Lucene search
+L

1033 matches found

Kitploit
Kitploit
added 2026/09/13 11:49 a.m.11 views

z80-sans

Z80 Sans What's your favourite disassembler? Mine's a font: https://github.com/user-attachments/assets/bb6ceb18-c2fd-40a9-be4f-202321a214d9 This font converts sequences of hexadecimal lowercase characters into disassembled Z80 instructions, by making extensive use of OpenType's Glyph Substitution...

5.8AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/13 11:20 a.m.12 views

binprotect

Build instructions See 4. Building for build instructions. Contents 1. Introduction 2. Binary rewriter 2.1. Relative address tracking 2.2. Disassembly 2.2.1. Basic block splitting 2.2.2. Indirect control flow 2.2.2.1. Jump tables 2.2.2.1.1. Bounded jump tables 2.2.2.1.2. Unbounded jump tables...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 11:01 a.m.9 views

longtongue

Generar lista personalizada de contraseñas/frases basada en información del objetivo Codificado con 💙 por edoardottt ¡Compartir en Twitter! Instalación ⬇️ pipx root@kitploit: pipx install longtongue Código fuente root@kitploit: git clone https://github.com/edoardottt/longtongue.git cd longtongue...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/13 10:22 a.m.6 views

CVE-2021-42694

CVE-2021-42694 Este script implementa una herramienta de detección de homoglifos Homoglyph, utilizada principalmente para detectar posibles vulnerabilidades CVE-2021-42694 en el código. Permíteme explicar en detalle sus funciones principales: Funciones principales: Detección de ataques de...

8.3CVSS7.9AI score0.0491EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 8:54 a.m.6 views

CVE-2021-44228

Análisis de CVE-2021-44228 ¿Cómo funciona? A continuación se muestra un proceso detallado de un caso de inyección remota explotando la vulnerabilidad log4shell. Primero, hay 3 partes que debemos conocer: 1. Log4j2 permite el registro de datos utilizando una función llamada sustitución de búsqueda...

10CVSS7.4AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/13 8:24 a.m.92 views

psudohash

psudohash Cool New Features of v1.1.0 Special thanks to DavidAngelos: ▶️ Added a progress bar in every step to track execution. ▶️ Added options: In-order joins -i / --inorder: join keywords only in the original order e.g. foo,bar,baz → foo, bar, baz, foobar, foobaz, barbaz, foobarbaz. All-order...

5.7AI score
SaveExploits0References2
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.81 views

Spring Cloud Config Server - Path Traversal

Spring Cloud 3.1.x 3.1.13, 4.1.x 4.1.9, 4.2.x 4.2.3, 4.3.x 4.3.2, and 5.0.x 5.0.2 contain a path traversal caused by profile parameter substitution in Config Server using native file system backend, letting attackers access files outside configured directories, exploit requires crafted request. i...

8.6CVSS7.6AI score0.0122EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/12 8:24 p.m.7 views

Invoke-DOSfuscation

Invoke-DOSfuscation v1.0 Introduction Invoke-DOSfuscation is a PowerShell v2.0+ compatible cmd.exe command obfuscation framework. White paper: https://www.fireeye.com/blog/threat-research/2018/03/dosfuscation-exploring-obfuscation-and-detection-techniques.html Background Over the past several yea...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 3:37 p.m.7 views

Chimera

Chimera es un script de ofuscación de PowerShell brillante y muy improvisado diseñado para evitar AMSI y soluciones antivirus. Digiere PS1 maliciosos conocidos por activar AV y utiliza sustitución de cadenas y concatenación de variables para evadir firmas de detección comunes. Chimera fue creado...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/12 3:36 p.m.7 views

ghost

ghost ghost es un RAT ligero que le da al servidor/atacante acceso remoto total al intérprete de línea de comandos cmd.exe del usuario. Se le permite ejecutar comandos silenciosamente sin que el cliente/zombi se dé cuenta. El servidor/atacante también tiene la capacidad de descargar y ejecutar...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 12:14 p.m.6 views

Malleable-C2-Randomizer

Malleable-C2-Randomizer Este script randomiza perfiles Malleable C2 de Cobalt Strike mediante el uso de un metalenguaje, reduciendo así las posibilidades de activar controles de detección basados en firmas. En resumen, el script analiza la plantilla proporcionada, sustituye las variables por un...

5.9AI score
SaveExploits0References1
OSV
OSV
added 2026/09/11 9:05 p.m.6 views

CVE-2026-54174 melange: Incomplete package integrity verification allows data section substitution

melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to version 0.50.4, verified the control section hash .PKGINFO etc. against the signed APKINDEX, but never verified the data section hash the actual package files tha...

8.3CVSS6AI score
SaveExploits0References3
CVE
CVE
added 2026/09/11 9:05 p.m.35 views

CVE-2026-54174

CVE-2026-54174 affects melange (Chainguard's declarative APK package builder), specifically the Apko component (chainguard.dev/apko). Prior to Apko 1.2.9 (corresponding to melange 0.50.4), the tool verified the control section hash (.PKGINFO etc.) against the signed APKINDEX but never verified th...

8.3CVSS0.00105EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/11 6:41 p.m.10 views

CVE-2026-84196

A flaw was found in Kyverno. This server-side request forgery SSRF vulnerability in apiCall.service.url allows authenticated users to send arbitrary HTTP requests. By injecting user-controlled input through variable substitution, attackers can target internal services, cloud metadata endpoints, a...

8.3CVSS0.00263EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 6:29 a.m.7 views

dnsresolver

dnsresolver A Lightning-Fast DNS Resolver Table of Contents Installation Usage Basic Usage Resolving Hosts with Ports Virtual Host Enumeration Using Unresolved Domains Using Localhost Demonstrations Feedback License Installation Make sure you have rust installed, then run the following command to...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:12 a.m.8 views

CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open

CVE-2026-11111 – TOCTOU in File Permission Check Before Open Program Code Python root@kitploit: toctouserver.py - File server that checks permission then opens import os, time, tempfile from flask import Flask, request app = Flaskname SAFEDIR = '/tmp/safe' @app.route'/read' def readfile: filename...

8.1CVSS7.6AI score0.00228EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2026/09/10 9:21 p.m.8 views

n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

Impact The OAuth token endpoint bound an authorization code's first access token to the consented resource, but not its refresh token. Refreshing only checked that the requested resource was registered, not that it matched the original grant. An OAuth client approved for one workflow could refres...

7.6CVSS0.00218EPSS
SaveExploits0References9Affected Software1
Patchstack
Patchstack
added 2026/09/10 9:21 p.m.6 views

NPM: n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution

NPM: n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...

7.6CVSS0.00218EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2026/09/10 9:17 p.m.7 views

CVE-2026-89089

A SQL injection vulnerability exists in the JasperReports-based reporting feature of multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user ROLEUSER can run the shipped, default-enabled online reports "Maintenance contracts expired" AssetManagementMaintExpired and...

6.5CVSS0.00215EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 7:12 p.m.4 views

Log4J_Exploitation-Vulnerabiliy__CVE-2021-44228

Log4JExploitation-VulnerabiliyCVE-2021-44228. introducción Se ha encontrado una vulnerabilidad de ejecución remota de código relacionada con la librería de registro de Java Log4j. CVE-2021-44228 Esta vulnerabilidad ha causado un gran revuelo en la comunidad cibernética mundial; desde Wannacry no...

10CVSS7.2AI score0.99999EPSS
SaveExploits368
Rows per page
Query Builder