struts-splunk

struts-splunk Vuln Apache Struts with splunk...

Bitrix24DoS

Exploit de Denegación de Servicio DoS en Bitrix24 Este repositorio contiene un script de Python diseñado para explotar una vulnerabilidad de Denegación de Servicio DoS en Bitrix24. Tenga en cuenta que este script es solo para fines educativos y su uso para actividades no autorizadas es ilegal y...

pacpoc

PACPoC: A local PoC exploit for CVE-2019-2205 To try out this exploit install the "malicious" app PacTest.apk and make exploit.pac available over http with, for example python -m SimpleHTTPServer. Then go to proxy settings on an Android device, select proxy autoconfig, and enter the URL to...

CVE-2022-43144-Stored-XSS

CVE-2022-43144 : XSS Almacenado Descripción Una vulnerabilidad de cross-site scripting XSS en Canteen Management System v1.0 permite a atacantes ejecutar scripts web o HTML arbitrarios mediante un payload manipulado. Impacto Permite a un atacante secuestrar la sesión del usuario y tomar el contro...

SELinux-Permissive-Only-CVE-2025-21479

SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 This is an SELinux permissive only version, for now, of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices Some of the code has been recycled from the...

ScreenOff

ScreenOff CVE-2026-52910 kernel crash poc. ref: https://github.com/5unkn0wn/security-research/tree/CVE-2026-52910ltscosmitigation what socket + SOATTACHREUSEPORTCBPF + setsockopt race. timerfd/epoll callback storm slows down the receive path. replace the cBPF filter while the old prog is still in...

SecretsStalker

secretstalker root@kitploit: / / / / / / / / / / / \ / - / - -/ / \ \ / / // / '/ - / ////// / // /,////\// ╔╦╦╬╬╬╬╬╬╦╦╗ ╔╬╬╬╝╝┘ ╚╝╝╬╬╬┐ ╬╬╝╚╩╬╗╔ ╚╬╬╬ ╬╝ ╚╬╬╗╗ ╔ ╚╬╗ ╬╬ ╔╗ ╚╬╬╬╬╬╬╦ ╬╬ we found your secret... ╔╬┤ ╬╬╬ ╬╬╬╬╬╬╬╬╝╝╝╬╬╗ ...now let's see what it ╬╬┤ ╚╩┘ ╚╬╬╬╬╬╩ ╠╬╬ can REALLY...

cerebro-red-v2

CEREBRO-RED v2 Research Edition Autonomous Local LLM Red Teaming Suite A research-grade framework for automated vulnerability discovery in local LLMs using Agentic Fuzzing and Adaptive Adversarial Mutation AAM. Research Goals Implement PAIR Algorithm Prompt Automatic Iterative Refinement from...

nightHawkResponse

nightHawk Response Custom built application for asynchronus forensic data presentation on an Elasticsearch backend. This application is designed to ingest a Mandiant Redline "collections" file and give flexibility in search/stack and tagging. The application was born out of the inability to contr...

sandsifter

s a n d s i f t e r : el fuzzer de procesadores x86 Resumen El sandsifter audita procesadores x86 en busca de instrucciones ocultas y errores de hardware, generando sistemáticamente código máquina para explorar el conjunto de instrucciones de un procesador y monitoreando la ejecución en busca de...

ninja-forms-brute

Ninja Forms 3.6.8 - Unauthenticated Email Address Disclosure Description The plugin does not delete the temporary files created when exporting submissions, which could allow unauthenticated attackers to download them and get sensitive information such as the email address of users who submitted a...

health-check

health-check Health Check & Troubleshooting daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin bin:x:2:2:bin:/bin:/usr/sbin/nologin sys:x:3:3:sys:/dev:/usr/sbin/nologin sync:x:4:65534:sync:/bin:/bin/sync games:x:5:60:games:/usr/games:/usr/sbin/nologin ...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref is a proof-of-concept exploit for CVE-2017-2388, a NULL pointer derefererence in IOFireWireUserClient that was fixed in macOS Sierra 10.12.4. This vulnerability can be triggered to cause denial of service on devices with a FireWire port...

hbp-attack-demo

fork de https://github.com/veritas501/hbpattackdemo demo de hbpattack Referencia al blog de P0: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html Creé un módulo vuln, simulando que tenemos una primitiva de escritura en dirección arbitrari...

Startup-SBOM

Startup-SBOM Startup-SBOM es una utilidad universal diseñada para proporcionar una visión interna de qué paquetes se ejecutan durante el inicio de un sistema Linux o dentro de un contenedor Docker. Al analizar archivos de servicio, scripts de init y puntos de entrada de contenedores, la herramien...

suricata-vedas

Suricata VEDAS VEDAS-Driven Autonomous Generation of Suricata Rules for CVEs Purpose This repository serves as an open, collaborative validation space for Suricata rules generated autonomously by ARPSyndicate's Vulnerability & Exploit Data Aggregation System VEDAS. While such AI enables rapid,...

synacktiv-rules

synacktiv-rules Public repository of Sigma and YARA/YARA-X rules created by Synacktiv. All rules in this repository should be considered tagged as TLP:CLEAR and PAP:CLEAR. Prerequisites When using a Sigma rule, please make sure that you collect and correctly parse required logs as defined in the...

CVE-2022-29968

CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 uninitialized memory in the Linux Kernel, specifically the iouring system. The crash was found with Syzkaller. The crash was analyzed by Joseph Ravichandran and Michael Wang. The exploit was written by Joseph Ravichandran. We found &...

dicerosbicornis

DicerosBicornis A stealthy Python based Windows backdoor that uses email as a command and control server. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module pypiwin32 module Features Encrypted transportation messages AES + SHA256 hashing Generate computer unique id...

CVE-2023-0297_Pre-auth_RCE_in_pyLoad

CVE-2023-0297: RCE sin autenticación en pyLoad La historia de encontrar RCE sin autenticación en pyLoad TL;DR Una vulnerabilidad de inyección de código en versiones de pyLoad anteriores a 0.5.0b3.dev31 conduce a una RCE sin autenticación abusando de la funcionalidad de js2py. Puedes encontrar el...