CVE-2026-84641

A flaw was found in Thunderbird. A remote attacker, by operating a malicious Internet Message Access Protocol IMAP server, could send a specially crafted ID response. This could trigger a use-after-free vulnerability and lead to heap-memory disclosure, allowing sensitive heap contents to be...

ffs

FFS - F File System This is a cli tool for searching files like grep that does not use the OS kernel to read files, but reads your disks directly. It is practically useless, but insanely cool. this is just 1.5k lines of C code that: requires sudo only when reading a raw device node e.g. /dev/rdis...

cve-2018-10933

CVE-2018-10933 CVE-2018-10933 omisión de autenticación de libssh, un contenedor Docker vulnerable que escucha en el puerto 2222 para explotación. Un parche básico de prueba de concepto de libssh incluido en el contenedor para omitir la autenticación. Para iniciar sesión use el "myuser" /...

cve-2018-10933

CVE-2018-10933 CVE-2018-10933 libssh authentication bypass, a vulnerable Docker container that listens on port 2222 for exploitation. A basic proof-of-concept libssh patch included in the container to bypass auth. To login use the default "myuser" / "mypassword" from libssh. A patch is applied to...

hooky

hooky This repository is a submodule for https://github.com/markuta/CVE-2024-32002, which contains a simple hook located in y/hooks/post-checkout to open calculator on macOS systems: root@kitploit: open -a Calculator.app More info about the vulnerability can be found here and here...

Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

fastfinder

FastFinder A lightweight incident response tool for threat hunting and forensic triage ✨ Overview FastFinder is a powerful, lightweight incident response tool designed for cybersecurity professionals conducting threat hunting, live forensics, and endpoint triage. Built for both Windows and Linux...

CVE-2019-17041

Rsyslog - what is it? Rsyslog is a r ocket-fast sys tem for log processing. It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide...

CVE-2023-30092

CVE-2023-30092 All Details about CVE-2023-30092 Software: Online Pizza Ordering System 1.0 Software Link: https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html Vulnerability Type: SQL Injection Affected Component: QTY Parameter Impact Denial of Service:...

DVHMA

DVHMA Damn Vulnerable Hybrid Mobile App DVHMA is an hybrid mobile app for Android that intentionally contains vulnerabilities. Its purpose is to enable security professionals to test their tools and techniques legally, help developers better understand the common pitfalls in developing hybrid...

ChameleonMini

Chameleon-Mini This is the official repository of ChameleonMini, a freely programmable, portable tool for NFC security analysis that can emulate and clone contactless cards, read RFID tags and sniff/log RF data. Thanks to over 1700 backers from our Kickstarter project, the current Revision G has...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

NxRansomware

NxRansomware A next generation of ransomware. Fully written using a .Net Framework + C&C System Created By: Guilherme Bacellar Moralez Disclaimer This code is created and maintened only for a research proposal. Please do not use for other proposes. Please, do not run the code with a release...

token-reverser

Token Reverser Generador de listas de palabras para descifrar tokens de seguridad. Instalación root@kitploit: $ git clone https://github.com/dariusztytko/token-reverser.git Ejemplo de uso 1. Estás probando la función de restablecimiento de contraseña 2. El token de restablecimiento de contraseña ...

token-reverser

Token Reverser Words list generator to crack security tokens. Installation root@kitploit: $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g...

s3dns

S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...

KITT-Lite

KITT Penetration Testing Framework - Lite Version No longer maintained, may need some edits to function The KITT Penetration Testing Framework was developed as an open source solution for pentesters and programmers alike to compile the tools they use with what they know into an open source projec...

Project-Onyx

Project Onyx Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion techniques against modern EDR systems. It shifts away from traditional signature-based obfuscation towards behavioral camouflage and stri...

Serverless-Goat

Introduction Thank you for using OWASP ServerlessGoat! ​ This serverless application demonstrates common serverless security flaws as described in the Serverless Security Top 10 Weaknesses guide https://github.com/puresec/sas-top-10. ​ ServerlessGoat was created for the following educational...

CVE-2026-39983

References https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-chqc-8p9q-pq6q https://github.com/patrickjuchli/basic-ftp/commit/2ecc8e2c500c5234115f06fd1dbde1aa03d70f4b https://github.com/patrickjuchli/basic-ftp/releases/tag/v5.2.1...