CPanel-Audit-Remediation-Tool

🛡️ Oscar Constanzo Audit & Patch Tool CVE-2026-41940 Professional Security Auditing & Incident Response Suite for cPanel Infrastructure. 📖 Description This tool was developed by Oscar Constanzo Quezada, AKA Underhost to identify and remediate the CVE-2026-41940 vulnerability in cPanel servers. The...

CVE-2026-41940-POC

CVE-2026-41940 – cPanel/WHM Authentication Bypass PoC This repository contains a proof-of-concept PoC exploit for CVE-2026-41940, demonstrating a multi-step authentication bypass in cPanel/WHM via CRLF injection and session poisoning. Disclaimer: This code is for educational and authorized securi...

CVE-2021-4034

Study Project CVE-2021-4034 PwnKit This repository contains the materials, code examples, and documentation for the study project within the elective module Applied IT Security about the security vulnerability CVE-2021-4034 , also known as PwnKit. Summary This study project within the elective...

CVE-2017-15944-POC

CVE-2017-15944-POC POC For CVE-2017-15944 Palo Alto Networks firewalls remote root code execution Usage root@kitploit: python panos-poc.py https://panip...

cve-2021-4034

CVE-2021-4034 this tool use for pkexec single command execute POC whoami root@kitploit: test@localhost cc$ ./a.out /usr/bin/whoami execute success : root ping 8.8.8.8 root@kitploit: test@localhost cc$ ./a.out /usr/bin/ping 8.8.8.8 execute success : PING 8.8.8.8 8.8.8.8 5684 bytes of data. 64 byte...

Audit-BlackBox-Web-to-Root

Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...

SideWinder-Exploit

🛡️ CVE-2021-3560 Privilege Escalation Exercise 📚 Overview This repository contains materials for a hands-on cybersecurity exercise centered on CVE-2021-3560 , a privilege escalation vulnerability in polkit. Discovered by GitHub Security Lab in 2021, this flaw allowed unprivileged Linux users to...

CVE-2019-2215

CVE-2019-2215 Copy and pasted from: https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ https://github.com/grant-h/qu1ckr00t/blob/master/native/poc.c...

Blackash-CVE-2025-20393

🛡️ CVE-2025-20393 – Critical Cisco AsyncOS Vulnerability 🔍 Overview CVE‑2025‑20393 is a critical remote code execution RCE vulnerability in Cisco AsyncOS Software , affecting: Cisco Secure Email Gateway physical & virtual Cisco Secure Email and Web Manager physical & virtual ⚠️ Only systems with...

Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability

Cisco Secure Firewall Management Center FMC Software and Cisco Security Cloud Control SCC Firewall Management contain an authentication Bypass using an alternate path or channel vulnerability that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on...

CVE-2019-5736-Dockerattack-and-security-mechanism

CVE-2019-5736-attack-and-security-mechanism In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it. Introduction Cyber-attacks have become a critical challenge for both companies and small businesses, largely due to vulnerabilitie...

CVE-2026-53581 ntp: write path traversal

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...

jailbreak-iOS12

Jailbreak for iOS 12 iOS 12.0 & 12.1.2 Jailbreak with CVE-2019-6225 An incomplete iOS 12 Jailbreak. For now it only runs the exploit, gets tfp0, gets ROOT, escapes the SandBox, writes a test file to prove the sandbox was escaped then resprings. Feel free to build on top of it as long as you respe...

CVE-2026-24061-Telnetd

CVE-2026-24061 GNU Inetutils Telnetd Authentication Bypass CVE: CVE-2026-24061 Severity: Critical CVSS: 9.8 Critical CWE: CWE-88 — Improper Neutralization of Argument Delimiters in a Command Affected Component: GNU Inetutils telnetd Affected Versions: 1.9.3 through 2.7 Overview CVE-2026-24061 is ...

CVE-2021-4034

CVE-2021-4034 root@kitploit: $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...

CVE-2024-37081

CVE-2024-37081: Multiple Local Privilege Escalation in VMware vCenter Server The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileg...

initroot

Exploiting CVE-2016-10277 More information at: https://alephsecurity.com/2017/06/07/initroot-moto/ If you just want to check if your device is vulnerable, it might be quicker if you just flash stock ramdisk without any modifications. If it's your case, just look for initroot--STOCK.cpio.gz...

CVE-2025-49173

CVE-2025-49173 — macOS 10.9 Local Root Privilege Escalation Research Status: Unofficial / Research-Based Platform: macOS Mavericks 10.9 Impact: Local Privilege Escalation → Root Severity: High Local This repository contains a proof-of-concept PoC security research project focused on a local root...

network-security-lab

🔬 Network Security Lab A controlled virtual environment simulating real-world attack and defense scenarios 📋 Overview This lab simulates a real-world penetration test and defensive hardening exercise in a fully isolated virtual environment. It demonstrates the full offensive security lifecycle —...