for one more code path of fragnesia...

PT-2026-40973

Name of the Vulnerable Software and Affected Versions CoreShop versions 5.0.1 through 5.1.0-beta.1 Description The GitHub Actions workflow located at .github/workflows/static.yml uses the pull request target trigger and checks out unverified code from the pull request head using the variable ref:...