CVE-2024-9047-PoC

This script is only for authorized system testing. Please cite the source if referenced. For more PoCs, see https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Batch testing: python poc.py -f url.txt Single testing: python poc.py -u your-ip...

gv_decryptor

गैलरी वॉल्ट डिक्रिप्टर गैलरी वॉल्ट ThinkYeah एंड्रॉइड एप्लिकेशन द्वारा एन्क्रिप्ट की गई एसेट्स के लिए पुनर्प्राप्ति उपकरण। यह नीचे दस्तावेज़ित V2 कंटेनर लेआउट का समर्थन करता है और इसके लिए गैलरी वॉल्ट PIN की आवश्यकता नहीं होती है। केवल उस डेटा को पुनर्प्राप्त करें जिसके आप स्वामी हैं या जिसकी जां...

CVE-2024-21413

CVE-2024-21413 यह Python स्क्रिप्ट CVE-2024-21413 का दुरुपयोग करने के लिए उपयोग की जाती है, जिसे "MonikerLink" नाम दिया गया है। TryHackMe कक्ष: MonikerLink धारणाएँ यह PoC एक प्रयोगशाला वातावरण के लिए बनाया गया है, जिसका अर्थ है कि सर्वर को एक विशिष्ट सेटिंग में कॉन्फ़िगर करने की आवश्यकता है जैसे...

ShiroScan

ShiroScan Shiro=1.2.4 deserialization, one-click detection tool root@kitploit: 改动内容：1.新增4个利用链模块CommonsCollections7-10，预计增加成功率30%，已打包成新ysoserial的jar包，请勿更换 改动内容：2.增加多线程，虽模块增加但速度却提高300% root@kitploit: 集成21个key进行fuzz If it helps, please give a star. Corresponding blog article:...

samsung-android-lpe

Part 1: Arbitrary AT command execution CVE-2026-20980 Application ProcessorAP commands are managed by atdistributor after switching the connection mode in an unlocked device using. root@kitploit: AT+SWATD=0 AT+ACTIVATE=0,0,0 AT+SWATD=1 atdistributor verifies AT commands through the function...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...

samplicator

UDP Samplicator यह छोटा प्रोग्राम किसी दिए गए पोर्ट पर UDP डेटाग्राम प्राप्त करता है, और उन डेटाग्राम को निर्दिष्ट रिसीवर्स के एक सेट पर पुनः भेजता है। इसके अलावा, प्रत्येक रिसीवर के लिए अलग-अलग एक सैंपलिंग भाजक N निर्दिष्ट किया जा सकता है, जो तब प्राप्त पैकेटों में से केवल प्रति N में से एक को...

samplicator

UDP Samplicator This small program receives UDP datagrams on a given port, and resends those datagrams to a specified set of receivers. In addition, a sampling divisor N may be specified individually for each receiver, which will then only receive one in N of the received packets. DOWNLOADING Thi...

webtech

WebTech Identify technologies used on websites. More info on the release's blogpost. CLI Installation WebTech is available on pip: root@kitploit: pip install webtech It can be also installed via setup.py: root@kitploit: python setup.py install --user Burp Integration Download Jython 2.7.0...

Zerodapi

Documentación de Zerodai Empieza! root@kitploit: pip install zerodai==0.0.0.20 root@kitploit: export zerodapikey="TUAPIKEY" Obtén tu api key https://zerodai.com Chat Conversacional Simple - Sin memoria root@kitploit: from zerodai import zerodai import os zerodai.apiauthos.getenv"zerodapikey"...

Embarcadero-Workaround

What is Embarcadero Workaround ? This is an unofficial "patch" for "Embarcadero VCL Library Stack/Heap Overflow" CVE-2014-0993 and CVE-2014-0994. Which Software versions does this workaround support? 32-bit software compiled with Delphi and C++ Builder where the "VCL library" was included, as lon...

CVE-2020-1472

After reproducing, there are some small bugs; it gets stuck on the login screen for a long time after rebooting. Not sure if it's just me. Use cautiously in real environments. In practice, you can use secretsdump.py with the -use-vss and -history options to retrieve historical hashes for recovery...

CVE-2024-28000

CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...

open-klara

Open KLara Open KLara is a community-driven fork of KLara by Kaspersky Lab — a distributed system for scanning large malware collections with Yara rules. This project is maintained by the community and is not affiliated with Kaspersky Lab. Features Web Interface — Fire-and-forget Yara scans with...

toastnotify-bof

toastnotify-bof A Beacon Object File BOF for sending Windows toast notifications. Pairs with the blog post for full context and use cases. subcommands getaumid Enumerates AUMIDs Application User Model IDs registered on the system. Use this to find a suitable identity to borrow before sending a...

Nessus_Map

Nessus Map Nessus XML Praser Requirements Python3 Django Tested on Ubuntu 18.04 Windows 11 Pro PowerShell What it does Vulnerability based parsing Service based parsing Host bases parsing Unsupported OS parsing Generate Executive Summary of scan Export parsed .nessus files to JSON file Import JSO...

IG-Detective

IG-Detective 🕵️‍♂️📸 Created by@shredzwho | 💖 Sponsor this project IG-Detective is a high-performance, Python-based Open Source Intelligence OSINT tool for Instagram. It offers a premium interactive shell to perform deep analysis on Instagram accounts, extract location history, mapping interactions,...

versionscan

versionscan Versionscan एक उपकरण है जो आपके वर्तमान में स्थापित PHP संस्करण का मूल्यांकन करने और इसे ज्ञात CVEs तथा उन संस्करणों से तुलना करने के लिए है जिनमें इन्हें ठीक किया गया था, ताकि संभावित समस्याओं की रिपोर्ट की जा सके। कृपया ध्यान दें: इस उपकरण को लिनक्स वितरणों के अनुकूल बनाने का कार्य...

TrustworthyRAG

Trustworthy RAG An Evaluation Agent for Detecting Misinformation and Knowledge Poisoning in Retrieval-Augmented Generation Systems. Overview This project implements a Trustworthy RAG Framework with an integrated Evaluation Agent that assesses the reliability of RAG responses using three...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...