cuckooautoinstall

关于CuckooAutoinstall Cuckoo Sandbox 自动安装脚本 什么是Cuckoo Sandbox？ Cuckoo Sandbox 是一个恶意软件分析系统。 这意味着什么？ 这意味着你可以将任何可疑文件丢进去，然后获得一份报告，详细说明该文件在隔离环境中的行为。 我们最初在 Buguroo Offensive Security 创建这个脚本，目的是让痛苦的 Cuckoo 安装过程变得更快、更简单、更无痛。 支持的系统 本脚本大部分不依赖发行版（当然你必须在 GNU/Linux 上运行它），但在软件包安装方面，目前仅支持 Debian 衍生版。 另外，由于我们使用专有的...

cuckoo-droid

CuckooDroid - 自动化Android恶意软件分析。 贡献者：Check Point软件技术有限公司 CuckooDroid是Cuckoo Sandbox的扩展，Cuckoo Sandbox是一款开源软件，用于自动化分析可疑文件。CuckooDroid为Cuckoo带来了Android应用程序的执行和分析能力。 安装 - 简易集成脚本： root@kitploit: git config --global user.email "[email protected]" git config --global user.name "Your Name" git clone...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys Paged Pool heap overflow → Local Privilege Escalation LPE. This directory contains lab PoC source code based on MrAle98/CVE-2025-21333-POC, including a local patch. 1. Vulnerability Summary Item| Content ---|--- CVE| CVE-2025-21333...

CVE-2026-53753-Crawl4AI-RCE

CVE-2026-53753 — Crawl4AI Unauthenticated Remote Code Execution AST Sandbox Escape Pre-authentication RCE in Crawl4AI.read — returning the command's output in-band in the JSON response...

CVE-2026-40897

CVE-2026-40897 Remote Code Execution in Math.js Expression Parser ★ CVE-2026-40897 Remote Code Execution in Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Overview CVE-2026-40897 is a Sandbox Bypass leading to Remote Code Execution vulnerability in...

cve-2019-1003000-jenkins-rce-poc

PoC：Jenkins RCE SECURITY-1266 / CVE-2019-1003000 Script Security，CVE-2019-1003001 Pipeline: Groovy，CVE-2019-1003002 Pipeline: Declarative 一个概念验证，允许具有 Overall/Read 权限和 Job/Configure（以及可选的 Job/Build）权限的用户绕过沙箱保护，在 Jenkins 主节点或代理节点上执行任意代码。 更新 : 一篇由 Orange Tsai 撰写的文章，解释了利用 CVE-2018-1000861 和...

WHS3_vulhub

CVE-2017-8386: git-shell Sandbox Bypass to RCE PoC 정수진@suz1n Overview Git-shell provides an environment that only allows restricted git commands via SSH. However, in specific versions of git-shell such as 2.12.2, a vulnerability CVE-2017-8386 exists that exploits the less command to bypass the...

foxcage

foxcage Run Firefox in a rootless Podman container for security isolation. Your browser runs with almost no Linux capabilities, in its own user and network namespace, isolated from the host — while still having full GPU acceleration, audio, and DRM support. Why foxcage? Firefox already has a...

Log4ShellAuditor

🤖 AUTO AUDIT Isolated demonstration testbed of an autonomous reflexive executor agent Go/Java Русский 🇷🇺 • English 🇬🇧 • 中文 🇨🇳 • Español 🇪🇸 • Deutsch 🇩🇪 • Italiano 🇮🇹 • العربية 🇸🇦...

CVE-2024-28397

CVE-2024-28397 js2py Sandbox Escape Exploit - CodePartTwo - HTB A Python exploit code for CVE-2024-28397 , a critical vulnerability in js2py = 0.74 that allows sandbox escape and remote code execution. 🚨 Vulnerability Details CVE ID : CVE-2024-28397 Affected Software : js2py = 0.74 Severity :...

CVE-2026-8037

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

AlmaLinux 9 : webkit2gtk3 (ALSA-2026:69098)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69098 advisory. chromium-browser: Skia in Google Chrome: Sandbox escape via crafted HTML page CVE-2026-19154 chromium-browser: skia: Skia: Sandbox escape via out-of-boun...

RockyLinux 10 : firefox (RLSA-2026:69461)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69461 advisory. firefox: thunderbird: Use-after-free in the SVG component CVE-2026-92024 firefox: thunderbird: Mitigation bypass in the Remote Settings Client componen...

Browser-Pwning-

Browser-Pwning A proper well structured documentation for getting started with chrome pwning & v8 pwning Structure of document How this doc is organised 1. Motivation 2. Actual Study Material Motivation Browsers are one of today’s most used pieces of technology. On every off the shelf computer, i...

kern

kern: a fast, rootless container and resource runtime with no daemon. It sandboxes any workload, including agent tool calls and code generated by an LLM, in real containers enforced by the kernel. A real, kernel-enforced container in a few milliseconds, out of one static binary with no daemon. 0...

livewire-honeypot

Livewire Honeypot A high-interaction honeypot that masquerades as a vulnerable Laravel/Livewire application. It captures exploit attempts targeting known Livewire CVEs, stores uploaded malicious files webshells and remote code execution RCE payloads with SHA-256 deduplication, and optionally...

CVE-2023-30547

CVE-2023-30547 vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException which can be used to esca...

CVE-2019-12735

CVE-2019-12735 An Arbitrary Code Execution vulnerability through modeline in vim/neovim root@kitploit: Product: Vim 8.1.1365, Neovim 0.3.6 Type: Arbitrary Code Execution CVE: CVE-2019-12735 Date: 2019-06-04 Author: Arminius @rawsec Vim versions before 8.1.1365 and Neovim versions before 0.3.6 hav...

CVE-2026-28995

CVE-2026-28995 Proof of Concept for CVE-2026-28995 — Path Traversal vulnerability in App Intents on iOS 26.4.2 and below. Description This vulnerability allows a malicious app to read any file outside its sandbox via App Intents. The root cause is insufficient path validation in Apple's App Inten...

CVE-2025-21333

CVE-2025-21333 you can find the first version of exploit for this CVE at https://github.com/MrAle98/CVE-2025-21333-POC/tree/master . I made this new exploit inspired from the one made by MrAle98. It is more stable and little sketchy as it doesn't open windows sandbox process for getting the GUID....