CVE-2024-38639

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...

LogMeInPoCHandleDup

LogMeIn / GoTo LMIInfo.sys 句柄复制漏洞 概述 LogMeIn / GoTo RMM 提供的 LMIInfo.sys 驱动程序中存在一个竞争条件，可导致任意句柄从 SYSTEM 进程中被复制出来。 核心问题在于设备对象缺乏适当的访问控制，再加上从系统进程中复制用户指定句柄这一明显糟糕的设计决策。 详细信息 IOCTL: 0x9211001C 输入缓冲区： root@kitploit: // LMI-Common.cpp typedef struct LMIINFO DWORD64 qwPid; DWORD64 reserved0; DWORD64...

CVE-2024-38639

CVE-2024-38639 is an improper authentication vulnerability affecting a QNAP product (identified by the CVELIST title referencing QTS and the QNAP security advisory QSA-24-37). The description explicitly states that QTS is not affected , and the vendor reports the vulnerability has been fixed in a...

CVE-2024-38639 QTS

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...

TokenStealer

TokenStealer 一个我前阵子编写的用于窃取和操作 Windows 令牌的简单工具。 部分代码取自并改编自 https://github.com/FSecureLABS/incognito 显然，你需要 Impersonation 或 AssignPrimary 特权以及 Debug 特权才能访问所有进程。 通常情况下，你应该以最高本地权限（如 SYSTEM）运行此工具。 root@kitploit: TokenStealer.exe + My personal simple and stupid Token Stealer... ; + v1.0 @decoderit 2023...

Pentest-Command

项目背景 在渗透测试过程中我们会使用到各类的框架，例如:MSF、CS、Empire、Impacket等，本项目的主要目的是收录在后渗透测试阶段中常用到的命令 基础知识 WIN目录介绍 a、开机启动程序目录 root@kitploit: C:\Users\Al1ex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup b、开机自启动程序该特色常被用于进行权限维持 root@kitploit: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup...

Exploit_Development

我的CVE概念验证 CVE-2022-3436 - 在线学生离校系统 v1.0 - CVE-2022-3436.py...

avscript

Avast Antivirus JavaScript Interpreter NOTE: On 03/11/2020 Avast announced they had decided to disable this interpreter globally! The main Avast antivirus process is called AvastSvc.exe, which runs as SYSTEM. That service loads the low level antivirus engine, and analyzes untrusted data received...

santa

Santa !NOTE 2025年現在、SantaはGoogleによってメンテナンスされていません。 既存のユーザーは、Santaの活発にメンテナンスされているフォーク（例：https://github.com/northpolesec/santa）への移行を推奨します。...

mig

MIG: Mozilla InvestiGator MIG is Mozilla's platform for investigative surgery of remote endpoints. ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the Mozilla InvestiGator MIG project. Mozilla is also no longer making use of this code internally. You are welcome to use this code as is...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

dnscrypt-autoinstall

dnscrypt-autoinstall This project has been archived, see last comment in 108. A script for installing and automatically configuring DNSCrypt on Linux-based systems. Description DNSCrypt is a protocol for securing communications between a client and a DNS resolver by encrypting DNS queries and...

golismero

GoLismeroとは？ GoLismeroは、セキュリティテストのためのオープンソースフレームワークです。現在はWebセキュリティに重点を置いていますが、他の種類のスキャンにも簡単に拡張できます。 このフレームワークの最も興味深い機能は次のとおりです。 真のプラットフォーム非依存。Windows、Linux、BSD、OS Xでテスト済み。 ネイティブライブラリへの依存なし。フレームワーク全体が純粋なPythonで記述されています。 Pythonや他のスクリプト言語で書かれた他のフレームワークと比較して優れたパフォーマンス。 非常に使いやすい。 プラグイン開発が非常に簡単。...

c4-meta-system

C4-META 系统 v1.0.0（研究原型） 用于多层 AI 防御的研究原型：C4 可解释性、集成分类器、反混淆、O₂ 安全引擎、ThoughtVirus 防御和 SVETILO 价值对齐。Alpha 级——已完成内部验证，外部审计待进行。 版本： 1.0.0-alpha | 状态： 研究原型 | 许可证： BSL 1.1（非生产环境免费；生产环境 → 商业授权） 作者： I.G. Selyutin。C4-META 模型合著者： N.I. Kovalev。 产品定位（2026-08）： 基于 Apache-2.0 c4protocol 构建的 更厚重的多层 C4 防御栈 （集成、O₂...

frida-fuzzer

Frida API Fuzzer v1.4 Copyright C 2020 Andrea Fioraldi [email protected] Released under the Apache License v2.0 This experimental fuzzer is meant to be used for API in-memory fuzzing. The design is highly inspired and based on AFL/AFL++. ATM the mutator is quite simple, just the AFL's havoc...

path-auditor

PathAuditor The PathAuditor is a tool meant to find file access related vulnerabilities by auditing libc functions. The idea is roughly as follows: Audit every call to filesystem related libc functions performed by the binary. Check if the path used in the syscall is user-writable. In this case a...

PrintSpoofer

PrintSpoofer From LOCAL/NETWORK SERVICE to SYSTEM by abusing SeImpersonatePrivilege on Windows 10 and Server 2016/2019. For more information: https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/. Usage You can check the help message using the -h option. root@kitploit:...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

CVE-2026-93468

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...