11874 matches found
page_inject
pageinject - AFALG aead cross-container escape AFALG aead vulnerability cross-container exploit -- pivot from one compromised container into every sibling container that shares the samelibc.so.6 image layer. This is an escape primitive : it runs from inside an unprivileged container that the...
CVE-2024-48990
CVE-2024-48990 Exploit for CVE-2024-48990 Local Privilege Escalation in needrestart 3.8 Background Read https://blog.qualys.com/vulnerabilities-threat-research/2024/11/19/qualys-tru-uncovers-five-local-privilege-escalation-vulnerabilities-in-needrestart. Qualys does a great job explaining it. TLD...
CVE-2017-7494_SambaCry
CVE-2017-7494 SambaCry Exploit Exploit SambaCry CVE-2017-7494 to exploit Samba bind shell without Metasploit If you need to change the port, just change line 68 of bindshell-samba.c and recompile: root@kitploit: gcc -c -fpic bindshell-samba.c root@kitploit: gcc -shared -o libbindshell-samba.so...
CVE-2021-3156
CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: root@kitploit: $ make list targets: root@kitploit: $ ./sudo-hax-me-a-sandwich run: root@kitploit: $ ./sudo-hax-me-a-sandwich manual mode: root@kitploit: $...
CVE-2023-3009
CVE-2023-3009 Stored XSS on item name - Bypassing CVE-2023-2516 in TeamPass 3.0.9 - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the nilsteampassnet/teampass application, which was assigned the CVE-2023-2516 identifier. The vulnerability can be...
psc
PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...
CVE-2024-48990-Automatic-Exploit
CVE-2024-48990 PYTHONPATH Hijack - Privilege Escalation Exploit This tool automates the exploitation of a privilege escalation vulnerability in needrestart version 3.7, identified as CVE-2024-48990. It achieves root execution by leveraging the insecure use of the PYTHONPATH environment variable...
Blacklist3r
Blacklist3r The goal of this project is to accumulate the secret keys / secret materials related to various web frameworks, that are publicly available and potentially used by developers. These secrets will be utilized by the Blacklist3r tools to audit the target application and verify the usage ...
CVE-2019-18276
To exploit the CVE-2019-18276 vulnerability, open this directory in a terminal and run the commands: cd ./demonstration ./make The commands to type in the virtual machine are: ./creationsecret.sh hacker ./exploit.sh 1000 enable -f ./libpwn.so asd cat /home/victime/.secret.txt...
CVE-2025-32463_PoC
CVE-2025-32463 NVD CVE-2025-32463 In most cases, GCC is not installed by default on target servers. This proof of concept provides a precompiled version to ensure it can be executed immediately on affected systems. Usage 1. Compile the woot1337.c file: root@kitploit: gcc -shared -fPIC...
CVE-2020-25867
CVE-2020-25867 : SoPlanning Sharing Key Bypass Information Vulnerable Version : 1.46.01 Fixed Version : 1.47 and above CVE : CVE-2020-25867 Timeline 26/06/2020 : This vulnerability report was sent to the vendor 21/07/2020 : The vulnerability is fixed Risks The sharing key system is vulnerable to...
phpMussel
What is phpMussel? An ideal solution for shared hosting environments, where it's often not possible to utilise or install conventional anti-virus protection solutions, phpMussel is a PHP script designed to detect trojans, viruses, malware and other threats within files uploaded to your system...
pulledpork
PulledPork PulledPork for Snort and Suricata rule management from Google code Find us on Libera.Chat IRC pulledpork Copyright C 2009-2021 JJ Cummings, Michael Shirk and the PulledPork Team! Thank you for choosing to use PulledPork! This file provides some basic guidance on the usage of PulledPork...
Android-Disassembler
Android-Disassembler CodeFactor Analyze malicious app on your phone Maintenance status Maintenance has resumed, but the project is still in a recovery and modernization phase. The baseline now expects initialized git submodules before building. Default open/import/export flows now use SAF-first...
hosting
General Information: This is a setup for a Tor based shared hosting server. It is provided as is and before putting it into production you should make changes according to your needs. This is a work in progress and you should carefully check the commit history for changes before updating. For a...
onecli
The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted root@kitploit: git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setu...
iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC
Improper Input Validation in Siri Shortcuts and Shared Web Credentials Discovered by: Joseph Goydish II Date Discovered: August 20, 2025 Severity: High Executive Summary This report outlines a high-severity vulnerability chain affecting Apple’s Siri Shortcuts and Shared Web Credentials SWC...
CVE-2024-37032-PoC
CVE-2024-37032 Probllama PoC — Ollama Path Traversal and Privilege Escalation This repository contains a proof of concept FastAPI registry server, connector script, and preload demo library for authorized lab testing. Use this only on systems you own or are explicitly allowed to test. Files...
Umay
IoT Malware Similarity Analysis Platform View Demo Table of contents About The Project Current features Getting Started Prerequisites Installation Create your own dataset Contributing License About The Project This project provides IoT malware similarity analysis based on shared codes. It helps t...