CVE-2024-27632

CVE-2024-27632 Vulnerability Details Overview In Savane v3.12 and prior, the Unix timestamp is used as a seed in the Pseudo-Random Number Generator PRNG used to generate Cross-Site Request Forgery CSRF protection tokens formid. As a result, an attacker may be able to independently generate the sa...

CVE-2021-36260-metasploit

CVE-2021-36260-metasploit the metasploit scriptPOC about CVE-2021-36260. A command injection vulnerability in the web server of some Hikvision product, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. preparation POC...

DriverSentinel

🛡️ DriverSentinel 🛡️ Vulnerable Windows Driver Scanner DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them against the LOLDrivers.io database. Features • Installation • Usage • How It Works 📋 Table of Contents Features...

CVE-2019-19654

CVE-2019-19654 Chevereto denial of service - = 3.13.5 Core in the /dashboard/bulk tool. An attacker with an admin account can insert any path. The bulk importer will remove any file and folder it has access to. Basically you can make the website self-destruct. Add job to "import" /var/www/html...

nodejshell

NODEJSHELL - Reverse shell exploit for NodeJs deserialization CVE-2017-5941 The exploit automatically generates the reverse shell payload which is encoded in decimal and then in base64. After that, this payload is sent via an HTTP POST request that serializes the user input and stores it in a...

CVE-2021-42697

Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. References MITRE Akka blog Arbitrary nesting of...

ayaFlow

ayaFlow ayaFlow es un analizador de tráfico de red escrito en Rust + eBPF, construido con Aya. Ejecuta un agente por nodo Linux, adjunta un clasificador TC en ingreso y egreso, y expone datos de tráfico en vivo, historial respaldado por SQLite y métricas de Prometheus. Qué hace Captura tráfico...

SMB_CVE-2025-24071

CVE-2025-24071 PoC SMB + TAR Extraction Method This is a PoC for exploiting CVE-2025-24071 , a vulnerability in Windows that allows NTLM hash leakage via .library-ms files. This version diverges slightly from others by using a .tar archive instead of a .zip, which improves compatibility in SMB-on...

qubes-mirage-firewall

qubes-mirage-firewall A unikernel that can run as a QubesOS ProxyVM, replacing sys-firewall. It uses the mirage-qubes library to implement the Qubes protocols. See A Unikernel Firewall for QubesOS for more details. Binary releases Pre-built binaries are available from the releases page. See the...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

fluxion

Fluxion es el futuro de los ataques MITM WPA Fluxion es una herramienta de auditoría de seguridad e investigación de ingeniería social. Es una remake de linset por vk496 con con suerte menos errores y más funcionalidad. El script intenta recuperar la clave WPA/WPA2 de un punto de acceso objetivo...

CVE-2021-43008-AdminerRead

CVE-2021-43008 - AdminerRead Exploit tool for Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability Installation root@kitploit: git clone https://github.com/p0dalirius/AdminerRead cd AdminerRead sudo python3 setup.py install Usage Vulnerable versions...

pySigma

pySigma pySigma is a python library that parses and converts Sigma rules into queries. It is a replacement for the legacy Sigma toolchain sigmac with a much cleaner design and is almost fully tested. Backends for support of conversion into query languages and processing pipelines for transforming...

xnLinkFinder

Acerca de - v8.2 Esta es una herramienta utilizada para descubrir endpoints, descubrir parámetros potenciales, generar una lista de palabras específica del objetivo y encontrar secretos para un objetivo dado. Puede encontrarlos mediante: rastreando un objetivo proporcionar un dominio/URL rastrean...

resiprocate

Descripción general El repositorio reSIProcate contiene las siguientes bibliotecas y aplicaciones C++: Biblioteca resip: pila SIP completa RFC3261 Biblioteca dum Dialog Usage Manager: biblioteca SIP de alto nivel para crear agentes de usuario SIP sin pila de medios Biblioteca recon: biblioteca SI...

CVE-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

pybof

PyBOF Run Beacon Object files through python in-memory loading and execution of BOFs PyBOF enables Python3 to load Beacon Object Files via bytes and execute a target BOF function in a Python interpreter Basic Usage Run a simple BOF with no required arguments root@kitploit: data =...

t14m4t

t14m4t t14m4t es una herramienta automatizada de ataque de fuerza bruta, envoltorio de THC-Hydra y Nmap Security Scanner. t14m4t escanea un objetivo definido por el usuario o un documento que contenga objetivos en busca de puertos abiertos de servicios compatibles con t14m4t , y luego inicia un...

h3-cli

NodeZero MCP Server The NodeZero MCP Server is now available, enabling you to run and manage a locally hosted MCP Server that brings NodeZero’s Find, Fix, Verify FFV capabilities directly to your development and security workflows. MCP Readme h3-cli: CLI tool for the Horizon3.ai API h3-cli is a...

Hulios

Hulios Hardened Universal Linux Invisibility and Onion System Hulios is an eBPF-powered, transparent Tor VPN gateway for Linux. It secures outbound network traffic by redirecting TCP sockets and DNS queries through an embedded Arti Tor client instance and a localized Hickory-based DNS resolver. B...