CVE-2020-0601-EXP

CVE-2020-0601-EXP This resource is the author's reproduction of the Microsoft signature certificate vulnerability CVE-2020-0601, implemented by combining related resources and articles. It is recommended that you read the author's blog to understand the ECC algorithm, Windows verification...

PortBender

Overview PortBender is a TCP port redirection utility that allows a red team operator to redirect inbound traffic destined for one TCP port e.g., 445/TCP to another TCP port e.g., 8445/TCP. PortBender includes an aggressor script that operators can leverage to integrate the tool with Cobalt Strik...

CVE-2024-28397-RCE

CVE-2024-28397-RCE CVE-2024-28397 - Remote Code Execution From Vulnerable JS2PY Usage: python3 exploit.py...

cve-2018-6574

cve-2018-6574...

CVE-2024-31819

Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: root@kitploit: git clone...

py_certificate_extractor

pycertificateextractor Sometimes it necessary to extract certificate information from the digital signed file. Use this tool when that occurs. you can easily finish Let me know if there are any changes required or additional features need it. Features Extract the certificate information and...

CVE-2020-6308-PoC

CVE-2020-6308 SAP POC SAP BusinessObjects Business Intelligence Platform Web Services versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. Follow me on...

lifer

lifer A forensic tool for Windows link file examinations i.e. Windows shortcuts SYNOPSIS 'lifer' is a Windows or nix command-line tool inspired by the whitepaper 'The Meaning of Link Files in Forensic Examinations' by Harry Parsonage and available here. It started life as a lightweight tool that ...

Reconnoitre

A reconnaissance tool made for the OSCP labs to automate information gathering and service enumeration whilst creating a directory structure to store results, findings and exploits used for each host, recommended commands to execute and directory structures for storing loot and flags. Contributio...

phishing_catcher

Ловец фишинга Ловите возможные фишинговые домены в почти реальном времени, отслеживая подозрительные выпуски TLS-сертификатов, сообщаемые в Certificate Transparency Log CTL через API CertStream. «Подозрительными» считаются выпуски, доменное имя которых набирает балл выше определённого порога на...

CVE-2025-57819-RCE

FreePBX 16 — Unauthenticated SQLi to RCE요약: 이 설명은 FreePBX 16의 두 취약점CVE-2025-57819 및 CVE-2025-61678을 결합하여 인증되지 않은 액세스에서 원격 코드 실행Remote Code Execution, RCE으로 권한을 상승시키는 전체 공격 체인을 보여줍니다. 취약점 CVE 정보 CVE 번호 영향 구성 요소 영향 및 취약점 유형 CVE-2025-57819 Endpoint 모듈 로더brand 매개변수 인증되지 않은 다중 명령 SQL 주입Unauthenticated...

CVE-2026-66731-Negative-Chunk-Size-Parsing-Causes-Memory-Corruption-leading-to-Server-Crash

보안 권고: facil.io의 음수 청크 크기 파싱으로 인한 메모리 손상 배정된 CVE ID : CVE-2026-66731 제품: facil.io 영향받는 버전: facil.io = 0.7.5 0.7.5, 0.7.6, master; 0.7.5에서 0.8.x HTTP/1.1 파서가 백포트되면서 도입됨 - 0.6.x 또는 0.7.0–0.7.3에는 존재하지 않음 구성 요소: lib/facil/http/parsers/http1parser.h CWE: CWE-20 Improper Input Validation, CWE-682...

CVE-2026-14266

CVE-2026-14266 Poc: 7-Zip XZ Heap Buffer Overflow PoC Generator Proof of Concept generator for reproducing the XZ heap buffer overflow vulnerability in 7-Zip. The script creates a specially crafted .xz archive designed to reproduce the crash condition in the vulnerable multi-threaded XZ...

oob_entry

oobentry: Authorized iOS kernel exploit research for tfp0 access Visit releases: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip A calm, careful space for researchers to document, discuss, and share knowledge about iOS kernel concepts related to tfp0 access. This...

CVE-2024-21006_jar

CVE-2024-21006jar Exploit code reference: https://github.com/momika233/CVE-2024-21006 Here, the source code has been compiled into a JAR package for ease of use. The lib directory contains dependency files. If you wish to modify the source code, you can compile it yourself. Usage root@kitploit:...

CVE-2025-23369

CVE-2025-23369 CVE-2025-23369 exploit, write up here...

CVE-2021-41078

CVE-2021-41078 nameko Arbitrary code execution due to YAML deserialization NVD Description Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file. Demo Set Up 1. Build an image from a Dockerfile root@kitploit: docker build -t cve-2021-4107...

config-demo

CVE-2020-5410...

Oracle-mysql-CVE-2012-2122

MySQL Authentication Bypass Vulnerability CVE-2012-2122 When connecting to MariaDB/MySQL, the entered password is compared with the expected correct password. Due to improper handling, even if memcmp returns a non-zero value, MySQL may still consider the two passwords as identical. That is, as lo...

permanet

Permanet Cryptographically verifiable web archiving. Submit a URL, get a rendered capture with a SHA-256 Merkle hash anchored to Bitcoin via OpenTimestamps and permanently stored on Arweave. Anyone can verify a capture independently using only the hash and the Bitcoin blockchain. No trust in...