CVE-2026-84361

Composer (PHP dependency manager) versions 1.0 through 2.2.30 and 2.10.3 are affected by a vulnerability in Composer\Util\Perforce . A malicious dependency package from a custom Composer repository or untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh:...

CVE-2026-84361 Composer: Perforce source URL permits P4PORT `rsh:` command execution

Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4PORT value. When the Perforce p4 clien...

Outpacket

📦 Outpacket Tired of impacket? This cheatsheet maps common impacket workflows to their modern alternatives Index Auth Quick Reference 1. Remote Execution WMI Exec · wmiexec.py DCOM Exec · dcomexec.py Service-Based Exec · smbexec.py · psexec.py Scheduled Task Exec · atexec.py Bulk Execution ·...

skylift

SkyLift SkyLift is an experimental Wi-Fi/BT geolocation spoofing device that uses the ESP8266 or ESP32 boards to broadcast Wi-Fi beacon frames or BT advertisements that emulate the wireless infrastructure from a remote/target location. The above example shows a successful georelocation to Peter...

aws-suture

tl;dr root@kitploit: $ git clone [email protected]:pblittle/suture.git $ cd suture $ bundle install $ bundle exec ./bin/suture --help $ bundle exec ./bin/suture check Suture Suture is a tool for running arbitrary commands against your AWS EC2 instances. You can run it against an individual...

HashDump-BypassEDR

1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...

CVE-2025-55182-GUI

CVE-2025-55182 Vulnerability Detection and Exploitation Tool GUI Version Project Overview This project is a graphical detection and exploitation tool targeting the high-risk CVE-2025-55182 vulnerability, developed with Python + tkinter to provide a fully graphical interface. It eliminates the nee...

Exploit for Out-of-bounds Write in Fortinet Fortiproxy

FortiGate SSL-VPN kit recovered in the wild Research arch...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: Marco de Explotación RFCOMM Bluetooth "Heartbleed" CVE-2025-13834 Autor: Sastra Adi Wiguna Purple Elite Teaming Fecha: 20 de enero de 2026 Versión: 1.0 Réplica a nivel de sistema completo Licencia: SOLO USO EN RED TEAM N...

qlikview-poc-CVE-2024-29863

Affected application: QlikView Platform: Windows Issue: Local Privilege Escalation via MSI installer DLL hijacking race condition Discovered and reported by: Pawel Karwowski and Julian Horoszkiewicz Eviden Red Team Details: On systems with QuikView12 installed, it is possible for regular users to...

cve-2026-3359-exp

CVE-2026-3359 is an unauthenticated SQL Injection vulnerability situated within Web10's wordpress plugin "Form Maker" in all versions up to version 1.15.42. In order to use this PoC/exploit, first set up a virtual enviroment through the commands "virtualenv name of your enviroment here" or "venv...

MARMALADE-2-CVE-2025-67780-Exploit

MARMALADE 2/CVE-2025-67780 Exploit PoC Exploit PoCs for MARMALDE 2 CVE-2025-67780 vulnerability in Starlink Dishes Read my full blog on how I found this vulnerability and how you can make it do what you want: https://www.akawlabs.com/blog/starlink-grpc-execution I developed multiple...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux Firewall Blocklist Integration Automated malware IP blocklist for Linux servers — supports nftables and iptables+ipset 📋 Table of Contents Quick Start Overview How It Works Prerequisites Detailed Installation Configuration Usage and Verification Troubleshooting Uninstalling Licens...

nextploiter

nextploiter Exploit tool for NextJS Usage Commands Usage root@kitploit: $ npm install -g nextploiter $ nextploiter COMMAND running command... $ nextploiter --version nextploiter/1.0.0 darwin-arm64 node-v24.12.0 $ nextploiter --help COMMAND USAGE $ nextploiter COMMAND ... Commands nextploiter help...

cve-2011-2553

Notice: This repository contains educational material for testing in a controlled laboratory. Do not use the files or techniques described here against systems that are not your own or that do not have explicit authorization. The goal is learning and strengthening security. CVE-2011-2553 FTP...

Important: Red Hat Security Advisory: dracut security update

An update for dracut is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...

CVE-2025-64424-Coolify-

Coolify CVE-2025-64424 RCE Vulnerability Lab Lesson Plan: Red74-Coolio-CVE-2025-64424 Disclaimer: This repository contains a deliberately vulnerable version of Coolify and is intended for educational purposes, CTF environments, and cybersecurity training. Do not deploy this in a production...

OpenSSL_1_0_1g_CVE-2015-1788

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...