ntfstool

ntfstool NTFSTool は、NTFS ボリュームに特化したフォレンジックツールです。 パーティション情報（MBR、パーティションテーブル、VBR）の読み取りに加え、マスターファイルテーブル、BitLocker 暗号化ボリューム、EFS 暗号化ファイル、USN ジャーナルなどの情報も取得できます。 最新のバイナリは AppVeyor から、または GitHub の最新 アーティファクト を確認してダウンロードしてください。 機能の例については、以下の 例 を参照してください！ deepwiki...

mimic

mimic mimic is a tool for covert execution on Linux x8664. What is "covert execution"? Covert execution is the art of hiding a process. In this case, mimic hides the process in plain sight. mimic can launch any program and make it look like any other program. Any user can use it. It does not...

CVE-2025-48708

CVE-2025-48708 Description A vulnerability in Artifex Ghostscript before version 10.05.1 causes the plaintext password used to protect a PDF file to be embedded in the output. The issue is due to a lack of argument sanitization in gslibctxstashsanitizedarg base/gslibctx.c, particularly when...

CVE-2019-1003000_RCE-DETECTION

CVE-2019-1003000RCE-DETECTION General Summary Chaining vulnerability CVE-2018-1000861 with CVE-2019-1003000, I created a module to test for a Pre-Auth RCE on Jenkins CI. Initially, I had tried to go about detecting the vulnerability with a username and password and job name; however, I thought it...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Desbordamiento de búfer de pila en el analizador de certificados TLS embebido Resumen Una popular librería TLS ligera simulada contiene un desbordamiento de búfer de pila al analizar extensiones de Subject Alternative Name de certificados X.509 con un campo de longitud...

CVE-2022-24999

CVE-2022-24999 This repository contain exploits samples of the vulnerability we found in the JS library "qs" in december 2021. This vulnerability was fixed in express v4.17.3 & qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, and v6.2.4. qs Array & String Bombs Vulnerable versio...

CVE-2023-25157

CVE-2023-25157 This is a simple Python Script to Find the Latest GeoServer SQL Injection Vulnerability. You can use the Scripts on hosts to check for infected path. Installation: 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x geoserver.sh Note: You...

cve-2020-0601

Zeek test script for CVE-2020-0601 Este script puede detectar intentos de explotación de CVE-2020-0601. Realiza una comprobación simple para ver si se utiliza una curva conocida en un certificado; si no es el caso, se genera una notificación. Ejemplo de notificación en notice.log: root@kitploit:...

mypocs

Statement This repo was incomplete when published. In regar...

omigood

omigood ¿OM I GOOD? Este repositorio contiene un escáner gratuito para detectar máquinas virtuales vulnerables a una de las vulnerabilidades "OMIGOD" descubiertas por el equipo de investigación de amenazas de Wiz, concretamente CVE-2021-38647. Artículo original del blog de Wiz:...

solr_exploit

声明 此处提供的漏洞检测方法、文件等内容，均仅限于安全从业者在获得法律授权的情况下使用，目的是检测已授权的服务器的安全性。安全从业者务必遵守法律规定，禁止在没有得到授权的情况下做任何漏洞检测。 简介 漏洞分析 - Apache Solr远程代码执行漏洞CVE-2019-0193 - 先知社区 理论上可以使用各种不同类型的数据源来构造Exploit Exploit1使用数据源的类型为URLDataSource Exploit2使用的数据源类型为 ContentStreamDataSource 检测漏洞 - Exploit1 Exploit1使用数据源的类型为URLDataSource...

CVE-2026-41089-LongLogon

LongLogon · CVE-2026-41089 LongLogon is an unauthenticated, non-destructive precondition checker for CVE-2026-41089 , a pre-auth stack buffer overflow in the Windows Netlogon service. With no credentials, and without sending the overflow, it reports whether a domain controller's DNS domain name i...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 RCE Autenticado a Través de Carga de Archivo de Configuración Malicioso CVE-2018-19537 Descripción Existe una vulnerabilidad de ejecución remota de código RCE autenticada en todas las versiones de firmware publicadas para el router TP-Link Archer C5. Al cargar un archivo de...

evil_minio

Evil MinIO CVE-2023-28434 Doc: CVE-2023-28432 minio 接口未授权访问到无损RCE和全局后门.pdf EXP for CVE-2023-28434 MinIO unauthorized to RCE Changed from https://github.com/minio/minio/tree/8b4d0255b7247b1a06d923e69ed5ba01434e70b8 Changed what? add cmd/x.go, used for exec system command root@kitploit: package cmd...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumping Cisco RV320 Configurations and getting RCE Implementations of the CVE-2019-1652 and CVE-2019-1653 exploits disclosed by Red Team Pentesting GmbH. I only tested these on an RV320, but according to the Cisco advisory, the RV325 is also...

keycloak-cve-2026-18963-hunt

CVE-2026-18963: Keycloak account takeover, exploitation trace hunt A psql script that searches a Keycloak PostgreSQL database for traces of CVE-2026-18963 exploitation unauthenticated account takeover through the reset-credentials flow. Published by KYOS. We wrote it while patching the Keycloak...

CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE

CVE-2026-4040 – Condición de carrera en la subida de archivos que conduce a RCE Código del programa Python Flask root@kitploit: uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads'...

EvilDroid

EvilDroid: Exploit automatizado para CVE-2024-0044 EvilDroid es una herramienta sofisticada diseñada para la explotación automatizada de vulnerabilidades CVE-2024-0044. Este script agiliza el proceso de explotación de aplicaciones Android vulnerables mediante la automatización del despliegue de...

CVE-2009-3103---srv2.sys-SMB-Code-Execution-Python-MS09-050-

Microsoft-Windows---srv2.sys-SMB-Code-Execution-Python-MS09-050- Microsoft Windows - 'srv2.sys' SMB Code Execution Python MS09-050 Exploit for CVE-2009-3103 Overview This Python script is an updated version of a public exploit for CVE-2009-3103. The original code relied on the SMB.connection...

CVE-2012-2982

CVE-2012-2982 Python POC for CVE-2012-2982 Webmin 1.580 improved from the original by user OstojaOfficial This is an improved version of the original script that allows the user to see the input data format without needing to view the entire script to discover it. To achieve this, that section of...