CVE-2026-88879

Traefik (HTTP reverse proxy and load balancer) in v1.x, v2.x through v2.11.55, and v3.0.0 through v3.7.11 canonicalizes header names only on dashes, so X-Auth-User, X_Auth_User, and X.Auth.User are treated as three distinct headers by Traefik. However, backends (CGI, WSGI, PHP, NGINX) collapse th...

CVE-2026-88879 Traefik before v2.11.56 Identity Spoofing via Header Alias

Traefik is an HTTP reverse proxy and load balancer. In Traefik v1.x, v2.x through v2.11.55, and v3.0.0 through v3.7.11, header names are canonicalized only on dashes, so X-Auth-User, XAuthUser and X.Auth.User are treated as three distinct headers by Traefik, while backends that derive variable...

CVE-2026-88879 Traefik before v2.11.56 Identity Spoofing via Header Alias

Traefik is an HTTP reverse proxy and load balancer. In Traefik v1.x, v2.x through v2.11.55, and v3.0.0 through v3.7.11, header names are canonicalized only on dashes, so X-Auth-User, XAuthUser and X.Auth.User are treated as three distinct headers by Traefik, while backends that derive variable...

CVE-2026-88877 Traefik v3.7.0 Authentication Bypass via from-to-www-redirect

Traefik is a HTTP reverse proxy and load balancer. In versions = v3.7.0 and = v3.7.11, the Kubernetes ingress-nginx provider mishandles Ingresses that carry both an authentication annotation and the nginx.ingress.kubernetes.io/from-to-www-redirect annotation. For such Ingresses the provider creat...

unrealircd3.2.8.1-local-exploit

Tested on Metasploitable 3 USAGE Ruby On Attacker's shell root@kitploit: nc -nlvp 1111 On victim's shell root@kitploit: ruby exploit.rb 127.0.0.1 Expected output on attacker's shell root@kitploit: listening on any 1111 ... connect to 192.168.56.102 from UNKNOWN 192.168.56.105 48144 bobafett Pytho...

PHP-REVERSE-SHELL

PHP Reverse Shell Potente y Sigiloso Este es un potente y sigiloso PHP reverse shell diseñado para hacking ético y pruebas de penetración. Establece una conexión confiable y silenciosa de vuelta a tu máquina. ⚠️ Aviso legal Este PHP reverse shell ha sido desarrollado estrictamente con fines...

POC-CVE-2025-55182

POC-CVE-2025-55182 credit : https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478 root@kitploit: usage: CVE-2025-55182-Exp.py -h -u URL -l LIST -c COMMAND -i --revshell LHOST LPORT -t THREADS --proxy PROXY --timeout TIMEOUT -v Usage root@kitploit: Single target exploit python3...

OSEC-2026-20 Cstruct indexing bugs can corrupt filtered output and reverse parsing results

Several functions in cstruct may use wrong data, leading to unexpected exceptions and return corrupted data. Impact - Cstruct.filtermap writes retained bytes at their original input positions, producing corrupted output when earlier bytes are dropped. - Cstruct.tail rev:true removes two bytes...

CVE-2025-62369

CVE-2025-62369 PoC This script exploits CVE-2025-62369 in Xibo CMS to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener root@kitploit: nc -lvnp 2. Run the exploit root@kitploit: python3 exploit.py -u "http://:" -s "" -i -p : Xibo CMS server...

CVE-2015-8522.RCE

CVE-2015-8522 La aplicación Tivoli FastBack Server 6.1.4 es vulnerable a un desbordamiento de búfer basado en pila que permite a los actores de amenazas obtener ejecución de código arbitrario ACE a través de una conexión TCP remota. El PoC proporcionado en este repositorio aprovecha esta...

AIDebug

AIDebug AIDebug is an evidence-focused malware reverse-engineering CLI and terminal UI. It combines deterministic offline triage, whole-file hex inspection, deep PE structure analysis, Capstone disassembly, Ghidra reconstruction, optional LLM cross-checks, local ELF debugging, compiled learning...

wix-kickstartx-challenge-writeup

Wix KickstartX Challenge 2026 — Writeup completo Resultado: 200/200 100% — Token: WKX-9245FA70-200 Fecha: 24 de marzo de 2026 1. Descubrimiento y reconocimiento El anuncio del desafío Una publicación de LinkedIn anunció un desafío especial para Wix KickstartX, un programa para desarrolladores...

C2-and-Post-Exploitation-Framework

Capstone Docker Lab Descripción general y propósito La víctima navega a una página web alojada. El exploit se inicia mediante shellcode incrustado en utils.js se ejecuta en el navegador de la víctima a través de CVE-2021-21220. El shellcode se ejecuta en la máquina de la víctima, llama al servido...

CVE-2024-37054-MLflow-reverse-shell

Tools & Files...

DroneCamera

DroneCamera An Android app for viewing the live video stream from HASAKEE FPV drones. Built by reverse engineering the proprietary UDP protocol used by the drone's WiFi camera. Supported Drone HASAKEE FPV Drone WiFi SSID: HASAKEE-WiFi-XXXXX VGA camera using the 0x6363 UDP protocol Drone IP:...

hack

💀 PwnKit CVE-2021-4034 & Reverse Shell Toolkit ⚠️ DISCLAIMER: Este repositorio ha sido creado únicamente con fines educativos y de investigación de seguridad. El autor no se hace responsable del mal uso de estas herramientas. Úsalo solo en entornos controlados o donde tengas permiso explícito. 📜...

CVE-2014-6287

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server HFS versions 2.3x before 2.3c. Vulnerability Overview CVE-2014-6287 is a critical remote code execution vulnerability in Rejetto HTTP File Server HFS. Technic...

CVE-2016-16113-POC

Get RCE - Bludit CMS Exploit root@kitploit: | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| An automated exploitation tool that combines CVE-2019-17240 Authentication Bypass and CVE-2019-16113 Arbitrary File Upload to achieve remote code...

MobSF_AI

MobSF AI Sidecar Este proyecto añade un asistente de chat impulsado por IA al Mobile Security Framework MobSF. Permite a los analistas de seguridad hacer preguntas sobre el informe de análisis generado por MobSF directamente desde la interfaz, aprovechando el modelo de OpenAI. Características...

OpenEMR-RCE

OpenEMR RCE exploit / PoC OpenEMR --shell --user --password --debug exploit.rb semi-auto --root-url --user --password --payload --lhost --lport --debug exploit.rb auto --root-url --user --password --lhost --lport --debug exploit.rb -H | --help Options: -r , --root-url Root URL base path including...