psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

psc

PortShellCrypter -- PSC 该项目及其姊妹项目crash 属于我的反审查工具集，用于在敌对的审查环境中建立完全加密的 shell 和 TCP/UDP 转发。它同样适用于取证场景，当没有其他可用手段时，通过 UART 或 adb 从设备中转储数据。 通过 UART 连接到 Pi 的 DNS 查询和 SSH 会话转发 PSC 允许对 shell 会话进行端到端加密，支持单跳或多跳，且不依赖底层传输方式，只要传输层可靠并能收发 Base64 编码数据而不被修改/过滤即可。除了获得的端到端伪终端（例如在端口 shell 中），你还可以转发 TCP 和 UDP 连接，类似于...

webvm

WebVM This repository hosts the source code for https://webvm.io, a Linux virtual machine that runs in your browser. Try out the new Alpine / Xorg / i3 graphical environment: https://webvm.io/alpine.html WebVM is a server-less virtual environment running fully client-side in HTML5/WebAssembly. It...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

CVE-2023-41425

Wonder CMS RCE | | Description : XSS to RCE, Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat form+action=" EOF...

CVE-2014-4322

poc code works on Nexus 5 Android4.4.4 Gain privileges：system-root，as part of https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege author：andy website：https://blog.csdn.net/koozxcv The exploit must be excuted as system privilege and serveral specific SELinux context.If exploit...

CVE-2024-4577-RCE-PoC

CVE-2024-4577 RCE Exploit While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system. This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary...

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE Bypass POC Summary During normal operation of Nextcloud's E2EEv2 protocol, clients cryptographically sign folder-metadata before uploading to the server. This ensures the metadata has not been tampered with when it is re-fetched for the purposes of file-sharing or synci...

CVE-2024-50968

CVE-2024-50968 Description A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker...

cve-2022-49186-research

CVE-2022-49186: Linux Kernel Privilege Escalation Research Overview Security research and proof-of-concept exploit for CVE-2022-49186, a Linux kernel vulnerability in the Visconti clock driver that enables local privilege escalation through array overflow. Vulnerability Details Type : Array...

CVE-2023-41425

https://sploitus.com/exploit?id=3A833277-4844-5F02-AFEF-5EA6BA8AC1AC Wonder CMS RCE | | Description : XSS to RCE, Wonder CMS 3.2.0 evil/evil.php EOF root@kitploit: zip -r evil.zip evil/ JS payload that will install the new theme root@kitploit: cat xssrce.js var xhr=new XMLHttpRequest;...

CVE-2023-41892_PoC

CVE-2023-41892 Craft CMS PoC This repository contains proof-of-concept scripts and a local Vulhub lab for reproducing CVE-2023-41892, a pre-authenticated remote code execution vulnerability in Craft CMS. Use this project only in an authorized local lab or other systems where you have explicit...

CVE-2024-7479_CVE-2024-7481

CVE-2024-7479 & CVE-2024-7481 TeamViewer User to Kernel Elevation of Privilege This repository contains the exploit proof of concept of a vulnerability in TeamViewer that enables an unprivileged user to load an arbitrary Kernel Driver into the system. I would like to thank Zero Day Initiative for...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit ProxyShell/ProxyLogon, another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations...

Audit-BlackBox-Web-to-Root

Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 XSS to RCE, Wonder CMS 3.2.0 = 3.4.2 Usage root@kitploit: ➜ CVE-2023-41425 python3 exploit.py Enter target URL RHOST, e.g., http://example.com/loginURL: http://redacted.com/loginURL Enter your local host IP LHOST, e.g., 10.10.14.xxx: xx.xx.xx.xx Enter your local web...

mothership_c2

Mothership C2 $\textcolorred\textDISCLAIMER!$ $\textcolorred\textTHIS TOOL IS FOR ETHICAL USE ONLY!$ Description Mothership C2 is a command and control server written in python Features Supports end-to-end encryption for sending and receiving commands Uses HTTP for everything Currently supports...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

CVE-2021-36747

CVE-2021-36747 Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form. Discovered: May 11th, 2018 The Blackboard Security Team has been notified of this issue. They acknowledged the vulnerability on May 14, 2018. Description: The Blackboard tool commonly...

rapiddns

Description Simple python module unofficial allowing you to access data from rapiddns.io. You can also use it as a module. As mentioned on the rapiddns.io: Rapiddns currently has more than 3 billion DNS resolution data, supporting A, CNAME, AAAA, MX types. A records 2.1 billion, CNAME records 250...