WiFi-password-stealer

Robador de contraseñas WiFi ¿Alguna vez has visto una película donde un hacker enchufa una unidad USB aparentemente normal a una computadora y al instante roba datos? Hoy construirás un dispositivo que hace exactamente eso. ⚠️ Aviso legal : Todo el contenido de este proyecto está destinado...

BSQLinjector

BSQLinjector BSQLinjector uses blind method to retrieve data from SQL databases. I recommend using "--test" switch to clearly see how configured payload looks like before sending it to an application. Options: root@kitploit: --file Mandatory - File containing valid HTTP request and SQL injection...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 – Baron Samedit Heap-Based Buffer Overflow in sudo | Exploitation & Mitigation Analysis Overview CVE-2021-3156, known as Baron Samedit , is a heap-based buffer overflow vulnerability in the sudo program. It allows any unprivileged local user to gain root privileges on vulnerable...

SwiftyInsta

SwiftyInsta legacy Tenga en cuenta que SwiftyInsta ya no se mantiene activamente. Consulte 244 para más información. Eche un vistazo a Swiftagram si busca alternativas actualizadas. Instagram ofrece dos tipos de API para desarrolladores. La Plataforma de la API de Instagram extremadamente limitad...

AES-Killer

AES Killer Burpsuite Plugin Burpsuite Plugin to decrypt AES Encrypted traffic on the fly Requirements Burpsuite Tested on Burpsuite 2021.4 Windows 10 Ubuntu & PopOS What it does The IProxyListener decrypt requests and encrypt responses, and an IHttpListener than encrypt requests and decrypt...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...

BLUE-SPY

BLUE-SPY - Fast Pair Vulnerability Research Tool SECURITY DISCLAIMER AND LEGAL WARNING ⚠️ THIS SOFTWARE IS FOR AUTHORIZED SECURITY RESEARCH AND ETHICAL TESTING ONLY ⚠️ Unauthorized use of this tool against devices you do not own or have explicit written permission to test is ILLEGAL and may result...

GATOR

KIT DE ATAQUE A GCP PARA INVESTIGACIÓN OFENSIVA GATOR - GCP Attack Toolkit for Offensive Research , una herramienta diseñada para ayudar en la investigación y explotación de entornos de Google Cloud. Ofrece una amplia gama de módulos adaptados para apoyar a los usuarios en diversas etapas de...

cve-2018-8174_analysis

Dissecting modern browser exploit: case study of CVE-2018-8174 Overview When this exploit first emerged in the turn of April and May it spiked my interest, since despite heavy obfuscation, the code structure seemed well organized and the vulnerability exploitation code small enough to make analys...

xerteonlinetoolkits-rce

Xerte Online Toolkits = 3.15 Remote Code Execution Xerte Online Toolkits versions 3.15 and earlier suffer from 3 vulnerabilities in the /editor/elfinder/php/connector.php component, which may be chained together by an unauthenticated attacker to achieve Remote Code Execution RCE. Affected Version...

CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink control href attribute escape vulnerability CVE-2022-44666 0day. Esta es la historia sobre otro 0day olvidado divulgado completamente hace más de 4 años por John Page alias hyp3rlinxR.1. Para entender el informe, debes considerar que soy estúpid...

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 Based on the original exploit from Aaron Herndon, @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ credits to Aaron Herndon / https://twitter.com/ac3lives /...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root Escape PoC An interactive, multi-step Local Privilege Escalation LPE Proof of Concept PoC targeting the Ubuntu Linux kernel OverlayFS vulnerabilities CVE-2023-2640 / CVE-2023-32629. Unlike standard automated one-liners that trap your...

CVE-2026-14266

CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Critical Severity | CVSS: 8.8 High | CWE-122: Heap-based Buffer Overflow Affected: 7-Zip ≤ 26.01 | Patched: 7-Zip 26.02 2026-06-25 Discovered & Analyzed by: Li Yuxuan liyuxuan504-byte and team Executive Summary A heap buffer overflow exists i...

DEBIAN-CVE-2026-82608

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get4bytes of the file src/modules/imsregistrarscscf/cxdxavp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has bee...

CVE-2026-82608

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get4bytes of the file src/modules/imsregistrarscscf/cxdxavp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has bee...

CVE-2026-82607

A vulnerability was found in Cozmoslabs Profile Builder Plugin up to 3.16.1 on WordPress. The impacted element is the function wppbajaxsimpleavatar of the file /wp-admin/admin-ajax.php of the component Avatar Simple Upload AJAX Handler. Performing a manipulation results in unrestricted upload. Th...

CVE-2026-82605

A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...

bof

BOF BOF Boiboite Opener Framework is a testing framework for field protocols implementations and devices. It is a Python 3.6+ library that provides means to send, receive, create, parse and manipulate frames from supported protocols. The library currently provides discovery and extended testing...

CVE-2026-45332-PoC

CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...