CVE-2011-2523

CVE-2011-2523 These are notes for creating the attack methodology in a controlled environment. It is assumed that the exercise is black-box, so I have no knowledge of the victim system. 1. Download the necessary ISOs, both Metasploitable2 and Kali or any other. 2. Important: the environment is...

Umbrella

Umbrella Dropper Copyright 2017 Umbrella Written by: Alisson Moretto - 4w4k3 Umbrella is a file dropper dedicated to pentest, its download files on target system are execute them without a double execution of exe, only of embed. To compromise the same target again, you need delete this folder on...

ShadowSteal

ShadowSteal | CVE-2021-36934 Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM Local Privilege Escalation LPE. Not OPSEC safe.... yet ;. I do not claim credit for the discovery of this exploit. Quick Start Build with Docker Getting started with ShadowSteal is now easier than...

SNMP-Brute

SNMP Brute SNMP brute force, enumeration, CISCO config downloader and password cracking script. Listens for any responses to the brute force community strings, effectively minimising wait time. Requirements metasploit snmpwalk snmpstat john the ripper Usage python snmp-brute.py -t IP Options...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

clrinject

clrinject Inyecta un ensamblado EXE o DLL de C en cualquier runtime CLR y AppDomain de otro proceso. El ensamblado inyectado puede entonces acceder a instancias estáticas de las clases del proceso infectado y por lo tanto afectar su estado interno. Uso clrinject-cli.exe -p -a Abre el proceso con ...

clrinject

clrinject Injects C EXE or DLL Assembly into any CLR runtime and AppDomain of another process. The injected assembly can then access static instances of the injectee process's classes and therefore affect it's internal state. Usage clrinject-cli.exe -p -a Opens process with id or name , inject EX...

LANs.py

LANs.py NOTE I do not maintain this anymore. I highly suggest using bettercap instead for ARP and MITM needs. Automatically find the most active WLAN users then spy on one of them and/or inject arbitrary HTML/JS into pages they visit. Individually poisons the ARP tables of the target box, the...

react2shell-CVE-2025-55182

Attack component contains the attack code. Just uncomment it and press the button to pefrom attach. To run your own code on server exploit simply change the value of prefix key in the payload. See the AttackString file for examples...

PacketWhisper

PacketWhisper PacketWhisper - Stealthily Transfer Data & Defeat Attribution Using DNS Queries & Text-Based Steganography, without the need for attacker-controlled Name Servers or domains; Evade DLP/MLS Devices; Defeat Data- & DNS Name Server Whitelisting Controls. Convert any file type e.g...

cve-2018-17182

define GNUSOURCE include include include include include include include include include include include int vmaspamcontrolfd = -1; int threaddonefd = -1; int vmaspamdonefd = -1; void semincint fd uint64t val = 1; if writefd, &val, 8 != 8 err1, "seminc"; void semdecint fd uint64t val; if readfd,...

CapTipper

CapTipper v0.3 CapTipper v0.3: http://www.omriher.com/2015/08/captipper-v03-is-out.html CapTipper v0.2: http://www.omriher.com/2015/03/captipper-02-released.html CapTipper v0.1: http://www.omriher.com/2015/01/captipper-malicious-http-traffic.html CapTipper is a python tool to analyze, explore and...

CVE-2023-24055

CVE-2023-24055 POC and Scanner for CVE-2023-24055 Use at your own risk! configscanner.py A simple Parser for the KeePass config file running unter Windows. The tool will open the directory %APPDATA%\Roaming\KeePass\KeePass.config.xml and will output all triggers. The triggers Execute command line...

botnet-hackpack

SIMPLE C&C BOTNET This hackpack will walk you through implementing a basic framework that fundamentally characterizes a botnet. It might help if you've worked with C before. If you liked this tutorial, be sure to star this repo! Note: Don't use anything you learn here for malevolent purposes. Thi...

duckhunt

DuckHunter Prevent RubberDucky or other keystroke injection attacks Try Out the new setup GUI it helps you to setup the software and we have just released a new feature that allows you to run the script every time your computer starts automatically Read this program's postmortem at myblog Intro...

DirtyPipePython

dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...

database-druid

druid encode java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools 密码 Example: java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools jas502n root@kitploit:...

CVE-2023-23752

CVE-2023-23752 Exploit para CVE-2023-23752 4.0.0 GET /api/index.php/v1/config/application?public=true HTTP/1.1 Host: 10.9.49.205 User-Agent: curl/7.68.0 Accept: / Mark bundle as not supporting multiuse HTTP/1.1 200 OK Date: Mon, 20 Mar 2023 15:14:05 GMT Server: Apache/2.4.41 Ubuntu x-frame-option...

CVE-2021-40865

CVE-2021-40865 CVE-2021-40865 POC/exploit-poc root@kitploit: import org.apache.commons.io.IOUtils; import org.apache.storm.serialization.KryoValuesSerializer; import ysoserial.payloads.ObjectPayload; import ysoserial.payloads.URLDNS; import java.io.; import java.math.BigInteger; import java.net.;...

SecurityRAT

OWASP Security RAT Requirement Automation Tool is a tool helping you manage security requirements in your agile development projects. The typical use case is: specify parameters of the software artifact you're developing based on this information, list of common security requirements is generated...