copy-fail-mitigate-no-reboot

copy-fail-mitigate Minimal no-reboot mitigation helper for Copy Fail / CVE-2026-31431. This script disables the vulnerable algifaead module path and attempts to unload the module immediately. It also performs a best-effort page-cache eviction for /usr/bin/su. This is a mitigation, not a kernel fi...

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat CVE-2025-59287 is a critical RCE vulnerability in Windows Server Update Services WSUS caused by unsafe deserialization of untrusted data. It allows remote attackers to execute arbitrary code without authentication. Urgent...

Chrome-Forensic_CVE-2024-0044

🔍 Chrome Forense - CVE-2024-0044 Una herramienta robusta de forense digital para extraer y analizar artefactos de Google Chrome desde dispositivos Android Características • Instalación • Uso • Documentación 👤 Información del Autor Autor: JackTekno GitHub: github.com/JackTekno 📋 Resumen Esta...

CVE-2025-61686_docker

CVE-2025-61686docker Inicio 1. construir root@kitploit: docker-compose up --build 2. iniciar root@kitploit: docker-compose up Proceso de reproducción 1. Construir una sesión que cumpla con las condiciones de path traversal root@kitploit: └─$ echo -en '"AAAA../../../tmp/flower"'|base64 -w0 | tr '+...

CrushFTP10-Docker-CVE-2024-4040

Despliegue de Docker de CrushFTP 10.0 vulnerable a CVE-2024-4040 Este repositorio proporciona un Dockerfile para construir una imagen Docker y desplegar un contenedor Linux con un servidor CrushFTP que es vulnerable a la Vulnerabilidad de Escape del Sandbox VFS de CrushFTP CVE-2024-4040. ⚠️ Aviso...

adminer_CVE-2021-43008

CVE-2021-43008 — Vulnerabilidad Adminer Lectura arbitraria de archivos a través de un servidor MySQL malicioso 1. ¿Qué es Adminer? Adminer es una herramienta web PHP que permite administrar fácilmente bases de datos MySQL, PostgreSQL, SQLite o SQL Server. Se despliega comúnmente como una...

CVE-2017-6074-DOS

CVE-2017-6074 - Exploit de solo DoS Pánico del kernel DCCP de Linux Este repositorio proporciona una versión modificada del exploit original CVE-2017-6074 use-after-free en el subsistema DCCP del kernel de Linux, diseñado únicamente para demostrar el impacto de Denegación de Servicio DoS. Un...

CVE-2021-26084_Confluence

CVE-2021-26084 - Confluence RCE pre-autenticación inyección OGNL Uso root@kitploit: usage: cve-2021-26084confluencerce.py -h --url URL --cmd CMD --shell CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection optional arguments: -h, --help show this help message and exit --url URL, -u URL Target...

CVE-2023-3519

Repositorio de Exploits Stack-Overflow en Citrix CVE-2023-3519 Demostración en Video PoC: https://github.com/Mohammaddvd/CVE-2023-3519/assets/108727157/97fde2d9-2110-40bb-ae08-19163927115c Aviso Legal Este código está destinado únicamente a fines educativos y uso ético para comprender las...

cve-2025-59532-poc

CVE-2025-59532 Docker Environment A Docker-based research environment for analyzing CVE-2025-59532, a path traversal vulnerability in OpenAI Codex CLI that allows arbitrary file write outside the intended workspace sandbox. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025...

log4j-fuzzer

log4j-fuzzer For Single Target root@kitploit: chmod +x log4j After That Command Simply Put Your Target root@kitploit: ./log4j YOURTARGETURL YOURREMOTESERVER For Multiple Target Gether All Domain, Subdomain, Directroty in a list After That Simply Command This root@kitploit: chmod +x log4j You Can...

CVE-2021-22204-exiftool

CVE-2021-22204-exiftool Python exploit for the CVE-2021-22204 vulnerability in Exiftool. Video tutorial Youtube root@kitploit: 404 notfound Requirements root@kitploit: python3 python3-pip djvulibre-bin exiftool Install requirements Debian root@kitploit: apt-get install djvulibre-bin...

pacpoc

PACPoC: CVE-2019-2205에 대한 로컬 PoC 익스플로잇 이 익스플로잇을 시도하려면 '악성' 앱 PacTest.apk를 설치하고 exploit.pac을 HTTP로 제공해야 합니다예: python -m SimpleHTTPServer. 그런 다음 Android 기기의 프록시 설정으로 이동하여, 프록시 자동 구성을 선택하고 exploit.pac의 URL을 입력하세요...

CVE-2025-29927

高度なCVE-2025-29927脆弱性スキャナー これは、Next.js アプリケーションにおける CVE-2025-29927 ミドルウェアバイパス脆弱性を検出するために設計された、プロフェッショナルグレードのスキャナーです。 🧠 機能 実際のヘッドレスブラウザー（Playwright）を使用して、ターゲットのWebサイトを徹底的にクロールします（JSでレンダリングされたコンテンツを含む） 細工された X-Middleware-Subrequest ヘッダーを使用して内部パスをテストし、Next.js ミドルウェアをバイパスします...

CVE-2021-44228

CVE-2021-44228 Backdoor detection for VMware view horizon This includes a canary with an optional submit. Clearly use at own risk blah blah This is designed to be run on Windows VMware Horizon connection servers. It doens't look at the UAG appliances they are Photon linux...

semgrep v1.175.0

Code scanning at ludicrous speed. Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows. Semgrep is...

ios11-cookie-set-expire-issue

Problema de Establecer/Caducar Cookies en iOS 11 Parece haber un problema intermitente con el establecimiento y la caducidad de cookies en las aplicaciones web de la pantalla de inicio de iOS 11. Se pueden observar dos comportamientos erróneos: Cuando se establece una cookie y luego se cierra y...

CVE-2019-0232-EXP

CVE-2019-0232-EXP El entorno de prueba es Win10 Home 1809, la versión de JRE es 18.3 build 10.0.2+13, y la versión de Tomcat es 9.0.13. Versiones de Tomcat afectadas ★Apache Tomcat 9.0.0.M1 to 9.0.17 ★Apache Tomcat 8.5.0 to 8.5.39 ★Apache Tomcat 7.0.0 to 7.0.93 Configurar conf/web.xml...

CVE-2021-4034

CVE-2021-4034 Basically it just removes SUID bit from /usr/bin/pkexec binary. Could be useful, when you have a big park of personal PCs without orchestrated access and you don't want to share a root password with users. Or you are just a Robin and want to pwn victims to help them...

CVE-2026-22686-RemoteCodeExecution-RCE-PoC

RCE in ESM Environments — The require Problem When achieving sandbox escape via CVE-2026-22686, executing OS commands in an ESM project "type": "module" requires bypassing Node.js module loading restrictions. Standard approaches fail for the following reasons:...