3803 matches found
EUVD-2026-77073
A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site scripting. The...
CVE-2026-90583
A cross-site scripting (XSS) flaw exists in kagisearch smallweb (up to commit 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf) in the index function of app/sw.py within the Query String Rendering component. Manipulating the qs argument injects untrusted content into the rendered page. Exploitation requi...
SliverKeylogger
Sliver Keylogger This extension to sliver was written mostly as a learning exercise into how sliver handles extensions. I would like to thank the entire Sliver team for there work on this public implant framework. I would especially like to thank @rkervell for answering many of my questions relat...
CVE-2025-30208
CVE-2025-30208 Using a special raw import query string on a vite dev server, a attacker can read arbitrary files Summary of the CVE Vite dev servers before 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10 can bypass the server.fs.deny file access checks for @fs requests. Appending ?raw?? or ?import&raw??...
tcpcopy
TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...
CVE-2025-53770_Raw-HTTP-Request-Generator
Este repositorio no tiene un README...
CVE-2022-42094
Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Card content. Attack Vectors: The attacker must post something on the "Card content" and insert the XSS payload at the "Body" input,...
CVE-2022-42097
Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Comment . Attack Vectors: The attacker must post something on the "comment" and insert the XSS payload at the "comment" input, and...
CVE-2021-40906
CVE-2021-40906 - Reflected XSS in an unauthenticated zone Application: CheckMK Management Web Console Software Revision: From 1.5.0 to 1.5.0p25 Author: Edgar Augusto Loyola Torres. Attack type: Reflected XSS Solution: Update to Software Revision 1.6.0p26 or later Summary: CheckMK Raw Edition...
CVE-2014-9322
CVE-2014-9322 PoC para el kernel de Linux CVE-2014-9322 tambiΓ©n conocido como BadIRET prueba de concepto para el kernel de Linux. Este PoC utiliza solo syscalls, no librerΓas, como pthread. Los hilos se implementan usando syscalls de Linux en bruto. Hilos de Linux en bruto mediante llamadas al...
Packet-Sniffer
RootWire A network traffic monitor for GNU/Linux β formerly known as Packet-Sniffer. Frames are captured from one or more network interfaces with a raw socket, timestamped by the kernel itself, decoded layer by layer with the NETProtocols library, and rendered live, written to nanosecond-precisio...
plasma
PLASMA El nombre anterior del proyecto era Reverse. PLASMA es un desensamblador interactivo. Puede generar un ensamblado mΓ‘s legible cΓ³digo seudo con sintaxis coloreada. Puede escribir scripts con la API disponible de Python vea un ejemplo mΓ‘s abajo. El proyecto aΓΊn estΓ‘ en gran desarrollo. wiki ...
trackerjacker
trackerjacker Como nmap para mapear redes wifi a las que no estΓ‘s conectado. Mapea y rastrea redes wifi y dispositivos mediante monitorizaciΓ³n raw 802.11. PΓ‘gina PyPI: https://pypi.python.org/pypi/trackerjacker Instalar root@kitploit: pip3 install trackerjacker Plataformas compatibles : Linux...
ffs
FFS - F File System This is a cli tool for searching files like grep that does not use the OS kernel to read files, but reads your disks directly. It is practically useless, but insanely cool. this is just 1.5k lines of C code that: requires sudo only when reading a raw device node e.g. /dev/rdis...
CVE-2022-42096
Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Post content. Attack Vectors: The attacker must post something on the "Post content" and insert the XSS payload at the "Body" input,...
ksubdomain
KSubdomain: Ultra-Fast Stateless Subdomain Enumeration Tool δΈζζζ‘£ | English KSubdomain is a stateless subdomain enumeration tool delivering unprecedented scanning speed with extremely low memory consumption. By directly operating network adapters via raw sockets β bypassing the OS kernel stack β...
RawHive
RawHive RawHive is a Cobalt Strike BOF for pulling selected Windows registry hives directly from a raw NTFS volume. It skips the normal file APIs, walks NTFS metadata to find the target file records, and copies the bytes straight from disk. It currently looks for: C:\Windows\System32\config\SAM...
CVE-2021-35042
CVE-2021-35042 Django SQL injection bug Question: explore how exploitable is it? Answer: I'm terrified Install poetry install poetry run ./manage.py migrate poetry run ./manage.py loaddata dummydata.json Interactive Demo poetry run ./manage.py runserver Ordering by random fields go to...
react2shell-CVE-2025-55182
React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. π Quick Start root@kitploit: Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3...
PiX-C2
PiX-C2 ICMP C2 server application written by NoCow email: [email protected] The ICMP C2 project ie PiX-C2 is a client/server application that allows for command and control using only ICMP. The server will sniff ICMP packets and pull information from the data payload of the ICMP packet. If t...