CVE-2024-36877

CVE-2024-36877 Exploit POC for CVE-2024-36877 Detailed write-up can be found on my blog - https://jjensn.com/at-home-in-your-firmware https://github.com/user-attachments/assets/71f30cda-61e3-49ea-b856-959746349f2d...

nuitka-static-unpacker

This repository does not have a README...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

SigDigger

SigDigger - The free digital signal analyzer SigDigger is a free digital signal analyzer for GNU/Linux and macOS, designed to extract information of unknown radio signals. It supports a variety of SDR devices through SoapySDR, and allows adjustable demodulation of FSK, PSK and ASK signals, decode...

CVE-2022-22972

CVE-2022-22972 vmware authentication bypass root@kitploit: -host string Auth Servers,bugs365.com -url string Vul url,-url https://xxx.com -user string username default "administrator"...

CVE-2020-24972

So CVE-2020-24972 spans from another cve in actually. I don't remember the cve that got designated but it has to do with platformpluginpath cmdline option from qt. So in essence the problem comes from using qt, persee the option platformpluginpath . "This parameter is supposed to contain a...

token-proxy

llm-token-proxy A transparent PII redaction proxy for LLM API traffic. Sits between your application and the LLM provider, pseudonymizing sensitive data on the way out and restoring it on the way back. Your LLM never sees real names, emails, IPs, or domains — it works entirely with structured...

FIASSE

A Framework for Integrating Application Security into Software Engineering FIASSE Note: This repository is an ongoing work. Contributions are welcome! Overview TL;DR: please read the DOC. Explore FIASSE website. Visit GitHub Discussions to contribute. This repository contains resources and...

dBmonster

With dBmonster, you are able to scan for nearby WiFi devices and track them through the signal strength dBm of their sent packets. Therefore, you can identify the exact location of nearby WiFi devices use a directional WiFi antenna for the best results or find out in which direction your self mad...

rootOS

rootOS Tries to use various CVEs to gain sudo or root access. All exploits have an end goal of adding ALL ALL=ALL NOPASSWD: ALL to /etc/sudoers allowing any user to run sudo commands. Run root@kitploit: python root.py Exploits Name| CVE| Date| Links ---|---|---|--- ARDAgent| CVE-2008-2830|...

Inspector

Privilege Escalation unix helper SUMMARY Inspector is a python script for help in privilege escalation, for linux environement. After starting, this script search the kernel version and check if is exploit exists, load file history bash,zsh,mysql... and load list of programs loaded with root user...

nano-analyzer

Nano-analyzer A minimal LLM-powered zero-day vulnerability scanner byAISLE. Research prototype for demonstration purposes. This is a simple, single-file harness that is able to detect real zero-day vulnerabilities. Note that it is a prototype, biased towards C/C++ memory safety bugs, and will...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...

log4j-exploit-fork-bomb

log4j-exploit-with-fork-bomb 💣💥💀 Proof of Concept: example of launching a fork bomb on a remote server due to vulnerability CVE-2021-44228 1. Create an attacker's LDAP server server module that will serve string and code payloads payload module 2. Create a victim example victim module and pass a...

CVE-2021-29003

CVE-2021-29003 https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/ Exploit db https://www.exploit-db.com/exploits/49764 medium https://sharmajijvs.medium.com/how-i-got-my-first-cve-af2c3009e409 Unit 42 palo alto networks...

CVE-2025-46080

BUGAuthor: yggcwhat Affected version: Huocms Vendor: https://huocms.com/ Source Code Address: https://gitee.com/digital-flag/huocms Vulnerability File: AttachmentController.php Affected Version： HuoCMS - controller -backend - AttachmentController.php:editFileUrl The suffix of $newPathUrl in the...

CVE-2024-22734

CVE-2024-22734 Exploit PoC for CVE-2024-22734 This repository contains the exploit source Proof of Concept PoC for CVE-2024-22734 , a vulnerability discovered by Bryan Smith of Redline Cyber Security. For detailed information about the vulnerability, please refer to our blog post: CVE-2024-22734:...

peeping-tom

peeping-tom Remote keylogger for Windows written in C++ Welcome to the peeping-tom project repo! Peeping-tom is a two-part program with a peeping-client deployed on a target and a toms-server listening for keylogs on the attacker machine. Getting up and running requires a decent amount of set up,...

signal-without-smartphone

Setup Signal without smartphone A Desktop application to register an account with Signal and link it with Signal Desktop, all without requiring a smartphone. Note that Signal still requires a phone number to be used. This utility avoids the need of a smart phone, but will still require a way to t...

f32

The f32 is an ultra-compact ESP32 development board designed to mount directly behind a USB-C receptacle. The PCB measures just 9.85 mm x 8.45 mm. It's powered by the ESP32-C3FH4 microcontroller and was created primarily for research and as a bit of a stress test for the ESP32, since it...