mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

mySCADA myPRO 7 Hardcoded Credentials CVE-2018-11311 https://vulners.com/cve/CVE-2018-11311 https://www.exploit-db.com/exploits/44656/ http://myscada.org/wp-content/uploads/downloads/BOXv7/changelog.txt root@kitploit: Changelog v7.0.46 ----------------- - fix of possible vulnerability as describe...

cve-2021-1675

〖EXP〗Ladon Printer Vulnerability Privilege Escalation CVE-2021-1675 Reproduction http://k8gege.org/p/CVE-2021-1675.html Overview On June 9, Microsoft released the June security update patch, fixing 50 security vulnerabilities, including a Windows Print Spooler privilege escalation vulnerability,...

CVE-2024-1403

CVE-2024-1403 Progress OpenEdge Authentication Bypass An exploit proof of concept for Progress OpenEdge CVE-2024-1403. Blog Post More details here: https://www.horizon3.ai/attack-research/cve-2024-1403-progress-openedge-authentication-bypass-deep-dive Usage You must provide your own versions of t...

reload.sh

reload.sh No lo hagas... Por favor, no lo ejecutes en sistemas en vivo ej. producción ni en tu computadora personal donde almacenas datos críticos. Esta receta te muestra cómo instalar un sistema limpio donde otro sistema ya existe y está funcionando. ¡Es realmente genial y asombroso, pero muy...

reload.sh

reload.sh Don't do it... Please don't do it on live systems e.g. production or on your private computer where you stored critical data. This recipe show you how to install fresh system where other system exist and running. It's really cool and amazing but very risky! If you want to go into the...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

EUVD-2026-84869

Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to apply the internal-connection filter to OAuth endpoint requests, which allows a System Administrator to make the server issue requests to internal network addresses and read the responses via the...

CVE-2026-96259

Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, and 11.10.x

mpDNS

mpDNS aka multi-purpose DNS Server Simple, configurable DNS Server with multiple useful features Python 3 names.db - holds all custom records see examples Simple wildcards like .example.com Catch unicode dns requests Custom actions aka macro: shellexec::dig google.com +short - Execute shell comma...

zeno

Zeno Framework Installation root@kitploit: cd git clone https://github.com/Traxes/zeno --recursive sudo pip3 install termcolor tqdm git clone https://github.com/Z3Prover/z3 --recursive cd z3 python3 scripts/mkmake.py --python cd build make sudo make install cd /zeno Usage root@kitploit: /zeno$...

CVE-2022-26503

CVE-2022-26503 Summary: Vulnerability CVE-2022-26503 in Veeam Agent for Microsoft Windows allows local privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code with LOCAL SYSTEM privileges. Shout out to @ultrayoba The Patch: The implemented patch...

chimera

Chimera 将不受信任的代码沙盒化，并提供到主机的安全访问。 Chimera 是一个用于不完全受信任代码的用户态沙箱——非常适合在与你共享的机器上运行任意生成命令的编码代理。它限制进程对宿主机的操作，同时仍允许其访问宿主机的文件和工具，从而使代码保持有用，但无法破坏系统。由于作为普通程序运行，Chimera 无需虚拟机、容器、特殊硬件、内核特性或特权——它在你的代码已经运行的地方就能工作。 它通过在同一ISA上进行动态二进制转换来运行未经修改的二进制文件，拦截每个客户系统调用，从而让沙箱决定其行为。Chimera 包含两个部分：一个用于在shell中包装进程的命令行工具...

bulk_extractor

bulkextractor es una herramienta de explotación forense digital de alto rendimiento. Es un botón de "obtener evidencia" que escanea rápidamente cualquier tipo de entrada imágenes de disco, archivos, directorios de archivos, etc. y extrae información estructurada como direcciones de correo...

Lenovo-CVE-2025-8061

Lenovo-CVE-2025-8061 针对 LnvMSRIO.sys（3.1.0.36）驱动程序弹出系统 Shell 的 PoC。 所有功劳归于原作者 来自 Quarkslab 的 Luis Casvella。 此 PoC 适用于最新的 Windows 11 版本 24H2（需禁用 KVAShadowing 和内核隔离！） !NOTE 此项目使用最新的 Visual Studio 22 编译。 利用时的实用说明 !CAUTION 此漏洞利用的偏移量针对以下 Windows 版本硬编码：Edition build lab:...

DECEIVE

DECEIVE DECEIVE，即带评估集成验证引擎的欺骗系统 （DECeption with Evaluative Integrated Validation Engine），是一个高交互、低维护的蜜罐系统。与大多数高交互蜜罐不同，DECEIVE 不会向攻击者提供任何真实系统的访问权限。AI 实际承担了模拟逼真蜜罐系统的全部工作，其依据是一个可配置的系统提示词，描述您希望模拟的系统类型。与许多其他需要投入大量精力来填充真实用户、数据和应用程序的高交互蜜罐不同，DECEIVE 的 AI 后端会自动为您完成这一切。 此版本的 DECEIVE 通过 SSH 协议模拟 Linux...

system_bt_AOSP10_r33_CVE-2020-0377

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

CVE-2026-76713

A vulnerability exists in the maintenance restore functionality of Analytics and Location Engine ALE. Successful exploitation of this vulnerability could allow an authenticated remote attacker to gain unauthorized access to the file system with root privileges, potentially resulting in full syste...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 发现者 Netanel Cohen 和 Tomer Peled，BugSec 的安全研究人员。 描述 利用 Wondershare Dr.Fone 的 POC 示例。 Dr.Fone 是 wondershare 开发的手机工具包，存在 RCE 漏洞。 仅需网络访问，我们就能以 SYSTEM 用户身份执行远程代码。 存在漏洞的服务： InstallAssistService.exe ElevationService.exe 测试版本：12.0.7 、 11.4 用法 修改 IP 和端口并执行...

CVE-2024-3094-info

CVE-2024-3094-info CVE-2024-3094 PoC Exploration https://github.com/amlweems/xzbot https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Lasse Collin response https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...

MultiPotato

MultiPotato 首先，感谢 @splintercode 和 @decoderit 开发了 RoguePotato，因为此代码大量基于它。 这只是另一个利用 SeImpersonate 权限获取 SYSTEM 权限的 Potao。但与其它 Potao 不同的是： 它不包含任何用于武器化的 SYSTEM 身份验证触发机制。相反，该代码可以让你自行集成你喜欢的触发方式。 它不仅仅使用 CreateProcessWithTokenW 来生成新进程。你可以选择 CreateProcessWithTokenW、CreateProcessAsUserW、CreateUser 和...