CVE-2026-5201

CVE-2026-5201 Heap-based buffer overflow in gdk-pixbuf JPEG loader Hi, I'm Kağan Çapar. I discovered a heap-based buffer overflow vulnerability in gdk-pixbuf's JPEG image loader that affects virtually all Linux desktop environments. The vulnerability was assigned CVE-2026-5201 and acknowledged by...

ft9201-libfprint

ft9201-libfprint Linux fingerprint support for the Focal-systems FT9201 USB reader 2808:93a9, sold as a standalone Windows Hello dongle, as a libfprint driver. The sensor is a tiny 96×96 optical reader. libfprint's built-in matcher does a poor job on an image that small, so this driver instead...

HRShell

HRShell: An advanced HTTPS Reverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask and is compatible with python 3.x. The client.py has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 while the server.py is...

CVE-2021-31956-POC

" CVE-2021-31956" WIP PoC code for CVE-2021-31956 in preparation for OSEE. Will improve it further after my OSEE exams and free time. A lot of hardcoded offsets need to be changed if it is different on the target system but if it is anything similar to 2020 - 2021 builds then no change should be...

CVE-2023-34960

CVE-2023-34960 Chamilo Command Injection with auto upload shell. use ur logic check path directory at your result vuln, then you can find your access shells wso.php To Install & Execute root@kitploit: $ git clone https://github.com/Mantodkaz/CVE-2023-34960 $ cd CVE-2023-34960 $ pip install -r...

CVE-2022-23614

CVE-2022-23614 PoC for CVE-2022-23614, GHSA-5mv2-rx3q-4w2v Twig sort filter code execution/sandbox bypass As seen in this commit - https://github.com/twigphp/Twig/commit/.., twig was passing user supplied function name as a callback parameter to uasort here, thus leading to arbitrary code executi...

ALPC-Enumerator

PPL-Aware ALPC Port Enumerator A Windows userland tool for enumerating and classifying Advanced Local Procedure Call ALPC ports, including those owned by PPL Protected Process Light processes where standard handle duplication fails. Standard enumeration tools often skip protected or access-denied...

RiskAssessmentFramework

The OWASP Risk Assessment Framework Codacy Badge !GSOC...

sqlmap-nu11secur1ty

MSF Module Generator sqlmap-nu11secur1ty - Kali Linux Author: nu11secur1ty Description: Generate Metasploit auxiliary modules from Burp Suite requests and run sqlmap-nu11secur1ty automatically. Important: Only for lab/authorized testing. Overview This generator allows you to create a Metasploit...

Find-WSUS

🧭 Find-WSUS Discover WSUS server configurations across Group Policy Objects GPOs — including hidden Group Policy Preferences GPP. Find-WSUS is a PowerShell script designed for security professionals and system administrators to identify all WSUS Windows Server Update Services server URLs configur...

pyattck

Welcome to pyattck's Documentation root@kitploit: . ... | \ \ \ / / / \ | | | / || |/ / | | | \ / / / ^ \ ---| |-------| |----| ,----'| ' / | / \ / / /\ \ | | | | | | | Current Version is 7.1.1 pyattck is a light-weight framework for MITRE ATT&CK Frameworks. This package extracts details from the...

pyattck

Bienvenido a la documentación de pyattck root@kitploit: . ... | \ \ \ / / / \ | | | / || |/ / | | | \ / / / ^ \ ---| |-------| |----| ,----'| ' / | / \ / / /\ \ | | | | | | | La versión actual es 7.1.1...

dubbo-rce

CVE-2023-23638 For learning and research purposes only. ZooKeeper is required. The test environment is Java 8. Other versions have not been tested and usability is not guaranteed. During reproduction, you need to add the VM parameter to DemoComsumer: -Ddubbo.hessian.allowNonSerializable=true. For...

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ

CVE-2023-46604-RCE-Reverse-Shell-Apache-ActiveMQ This exploit builds upon the foundational work available at https://github.com/X1cT34m https://github.com/X1r0z/ActiveMQ-RCE. We have further developed the technique to achieve a reverse shell utilizing the Metasploit Framework...

tsunami-security-scanner

Tsunami Tsunami es un escáner de seguridad de red de propósito general con un sistema de complementos extensible para detectar vulnerabilidades de alta gravedad con alta confianza. Para obtener más información sobre Tsunami, visita nuestra documentación. Tsunami depende en gran medida de su siste...

Log4J-CVE-2021-44228-RCE

Log4J CVE-2021-44228 Exploit with Command Execution Interactive exploit, just run: ./exploit.sh...

mapchar

Genera listas de palabras usando lógica de patrones y expresiones Instalación • Documentación • Uso • Contribuir !NOTE Este proyecto fue renombrado defuse / fuse-generator a mapchar a partir de la versión 7.0.2. El paquete PyPI, el comando CLI y el nombre del paquete Python han cambiado en...

cve-2026-25262-sm8450-research

Research Tools In the course of this work, the public tool edl B. Kerler, V3.62 was used, along with modifications based on it. Experimental testbed: To test the hypothesis of CVE-2026-25262 applicability to the SM8450 platform, an experimental tool cvefinalsingle was created on top of edl. It...

ApiHunter

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. 🎯 ApiHunter 📺 Video Demo Click to watch the full demo on YouTube 🖥️ Desktop App...

EventHorizon

EventHorizon EventHorizon is a tool meant to arm security analysts and/or researchers with Event Tracing for Windows ETW telemetry that, coupled with sigma-like rules, allow for robust endpoint detection and response capabilities. That being said, EventHorizon is in no way a replacement for prope...