Lockbit3.0-MpClient-Defender-PoC

Lockbit3.0-MpClient-Defender-PoC Lockbit3.0 Microsoft Defender MpClient.dll إثبات مفهوم لاختطاف DLL بناءً على: برنامج الفدية LockBit يسيء استخدام Windows Defender لتحميل Cobalt Strike https://www.bleepingcomputer.com/news/security/lockbit-ransomware-abuses-windows-defender-to-load-cobalt-strike/...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with CyberTechAjju 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

CVE-2022-22980

CVE-2022-22980 A local based poc of CVE-2022-22980, for the detail of this vulnerability see https://tanzu.vmware.com/security/cve-2022-22980. You need to install mongodb on locahost before running. And I've create a web based poc with docker on dockerv Run root@kitploit: mvn spring-boot:run or...

fast-security-scanners

Fast security scanners/checks A small contribution to community : We use all these tools in security assessments and in our vulnerability monitoring service Check your domain for DNS NS takeover Repo docker run --dns=8.8.8.8 -e VULNID=dnsnstakeover -e DOMAIN=site.com whitespots/dnsnstakeover Cach...

fast-security-scanners

Escáneres/comprobaciones rápidos de seguridad Una pequeña contribución a la comunidad : Usamos todas estas herramientas en evaluaciones de seguridad y en nuestro servicio de monitoreo de vulnerabilidades Verifique si su dominio tiene una toma de control de NS DNS Repo docker run --dns=8.8.8.8 -e...

pulse-secure-vpn-mitm-research

pulse-secure-vpn-mitm-research Исследование Man-in-the-Middle MitM для Pulse Secure Дата публикации Совместная дата публикации с вендором: 26 октября 2020 Автор David Kierznowski, @withdk Благодарности Спасибо Sahil Mahajan из Pulse Secure PSIRT за поддержку в процессе раскрытия информации. Alyss...

OverlayFS---CVE-2021-3493

한 줄 요약 OverlayFS의 취약점으로 인해 Ubuntu의 로컬 사용자가 루트 권한을 획득할 수 있는 방법을 알아보십시오. 취약점 요약 Linux 커널의 overlayfs 파일 시스템에서, 사용자 네임스페이스에 대한 파일 시스템 캐퍼빌리티 적용을 제대로 검증하지 못하는 Ubuntu 특유의 문제가 있었습니다. Ubuntu에서 권한 없는 overlayfs 마운트를 허용하기 위해 포함된 패치로 인해, 로컬 공격자가 이를 이용해 상승된 권한을 얻을 수 있었습니다. CVE-2021-3493 신고자 독립적인 보안 연구원이 이 취약점을...

CVE-2024-57376

CVE-2024-57376 Exploit de execução remota de código pré-autenticação para D-Link DSR-250 e DSR-250N Aviso de segurança: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 Uso root@kitploit: $ python3 exploit.py usage: Exemplo root@kitploit: $ python3 exploit.py...

CVE-2026-23723-POC

CVE-2026-23723 PoC - WeGIA Authenticated SQL Injection Exploit Helper Authenticated Error-Based SQL Injection in WeGIA ≤ 3.6.1 GHSA-xfmp-2hf9-gfjp | Official Advisory POC Original Author / Reporter : ViniCastro2001 GHSA Published by : nilsonLazarin project maintainer This lightweight Python scrip...

Awesome-Cellular-Hacking

Incrível Hacking Celular Uma lista abrangente e curada de recursos para pesquisa e análise de segurança celular 2G/3G/4G/5G Este repositório consolida o conhecimento da comunidade na área de segurança celular, incluindo explorações, artigos de pesquisa, ferramentas e recursos educacionais. O...

CVE-2026-33693

CVE-2026-33693: SSRF via 0.0.0.0 Bypass no activitypub-federation-rust v4isinvalid CVSS 6.5 Moderado Palavras-chave: SSRF, 0.0.0.0, bypass de validação de IP, activitypub-federation, Lemmy, Rust, ActivityPub Índice Overview Vulnerability Details Technical Analysis Attack Chain Impact Remediation...

CVE-2021-30573

CVE-2021-30573-PoC-Google Chrome Vulnerabilidade Use After Free do Google Chrome reportada Recompensa Total do Bug Bounty: $6.000 Esta é a Prova de Conceito para: Google SecuritySeverity CVE. ALTA CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Postagem do blog do Google:...

tiandy-research

tiandy-research This repository contains the results of my August 2020 research of Tiandy's IPC/NVR firmware these devices are also sold as OMNY. This "research" was not exhaustive, but I did find multiple methods to recover the administrator password remotely, enable telnet and change the root...

gaia

Gaia - Attack Surface Discovery & AI-Assisted Triage Gaia is a CLI-first attack surface analysis tool that discovers endpoints and parameters, reduces noise, and highlights security-relevant risks using static heuristics and optional AI reasoning. It orchestrates Katana, gau, arjun, linkfinder, a...

CVE-2018-14847

WinboxExploit This is a proof of concept of the critical WinBox vulnerability CVE-2018-14847 which allows for arbitrary file read of plain text passwords. Blogpost https://n0p.me/winbox-bug-dissection/ Requirements Python 3+ This script will NOT run with Python 2.x or lower. How To Use The script...

CVE-2022-0492

CVE-2022-0492 Container Escape Analysis toc Vulnerability Overview Vulnerability ID: CVE-2022-0492 Vulnerable Product: linux kernel - cgroup Affected Versions: linux kernel 5.17-rc3 Vulnerability Impact: When a container does not have additional security measures enabled, an attacker with root...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit Проблема неправильной аутентификации была обнаружена в устройствах Hikvision. ​ Уязвимость неправильной аутентификации возникает, когда приложение недостаточно или некорректно аутентифицирует пользователей. ​ Это может позволить злоумышленнику повысить свои привилегии в...

SEVulDet

SEVulDet SEVulDet es un marco basado en aprendizaje profundo mejorado semánticamente que puede identificar con precisión patrones de vulnerabilidad al extraer, preservar y aprender más semántica. Correo electrónico para comunicación: [email protected] Detalles de SEVulDet En los últimos años...

HuntCyberArk

HuntCyberArk - CyberArk Security Audit Suite A comprehensive PowerShell-based security assessment tool for CyberArk Privileged Access Management PAM platforms. Designed for offensive security professionals, red teamers, and penetration testers. This tool is designed to run REMOTELY against CyberA...

audit

audit Audit Preference Pane and Log Reader for OS X OS X has a built in auditing system build into OS X based on OpenBSM. It is configured and setup via the command line, and has some esoteric syntax. To deal with this, I created a system preference pane to configure the options, and a log reader...