CVE-2018-10933

概念実証 CTFチャレンジ 著者: Silas Springer CVE-2018-10933 に基づく 背景 CVE-2018-10933 は libSSH の特定のバージョンで発見された脆弱性であり、潜在的に無制限のマシンアクセスを許可する可能性があります。この脆弱性は、認証プロセス中のパケットヘッダの不適切な処理に起因し、MSGUSERAUTHSUCCESS バイトを含む細工されたパケットを送信することで、誰でも認証を回避できるようになります。その後、マシンへの完全なアクセス権を得ます。 このチャレンジの基礎は、競技者に提供された Docker...

remote-control

Control remoto para Laravel Otorga acceso remoto a la cuenta de usuario sin compartir credenciales. Instalación Configuración Usos Enrutamiento Creación de acceso remoto Uso del token de acceso generado Instalación Remote Control puede instalarse mediante composer: root@kitploit: composer require...

holehe

Holehe OSINT - Email to Registered Accounts 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Holehe Online Version Summar...

BlockchainC2

BlockchainC2 BlockchainC2は、攻撃者がC2にブロックチェーン（特にEthereumのスマートコントラクト機能）をどのように利用できるかを評価するための小さなPOCサーバー/エージェントです。 このアプリケーションの詳細はこちらで確認できます。 スマートコントラクト このPOC内で使用されるスマートコントラクトは非常にシンプルです: root@kitploit: pragma solidity ^0.5.0; contract EventC2 address owner; event ServerDatabool f, bool enc, int seq, stri...

awesome-canbus

Awesome CAN Bus 🚜 Awesome Tools, Hardware And Resources For CAN Bus This curated list helps a reverse engineering CAN bus devices with lightly specializing in automotive embedded controller software and communication understanding. Note Items marked as "🔝" are highly recommended. Permanent URL to...

CVE-2026-90795

A vulnerability was determined in itsourcecode Loan Management System 1.0. The impacted element is an unknown function of the file navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicl...

CVE-2026-90794

A vulnerability was found in GPAC up to f1219cde. The affected element is the function gfsgscriptload of the file scenegraph/vrmltools.c of the component MP4Box. Performing a manipulation results in use after free. It is possible to initiate the attack remotely. The exploit has been made public a...

CVE-2026-90793

A vulnerability has been found in GPAC up to f1219cde. Impacted is the function gfnodegetname of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack may be performed from remote. The exploit has been disclosed to the public and may b...

CVE-2026-90792

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

OffensiveLua

Offensive Lua Offensive Lua es una colección completa de scripts de seguridad ofensiva y red team escritos en Lua con FFI Foreign Function Interface. Estos scripts aprovechan el poder y la flexibilidad de LuaJIT en Microsoft Windows para realizar operaciones avanzadas de pruebas de penetración y...

CVE-2023-42793

TeamCity CVE-2023-42793 エクスプロイト このPythonスクリプトは、JetBrains TeamCityのセキュリティ脆弱性（CVE-2023-42793）を悪用し、攻撃者が管理者権限を持つ新しいユーザーを作成することを可能にします。 使用方法 このスクリプトは、単一のTeamCityインスタンスURLまたはURLのリストを入力として受け取ります。指定されたURLは、CVE-2023-42793に対して脆弱なTeamCityサーバーを指している必要があります。 単一URL: root@kitploit: python exploit.py -u...

Red-Teaming-Toolkit

Red Teaming Toolkit This repository contains cutting-edge open-source security tools OST that will help you during adversary simulation and as information intended for threat hunter can make detection and prevention control easier. The list of tools below that could be potentially misused by thre...

CVE-2022-24086-RCE-PoC

CVE-2022-24086 RCE POC 关于 CVE-2022-24086 被 Adobe 视为“在极有限的攻击中被在野利用”，其严重性评分为 9.8/10，攻击者利用它可以在无需认证的情况下在受影响系统上实现远程代码执行。该问题目前被跟踪为 CVE-2022-24087，具有相同的严重性评分，并且在攻击中利用时可导致相同的结果。两者都是“输入验证不当”（Improper Input Validation）漏洞，该公司已发布 Adobe Commerce 和 Magento Open Source 的补丁来解决这两个安全问题。 我们将只关注 2022-24086，因为如果 CMS...

EUVD-2026-77631

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and ma...

CVE-2026-90801 GNU Binutils ld cache.c cache_bwrite buffer overflow

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and ma...

CVE-2026-90801 GNU Binutils ld cache.c cache_bwrite buffer overflow

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and ma...

CVE-2026-90801

A buffer overflow vulnerability was identified in GNU Binutils 2.47 , specifically in the function cache_bwrite within bfd/cache.c of the ld (linker) component. Manipulation of the nbytes argument triggers the overflow. The attack vector is local , requiring low privileges and no user interaction...

pycrypt

pycrypt Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products Note: root@kitploit: If the stub being detected then plz use the following obfuscations:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Important: root@kitploit: 1. Make Sure yo...

pcileech

PCILeech Summary: PCILeech uses PCIe hardware devices to read and write target system memory. This is achieved by using DMA over PCIe. No drivers are needed on the target system. PCILeech also works without hardware together with a wide range of software memory acqusition methods supported by the...

CVE-2026-15964-PoC

CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Escalada de privilegios no autenticada mediante cambio de contraseña no verificado en el plugin de WordPress Single Sign On For TNG. | ---|--- Gravedad| Crítico 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Cambio de contraseña no...