CVE-2025-55184_Testing

CVE-2025-55184Testing Script Python per testare CVE-2025-55184 CVE-2025-55184 – Scanner DoS per React Server Components Uno script di validazione della sicurezza sicuro progettato per rilevare CVE-2025-55184 , una vulnerabilità denial-of-service DoS che colpisce React Server Components RSC. Quest...

CVE-2026-32202

Autenticazione forzata zero-click: la visualizzazione di una cartella contenente il .lnk appositamente costruito innesca la risoluzione UNC durante il rendering dell'icona, costringendo la vittima a una connessione in uscita diretta verso l'attaccante che divulga e consente il relay di le sue...

packer-tutorial

Inhaltsverzeichnis 1. Was ist ein Packer? : Eine Einführung in den Zweck von Packern und ein Leitfaden durch die Entwicklungserfordernisse eines Packers. 2. Voraussetzungen : Werkzeuge, die du für dieses Tutorial benötigst. 3. Ein Vorgeschmack : Eine Demonstration dessen, was du mit diesem Tutori...

PPLorer

PPLorer PPLorer è un plugin IDA che risolve le chiamate PPL verso l'effettiva funzione PPL sottostante. Installazione 1. installa ida-netnode in un punto in cui IDA possa importarlo 2. clona il repository e crea un symlink da /.idapro/plugins/pplorer.py a pplorer.py nella copia clonata Utilizzo...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

proxychains

ProxyChains ver. 4.3.0 README ProxyChains è un programma UNIX che aggancia le funzioni libc relative alla rete nei programmi collegati dinamicamente tramite una DLL pre-caricata e reindirizza le connessioni attraverso proxy SOCKS4a/5 o HTTP. ATTENZIONE: questo programma funziona solo su programmi...

D1rkLdr

D1rkLdr Caricatore di shellcode con implementazione di syscall dinamica indiretta, shellcode in formato MAC, risoluzione delle API dal PEB, chiamata di syscall e risoluzione dell'indirizzo dell'istruzione syscall in fase di esecuzione...

UnhookingPatch

UnhookingPatch Bypassa gli hook EDR applicando patch allo stub delle NT API e risolvendo SSN e istruzioni syscall a runtime image Come converto il binario in MAC ? Requisiti: 1. macaddress root@kitploit: pip install macaddress ./bin2mac.py calc.bin...

threat-finder

OffSeq Threat Finder threat-finder findet die verwundbare Software, die tatsächlich auf einem Host läuft – nicht das, was ein Manifest behauptet – und zeigt Ihnen, welche Ergebnisse netzwerkerreichbar sind. Es löst jeden laufenden Dienst und mit --scope all auch jedes installierte...

shellnoob

ShellNoob Writing shellcodes has always been super fun, but some parts are extremely boring and error prone. Focus only on the fun part, and use ShellNoob! For a quick overview, check the slides for the Black Hat Arsenal talk: link Want to contribute? Feature request? Bug report? Swears? All...

CVE-2026-11112-XXE-via-SVG-Image-Upload

CVE-2026-11112 – SVG इमेज अपलोड के माध्यम से XXE प्रोग्राम कोड Python Flask + XML पार्सर root@kitploit: xxeuploadserver.py - Uploads SVG, renders with lxml resolving entities from flask import Flask, request from lxml import etree app = Flaskname @app.route'/upload', methods='POST' def uploadsvg:...

ELFLoader

ELFLoader Este é um carregador/executor de objetos ELF em memória. O objetivo é criar um único carregador de ELF que possa ser usado para executar capacidades subsequentes em todos os sistemas operacionais x8664 e x86 nix. Como funciona A maneira como este carregador funciona é que ele contém tod...

cve-2025-55182-react2shell_reproduction

CVE-2025-55182 — React2Shell CVSS 10.0 CRITICO | Esecuzione remota di codice pre-autenticazione nei React Server Components Scoperta da attori di minaccia cinesi. Attivamente sfruttata da gruppi APT legati alla Cina. Panoramica Soprannominata "React2Shell" , questa vulnerabilità consente...

CVE-2026-0776

CVE-2026-0776 - Elemento de Caminho de Pesquisa Não Controlado no Cliente Discord Resumo Este repositório documenta a CVE-2026-0776, um problema de execução local de código que afeta o cliente desktop do Discord no Windows. A vulnerabilidade está relacionada a um comportamento inseguro de resoluç...

CVE-2026-82327

A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files. When libsolv rewrites a .solv cache file, it reads directory-id values from the file's compressed filelist data without validating that...

Chromium: CVE-2026-78942 Incorrect reference resolution in Loader

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78985 Incorrect reference resolution in FileSystem

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79070 Incorrect reference resolution in Cache

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79264 Incorrect reference resolution in Preload

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79049 Incorrect reference resolution in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...