scorecard

OpenSSF Scorecard...

MOEW

Invisible Threats, Visible Solutions. Misaligned Opcode Exception Waterfall MOEW 3‑Stage SEH Waterfall PoC Benign, x86/Wow64 TL;DR: This PoC demonstrates a 3‑stage Structured Exception Handling SEH cascade caused by deliberate misaligned execution into raw byte blobs whose first valid instruction...

pefile

pefile pefile is a multi-platform Python module to parse and work with Portable Executable PE files. Most of the information contained in the PE file headers is accessible, as well as all the sections' details and data...

agent-bom

The marks above represent supported discovery, scanning, connection, deployment, or evidence backends—not identical connector depth. See the capability matrix...

CVE-2026-4112

SonicWall SMA 8200v: Privilege Escalation via Cross-Parameter Blind SQL Injection Firmware: 12.5.0-02283 Platform Hotfix on 12.5.0-02002 Base SonicWall Advisory 1. Summary A post-authentication blind SQL injection vulnerability in the SonicWall SMA 8200v management console port 8443 allows any...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

deepin-linux_reader_RCE-exploit

CVE-2023-50254 - Deepin Linux's default document viewer deepin-reader RCE CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that...

CVE-2020-1350

CVE-2020-1350 SIGRed Denial of Service PoC Exploit This repo has my version of a DoS PoC exploit for the SIGRed vulnerability disclosed by MS and Check Point Research on July 14th, 2020. @maxpl0it also wrote a PoC that he published on July 15th, but I structured my exploit a little differently th...

outpost

Outpost AWS Testing and Reporting Management Outpost is a simple tool to generate AWS configuration files for AssumeRole, a testing capability for verifying accounts work, and a report generator for ScoutSuite scan results. Run ScoutSuite Parse the results ✨Generate Report Findings✨ Installation...

CVE-2025-59287

CVE-2025-59287 WSUS CVE-2025-59287 – XML Deserialization RCE Reverse Shell A focused PoC to exploit WSUS CVE-2025-59287 via XML deserialization to achieve a Windows reverse shell. This script only supports a reverse shell payload no calc fallback. Target: Windows Server with WSUS role Technique:...

CVE-2025-2304-POC

CVE-2025-2304 PoC - Escalada de Privilegios en Camaleon CMS Una prueba de concepto PoC para CVE-2025-2304 , una vulnerabilidad crítica de asignación masiva en Camaleon CMS que permite la escalada de privilegios de usuarios con pocos permisos a administradores. root@kitploit: ██████╗ ██████╗ ██╗...

CVE-2024-42327

PoC para CVE-2024-42327 / ZBX-25623 Una cuenta de usuario no administrador en el frontend de Zabbix con el rol de Usuario predeterminado, o con cualquier otro rol que otorgue acceso a la API, puede explotar esta vulnerabilidad. Existe un SQLi en la clase CUser en la función addRelatedObjects; est...

CVE-2026-30944-PoC

🔓 CVE-2026-30944 StudioCMS Privilege Escalation via Insecure API Token Generation NVD • Advisory • CWE-639 Overview The POST /studiocmsapi/dashboard/api-tokens endpoint in StudioCMS ≤ 0.3.0 allows any authenticated user at minimum Editor role to generate API tokens for any other user , including...

Exploit for Improper Access Control in Oracle Http_Server

CVE-2026-21962 — Oracle HTTP Server / WebLogic Server Proxy Pl...

bucky

Bucky Una herramienta de enumeración de ID de cuenta S3 y descubrimiento de buckets Dado un único bucket S3 accesible, bucky extrae el ID de cuenta AWS de 12 dígitos que lo posee, luego descubre buckets adicionales pertenecientes a la misma cuenta probando nombres de buckets contra una lista de...

365cam-stream

365Cam Stream Stream your cheap WiFi camera directly to your computer — no app, no cloud, no account needed. Bought a small WiFi camera from AliExpress / Amazon / Temu and it only works through a phone app? This tool lets you view the camera feed directly in your browser over your local network...

Watchguard_WebUI_Unpacker

Watchguard Fireware Web UI update unpacker unpackwatchguard is a tool that unpacks this file format sysa-dl. watchguardsysadl.ksy contains Kaitai description of Watchguard Fireware web update file format. Info This update format is used by WatchGuard Firebox firewalls. The unpacker has been teste...

challenges

Hex Advent CTF WELCOME TO HEX ADVENT 2025, ‘tis the season to Unwrap Your Potential! 🎁 HEX ADVENT 2025 is a Christmas-themed CTF Advent Calendar, designed for women, by women. 12 Days, 12 Challenges: A structured schedule to build mastery across different CTF categories. Focus Areas root@kitploit...

VulnFanatic-NG

VulnFanatic-NG Investigación de vulnerabilidades asistida por LLM para Binary Ninja. VulnFanatic-NG añade un panel lateral que escanea el binario actual y pregunta a un LLM — un modelo alojado localmente compatible con OpenAI por defecto, o Anthropic Claude, Google Gemini, o Azure OpenAI ver...

UnBattletech

UnBattletech — BattleTech: The Crescent Hawk's Inception 1988 का रिवर्स इंजीनियरिंग 1988 में Infocom द्वारा MS-DOS गेम BattleTech: The Crescent Hawk's Inception का रिवर्स इंजीनियरिंग विश्लेषण और Godot 4 + C पुनर्निर्माण। रिपॉजिटरी संरचना root@kitploit: ├── docs/ RE documentation & findings │ ├──...