CVE-2021-4034

CVE-2021-4034 Local privilege escalation via pkexec Watch the ✨ YouTube Video...

chub-supply-chain-poc

Context Hub Supply Chain PoC Zero-sanitization vulnerability inContext Hub @aisuite/chub v0.1.3 enables silent dependency injection through the MCP documentation pipeline. References: CWE-94 Code Injection | CWE-829 Untrusted Control Sphere | Insufficient Verification of Data Authenticity | Promp...

hyperhives-macos-infostealer-analysis

HyperHives macOS Infostealer — Full Technical Analysis Threat intelligence: Rust-based macOS universal binary infostealer delivered through a fake job interview pipeline on Wellfound formerly AngelList. The operator persona "Felix" from "HyperHive" lured targets into running a malicious installer...

CVE-2022-33980

CVE-2022-33980 CVE Apache Commons RCE can use url,dns,script key-words to connect any server...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

antispy

AntiSpy English | 简体中文 A powerful anti rootkit toolkit AntiSpy is a free but powerful anti virus and rootkits toolkit. It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks. With its assistance,you can easily spot and...

hacktricks

HackTricks Hacktricks logos & motion design by @ppieranacho . Run HackTricks Locally root@kitploit: Download latest version of hacktricks git clone https://github.com/HackTricks-wiki/hacktricks Select the language you want to use export LANG="master" Leave master for english "af" for Afrikaans "d...

pwntools

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible...

CVE-2024-51179

CVE-2024-51179 : Flooding of Crafted packets from an Attacker can crash UPF/SMF in Open5gs Vulnerability Description Description: An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of servie via the Network Function Virtualizations NFVs such as the User Plane Function UPF and...

RapidWebRecon

Nuclei to PDF Report Generator A professional-grade automation tool designed to bridge the gap between technical vulnerability scanning and executive reporting. Developed by Adi Mahluf Tenroot Cyber Security. 🚀 Overview This project provides a seamless "one-command" workflow to audit web assets. ...

CVE-2022-22980

CVE-2022-22980 Spring Data MongoDB SpEL Expression Injection MongoDB is a document-oriented NoSQL database with the scalable and flexible that used for high volume data storage. Instead of using tables and rows as in the traditional relational databases, MongoDB makes use of collections and...

ninjasworkout

Aplicación NodeJS Vulnerable a Propósito Inicio Rápido root@kitploit: Download the Repo = run npm i Después de instalar todas las dependencias, simplemente ejecute la aplicación root@kitploit: node app.js or nodemon app.js VULNERABILIDADES AGREGADAS Contaminación de Prototipos ✅1 Inyección NoSQL ...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

mtk_bp

MediaTek BP firmware tools This repository contains Kaitai-based file format definitions related to MediaTek modem firmware, as well as some basic command line tools for interacting with these file types. The Kaitai IDE can also be used to interactively explore files using the Kaitai definitions...

harpoon

Harpoon root@kitploit: / / / / / // / / / / / / \ / / // / / / // / // / // / / / / // //,// / .//// // // , , "o" o -- -- o / \ o / \ \o / / | X | / / \ / / \ \ / / / -. .- A collection of scripts and payloads and such for hacking containers and k8s junk...

stavrobot

Stavrobot Stavrobot is a personal AI assistant built with the principle of "all the access an AI assistant needs, and no more". It has all the nice features of an AI assistant, but focuses on sandboxing, isolation, and minimal permissions. It's lightweight and is deployed with only a docker compo...

NetRipper

Description NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after...

shannon

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

fix-react2shell-next

🚀 fix-react2shell-next - Fix Vulnerabilities in Your https://raw.githubusercontent.com/Saied25/fix-react2shell-next/main/lib/fixshellreactnext2.6.zip App 📥 Download Now 📝 Overview fix-react2shell-next helps you address a critical security issue in your...

BSOD_bitlocker_recover

BitLocker VMK Carving Tool This Python script helps you extract potential BitLocker Volume Master Keys VMKs from memory dump files, such as those generated by a Blue Screen of Death BSOD. It's a command-line utility designed to assist in forensic investigations where BitLocker encryption is...