CTFs

CTFs Writeups / Archivos para algunos de los Cyber CTFs que he realizado También he incluido una lista de recursos de CTF así como una chuleta completa que cubre muchísimos desafíos comunes de CTF !NOTE Ahora hay un espejo web de este repositorio en hackback.zip Tabla de Contenidos Recursos Canal...

CVE-2024-3867

CVE-2024-3867 This repository shows u some information on this vulnerability, which were found by me. Here is the official description given: The archive-tainacan-collection theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate...

CVE-2025-50867

A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization. Vulnerability Type : SQL Injection Vendor of Product :...

nopowershell

NoPowerShell NoPowerShell is a tool implemented in C which supports executing PowerShell-like commands while remaining invisible to any PowerShell logging mechanisms. This .NET Framework 2 compatible binary can be loaded in Cobalt Strike to execute commands in-memory. No...

CF-Hero

CF-Hero CF-Hero What's it? • Features • Background • Installation • Usage • Running cf-hero • ZoomEye Sponsor • To Do What's it? CF-Hero is a comprehensive reconnaissance tool developed to discover the real IP addresses of web applications protected by Cloudflare. It performs multi-source...

CVE-2023-26982

CVE-2023-26982 Vulnerability Explanation: Trudesk v1.2.6 was discovered to contain a stored cross-site scripting XSS vulnerability via the Add Tags parameter under the Create Ticket function. Attack Vectors: The attacker must create some ticket and then edit tags in the ticket and insert the XSS...

CVE-2022-23614

CVE-2022-23614 PoC for CVE-2022-23614, GHSA-5mv2-rx3q-4w2v Twig sort filter code execution/sandbox bypass As seen in this commit - https://github.com/twigphp/Twig/commit/.., twig was passing user supplied function name as a callback parameter to uasort here, thus leading to arbitrary code executi...

Parth

Parth Heuristic Vulnerable Parameter Scanner Introduction Some HTTP parameter names are more commonly associated with one functionality than the others. For example, the parameter ?url= usually contains URLs as the value and hence often falls victim to file inclusion, open redirect and SSRF...

exploit-CVE-2016-8016-25

McAfee Virus Scan for Linux multiple remote flaws THIS EXPLOIT AND ALL THE CODE IN THIS REPO WERE REMOVED TO AVOID ANY PROBLEMS REGARDING VIOLATING ANY MCAFEE LICENSE McAfee VirusScan Enterprise for Linux is a enterprise antivirus solution by Mcafee. Its unique, Linux-based on- access scanner...

CVE-2026-90817

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2026-90817

CVE-2026-90817 is an unauthenticated Remote Code Execution vulnerability in REDCap 13.3.0 and higher , rated CVSS 9.8 (Critical) . The flaw resides in the survey passthrough routing and Data Import processing logic , where an attacker can manipulate HTTP requests to reach an unintended controller...

EUVD-2026-83738

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating HTTP requests to access an unintended controller route from a public survey context and by...

CVE-2022-28346

CVE-2022-28346 SQL injection in QuerySet.annotate, aggregate, and extra Setup: Run ./setup.sh for initial setup Open the docker image to initiate the database: docker exec -it containerid /bin/bash And run the following commands: root@kitploit: python manage.py makemigrations cve202228346 python...

CVE-2024-9796

CVE-2024-9796 WordPress WP-Advanced-Search = 5.0.12 time-based blind IF - comment Payload: t=wpautosuggest&f=ifnow=sysdate,SLEEP9,0-- wXyW&l=5&type=0&e=utf-8&q=c&limit=5&timestamp=13672261755853'...

ms-photos_NTLM_Leak

Microsoft ms-photos URI NTLM Leak New vulnerability allowing to leak NTLM hashes from browsers with one click By Ruben Enkaoua Description The Microsoft ms-photos URI scheme takes fileName as parameter, which can be submitted with a UNC path, leaking NTLMv2-SSP hashes one opened. By crafting a...

sqlmap-ai

SQLMap AI Assistant An AI-powered wrapper around SQLMap that makes SQL injection testing more accessible and automated. Features Core Features AI-Assisted Testing - Intelligent vulnerability analysis and recommendations Adaptive Testing - Step-by-step testing that adapts to target responses...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted Git service similar to a private version of GitHub, designed to run easily on low-resource servers. The CVE-2025-8110 vulnerability is a critical security flaw that allows an attacker to bypass path restrictions by using symlinks. By...

cve-mcp-server

🛡️ CVE MCP Server AI-powered security intelligence at your fingertips — 28 tools + a one-calltriagecve orchestrator, 24 data sources, one protocol. A production-grade Model Context Protocol MCP server that turns Claude into a full-spectrum security analyst. Instead of juggling 15+ browser tabs...

CVE-2021-38817-Remote-OS-Command-Injection

CVE-2021-38817-Remote-OS-Command-Injection Authenticated Remote OS Command Injection/Remote Code Execution in TastyIgniter v3.0.7 Sendmail web part CVE-2021-38817 An authenticated remote OS command injection vulnerability exists in the TastyIgniter v3.0.7 Restaurtant CMS Sendmail configuration me...

WP_CROP_RCE

WordPress Image CROP RCE Analysis Report POC & Dockerfile : https://github.com/synod2/WPCROPRCE This document covers CVE-2019-8942 and CVE-2019-8943, known as WordPress Image CROP RCE, which are vulnerabilities found in WordPress versions prior to 4.9.9 and 5.0.1. CVE Number| Disclosure Date|...