CVE-2026-50343-InstallService-EoP

CVE-2026-50343: InstallService StaticPluginMap EoP Standard User to SYSTEM I independently discovered and reported the vulnerability now tracked as CVE-2026-50343. MSRC confirmed my submission as a duplicate of an earlier report from another researcher. A standard interactive user can write...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

HosTaGe

HosTaGe - Honeypot-To-Go Copyright C 2013-2021, Universidad de Aalborg Dinamarca y Universidad Técnica de Darmstadt Alemania HosTaGe es un honeypot ligero, de baja interacción, portátil y genérico para dispositivos móviles que tiene como objetivo la detección de entornos de red inalámbricos...

CVE-2024-32113

CVE-2024-32113 Apache OFBIZ Escaneo por lote 注意：このツールを違法攻撃に使用することを支援するものではありません。このツールは技術的な交流のみを目的としています。 Nota: Esta herramienta no respalda ningún ataque ilegal. Está destinada únicamente al intercambio técnico. 注意：本人不支持任何人使用本工具进行非法攻击，本工具仅作为技术交流。 Ayuda root@kitploit: CVE-2024-32113 Escaneo por lo...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

Cyber-Defence

Introduction This repository holds information released publicly by NCC Group's Cyber Incident Response Team. Contact To request further information about anything in this repository please contact the team at [email protected]. To engage with our CIRT team due to a breach please contact...

OpenSSL-1_0_1g_CVE-2015-1791

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un conjunto de herramientas robusto, de grado comercial, completo y de código...

barf-project

BARF : Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis to reverse engineering. Manual binary analysis is a difficult...

CVE-2026-33454

camel-mail Header Injection → RCE Vulnerability Reproducer CVE-2026-33454 This project demonstrates a Camel message header injection vulnerability in Apache Camel's camel-mail component, tracked as CVE-2026-33454. An attacker who can deliver an email to a mailbox monitored by a Camel mail consume...

CVE-2021-21972

CVE-2021-21972 comprobador Vulnerabilidad de ejecución remota de código CVE-2021-21972 en VMware vCenter Server Este script comprueba la existencia de la CVE-2021-21972 basándose en la siguiente RUTA "/ui/vropspluginui/rest/services/uploadova" mediante una petición POST y buscando en el cuerpo de...

windows-security-cve-2017-8543

Example InSpec Profile This example shows the implementation of an InSpec profile...

claude-awm

claude-awm: can you scrub a SynthID text watermark by editing the text? Yes, but only one family of attack works, and it isn't the one everyone assumes. Unicode variation selectors category Mn, U+FE00 to U+FE0F and U+E0100 to U+E01EF drive the detector below threshold and stay there. Every other...

CVE-2020-8554

Mitigate CVE-2020-8554 with Policy Controller This repository contains configuration files for using Policy Controller, which is based on the open source OPA Gatekeeper project, to block Kubernetes Services from public IP access. The security advisory for this issue states: A security issue was...

CVE-2020-0796

CVE-2020-0796 Exploit de LPE en SMBv3 de Windows Autores Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Análisis del exploit Análisis de PoC por SungLin Knownsec 404 Team Análisis+PoC de @ZecOps Referencias...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

CVE-2025-55182-GodzillaMemoryShell

CVE-2025-55182-GodzillaMemoryShell help root@kitploit: usage: exploit.py -h --proxy PROXY --utf16 --unicode --key KEY --target TARGET CVE-2025-55182 Godzilla Memoryshell options: -h, --help show this help message and exit --proxy PROXY HTTP proxy address, e.g. http://127.0.0.1:8888 --utf16 Enable...

CVE-2021-44077

CVE-2021-44077 Exploit de Prueba de Concepto para CVE-2021-44077: RCE PreAuth en ManageEngine ServiceDesk Plus msiexec.exe Ejecute pip install con el archivo de requisitos o asegúrese de tener el paquete requests. Si está intentando recibir una reverse shell, ejecute primero su listener, p. ej.:...

CVE-2020-11651-poc

PoC exploit for CVE-2020-11651 and CVE-2020-11652 This is a proof of concept exploit based on the initial check script. Use it to verify you have successfully updated your Salt master servers to a release containing the required fixes. Thanks for F-Secure Labs for their research and reporting...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

asterisk

The AsteriskR Open Source PBX root@kitploit: By Mark Spencer and the Asterisk.org developer community. Copyright C 2001-2025 Sangoma Technologies Corporation and other copyright holders. SECURITY It is imperative that you read and fully understand the contents of the security information document...