CVE-2026-64600

🚨 CVE-2026-64600 — RefluxFS Escalada Local de Privilegios en el Kernel de Linux LPE 📖 Visión General CVE-2026-64600 "RefluxFS" es una vulnerabilidad del kernel de Linux que afecta la implementación del sistema de archivos RefluxFS. La falla se origina por una validación incorrecta de los metadato...

HTTPoxyScan

HTTPoxy Exploit Scanner by 1N3 @CrowdShield https://crowdshield.com Last Updated: 20160720 ABOUT: PoC/Exploit scanner to scan common CGI files on a target URL for the HTTPoxy vulnerability. Httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments...

Burp-Suite-Certified-Practitioner-Exam-Study

Burp Suite Certified Practitioner Exam Study This is my study notes with over a 110 PortSwigger Academy Labs. I used these labs to pass the Burp Suite Certified Practitioner Exam 2023. My BSCP qualification. For more informaion go to PortSwigger Academy to get latest learning materials. SCANNING ...

CVE-2004-2687

CVE-2004-2687 DistCC Daemon Command Execution...

Torward

Torward Torward is an improved version based on the torghost-gn and darktor scripts, designed to enhance anonymity on the Internet. The tool prevents data leaks and forces all traffic from our computer to be routed exclusively through the Tor network, providing a high level of privacy in our...

CVE-2021-37580

CVE-2021-37580 CVE-2021-37580 Ayuda python CVE-2021-37580.py http://1.1.13.1...

CVE-2021-44228-PoC

CVE-2021-44228 Log4Shell Prueba de concepto Las funciones JNDI de Apache Log4j2 =2.14.1 utilizadas en la configuración, los mensajes de registro y los parámetros no protegen contra LDAP controlado por el atacante y otros endpoints relacionados con JNDI. Un atacante que pueda controlar los mensaje...

OpenEMR_Vulnerabilities

Vulnerabilidad de ejecución remota de código en OpenEMR OpenEMR 5.0.1 permite a un atacante autenticado subir y ejecutar códigos PHP maliciosos. PoC root@kitploit: git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t...

cwe-sdk-javascript

cwe-sdk Un SDK de Node.js para Common Weakness Enumeration CWE compatible con MITRE / CAPEC...

kali-cloud

FAI Cloud image builder This repository aims to build Kali images for all cloud providers It is a fork from: https://salsa.debian.org/cloud-team/debian-cloud-images/ Getting started You will need a checkout of this repository on your disk and a recent fai-server package at least 5.7 installed...

CodeAnalysis

TCA, Tencent Cloud Code Analysis code-named: CodeDog English | 简体中文 TCA Official Official website: https://tca.tencent.com Official introduction: https://cloud.tencent.com/product/tcap TCA CNB PagesBetter Internet Speed Domestic: https://cnb.cool/tencent/cloud/tca/code-analysis Domestic:...

apk.sh

🕹️ apk.sh apk.sh is a Bash script that makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK. Features apk.sh basically uses apktool to disassemble, decode and rebuild resources and some bash to automate the frida...

apk.sh

🕹️ apk.sh apk.sh es un script de Bash que facilita la ingeniería inversa de aplicaciones Android, automatizando algunas tareas repetitivas como extraer, decodificar, reconstruir y parchear un APK. Features apk.sh básicamente usa apktool para desensamblar, decodificar y reconstruir recursos, y algo...

CVE-2023-3452-PoC

CVE-2023-3452-PoC - Plugin Canto de WordPress 3.0.5 - Inclusión Remota de Archivos RFI - Ejecución Remota de Código RCE - No autenticado Aquí explicamos un PoC de la última vulnerabilidad de RFI Inclusión Remota de Archivos del plugin Canto de WordPress, y hemos desarrollado un exploit para...

malasada

malasada Donut for Linux, converts a Linux ELF shared object .so into a position-independent .bin blob that can be executed directly from memory for example, by copying it into an mmap'd region and jumping to it as a function pointer. This project intentionally avoids memfd memfdcreate, execveat ...

KerberosRun

KerberosRun KerberosRun is a little tool I use to study AD security together with my ADCollector. KerberosRun uses the Kerberos.NET library built by Steve Syfuhs. Some code were taken and adapted from Harmj0y's Rubeus project. dev2null is the primary author of this project. My colleague Constanti...

nullmap

nullmap A very simple driver manual mapper based on my older voidmap and CVE-2023-21768 POC by chompie and b33f. Because the underlying IoRing post-exploitation memory r/w primitive is not handling many consequent reads and writes very well, I've decided to overwrite CR4 to disable SMEP/SMAP to...

r00kie-kr00kie

r00kie-kr00kie Descargo de responsabilidad Este es un exploit PoC para la vulnerabilidad kr00k CVE-2019-15126. Este proyecto tiene únicamente fines educativos y no puede ser utilizado para violar la ley ni para beneficio personal. El autor de este proyecto no se responsabiliza por cualquier daño...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

powershell-backdoor-generator

root@kitploit: / DISCLAIMER: This program is intended for educational purposes only. By using this program, you agree that you understand the potential risks associated with its use. - This program should not be used on any system or network without proper authorization. Unauthorized use is...