kcmdump

KCM dumper 用于转储 SSSD 使用的 KCM 数据库并以 CCACHE 格式恢复 Kerberos 票据的快速脚本。 最初基于 SSSDKCMExtractor 和 KCMTicketFormatter。 描述 自 版本 2.0.0 （2018-08-13）起，SSSD 的 KCM 响应器的后端存储不再加密数据库内容。然而，它仍然依赖 LDB 数据库（其本身基于 TDB），这使得可以通过类似 LDAP 的查询轻松搜索。 SSSD 使用一种自定义的存储格式来保存 Kerberos 票据，可使用此脚本将其转换为标准的 CCACHE 文件。 用法 root@kitploit: $...

CVE-2025-8088-Winrar-Tool

CVE-2025-8088 WinRAR Exploit root@kitploit: | || | \ / / | / | | | | Advanced WinRAR Path Traversal Exploit Tool A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability CVE-2025-8088 using ADS and RAR5 header manipulation. Features ADS...

Vailyn

Vailyn Phased Path Traversal & LFI Attacks Vailyn 3.0 Since v3.0, Vailyn supports LFI PHP wrappers in Phase 1. Use --lfi to include them in the scan. About Vailyn is a multi-phased vulnerability analysis and exploitation tool for path traversal and file inclusion vulnerabilities. It is built to...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...

CVE-2024-37759_PoC

CVE-2024-37759 PoC Description DataGear version 5.0.0 and earlier has a SpEL expression injection vulnerability that leads to remote code execution. Exploit CVE Exploit Details When you request the /data/schemaId/tableName/view interface, if the database table does not have a primary key, an...

XenoboxX

Hardware Sandbox Toolkit Malware frequently employs anti-VM techniques, which can vary in their difficulty to detect and counteract. While integrating anti-detection measures in our labs is a frequently used option, we should also consider using a real hardware sandbox, even if this sounds weird...

snakeyaml_cve_poc

snakeyamlcvepoc SnakeYAML-CVE-2022-1471-POC build Either build the jar on your host with mvn clean compile assembly:single Or use docker to build an image with docker build -t snakeyaml . run Run the container with docker run --rm -p8080:8080 snakeyaml or the jar if you built on your host with ja...

cve-2016-2431

cve-2016-2431 Qualcomm TrustZone kernel privilege escalation...

BaconSampler

Bacon Sampler Sniffs outbound traffic for suspicious, beacon-like callbacks, because if it keeps coming back on schedule, it's probably not breakfast. Outbound Connections Windows + libpcap Bacon Sampler is a lightweight outbound-connection catcher that sniffs the sizzle of your network traffic a...

git-hound

🐾 GitHound パターンマッチング、パッチ攻撃、バッチキャッチの秘密スナッチャー。 概要 GitHound は、GitHub のダーク検索とパターンマッチング、コンテキスト検出、コミット履歴分析を組み合わせて、GitHub 上で 露出した API キー、シークレット、認証情報 を追跡します。GitHub ダーク を GitHound に入力すると、クエリに一致するすべてのファイルとリポジトリをスキャンしてシークレットを探します。通常のスキャナとは異なり、GitHound は GitHub のコード検索 API を活用するため、いくつかのターゲットだけでなく、 すべての...

git-hound

🐾 GitHound A pattern-matching, patch-attacking, batch-catching secret snatcher. Overview GitHound hunts down exposed API keys, secrets, and credentials across GitHub by pairing GitHub dorks with pattern matching, contextual detection, and commit-history analysis. Input a GitHub dork into GitHound...

cve-2015-6639

cve-2015-6639 QSEE Privilege Escalation Exploit using PRDiag commands CVE-2015-6639...

inceptor

🚩 これはInceptorの公開リポジトリです。最新バージョンとアップデートについては、https://porchetta.industries/ からサポートをご検討ください。 🚩 スポンサー このプロジェクトをスポンサーしていただき、Inceptorの最新アップデート、最新の修正、最新機能を入手したい場合は、https://porchetta.industries/ でサポートをお願いします。 公式Discordチャンネル Discordでおしゃべりしましょう！ Porchetta Industries 目次 概要 インストール 使い方 ニュース NW:...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

CorruptQueryAccessWorkaround

CorruptQueryAccessWorkaround: Query '' is corrupt The latest workaround for the Query is corrupt error introduced with CVE-2019-1402 in MS Access. There are other workarounds out there that need to be applied on an administrative level, e.g. by uninstalling the erroneous update. In contrast to...

Apache-RocketMQ-RCE-CVE-2023-37582-poc

This repository does not have a README...

CVE-2021-41773

CVE-2021-41773 scanner This script tests for the path traversal and local file inclusion vulnerability in Apache version 2.4.29, this script doesn't return local files, it merely scans the web server and tells you if it's vulnerable or not. Usage: python3 cve-2021-41773-scanner.py IPv4 address...

cve-2014-7920-7921

cve-2014-7920-7921 Exploit code for CVE-2014-7920 and CVE-2014-7921 - code-exec in mediaserver up to Android 5.1 The symbols in this exploit are for Android 4.3, for can be adapted to any version up to Android 5.1...

CVE-2016-3510

CVE-2016-3510...

SECURITY-3430

SECURITY-3430 Workaround This is a Java agent for use with Jenkins controllers that do not have the fix for SECURITY-3430 i.e., up to and including 2.470 and LTS 2.452.3. Mechanism and Compatibility It transforms the definition of the class containing the SECURITY-3430 vulnerability to prevent...