CodeIgniterXor

CodeIgniterXor PoC script to decode CodeIgniter = 2.1.4 session cookies that use xorencode method. Full details availalbe on on the following blog post: https://www.dionach.com/blog/codeigniter-session-decoding-vulnerability Uso break.py Este es el script principal; dado un URI de destino,...

CVE-2026-94146

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2021-21985_PoC

CVE-2021-21985 Código Vulnerable CLASS/METHODs disponibles, una pequeña muestra con fines de PoC: com.vmware.vsan.client.services.capability.VsanCapabilityProvider root@kitploit: ../snip getClusterCapabilityData getHostCapabilityData getHostsCapabilitiyData getIsDeduplicationSupported...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

CVE-2023-21768

CVE-2023-21768 Windows Ancillary Function Driver for WinSock Según la descripción detallada de CVE-2023-21768 publicada por Microsoft Security Response Center MSRC, la vulnerabilidad existe en el Ancillary Function Driver AFD, cuyo nombre de archivo en el sistema es afd.sys. El módulo AFD es el...

CVE-2022-27414

CVE-2022-27414 - SQL注入 College Website CMS v1.0 - CVE-2022-27414 - SQL注入 CVE 链接 root@kitploit: https://vulners.com/cve/CVE-2022-27414 以下为 PoC 漏洞代码 从 "cwms\departments\index.php" 的第 9 行开始 root@kitploit: query"SELECT FROM departmentlist where deleteflag = 0 and status = 1 order by name asc"; while...

codecrypt

Codecrypt 后量子密码学工具。 Codecrypt 目前不再维护，不过我至今仍在使用它。如果你有兴趣开发/维护它，请联系我。 关于 这是一个类似 GnuPG 的 Unix 程序，用于加密和签名，仅使用抗量子计算机的算法： McEliece 密码系统（紧凑型 QC-MDPC 变体）用于加密 基于哈希的 Merkle 树算法（FMTSeq 变体）用于数字签名 Codecrypt 是自由软件。代码以 LGPL3 条款授权，希望这能使其更容易与其他工具组合使用。 为什么选择这个？ 去读读 http://pqcrypto.org/ 链接...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

CVE-2024-27631

CVE-2024-27631 漏洞详情 概述 在Savane v3.12及之前版本中，管理功能缺乏CSRF保护可能导致权限提升和/或帐户接管。特别是，端点/siteadmin/usergroup.php包含更改其他用户密码和管理标志的功能，实际上允许攻击者使自己成为管理员。 其他易受CSRF攻击的端点包括： /support/admin/userperms.php - 更改谁可以发布跟踪器的权限。 /project/admin/conf-copy.php - 用另一组的配置覆盖现有组的配置。 /project/admin/editgroupnotifications.php -...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

PHP-Shell-Detector

Web Shell Detector Web Shell Detector – is a php script that helps you find and identify php/cgiperl/asp/aspx shells. Web Shell Detector has a “web shells” signature database that helps to identify “web shell” up to 99%. By using the latest javascript and css technologies, web shell detector has ...

CVE-2021-1675-PrintNightmare

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | June 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

sitrep

SitRep Extensible, configurable host triage. Purpose SitRep is intended to provide a lightweight, extensible host triage alternative. Checks are loaded dynamically at runtime from stand-alone files. This allows operators to quickly modify existing checks, or add new checks as required. Checks are...

EUVD-2026-83847

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

CVE-2026-94146

BioStar BIOS Update Utility 1.9.7.3 contains a write-what-where flaw in the IOCTL Handler (function sub_110BC of BSMEM64_W10.sys), triggered by manipulating the PhysicalAddress/Size argument. A local attacker with low privileges can achieve high impact on confidentiality, integrity, and availabil...

CVE-2026-94146 BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

A vulnerability was found in BioStar BIOS Update Utility 1.9.7.3. This issue affects the function sub110BC of the file BSMEM64W10.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress/Size results in write-what-where condition. Attacking locally is a requirement. Th...

fuzzdb

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...

Exploit-CVE-2023-22518

Exploit-CVE-2023-22518 CVE-2023-22518 在 Confluence 中 CVE-2023-22518：该漏洞被描述为“Confluence 数据库和服务器中授权不当的漏洞”。该错误影响 Atlassian 产品的本地部署（On-premises）版本。 设置环境 使用受影响版本 8.0.4 下载 URL： https://product-downloads.atlassian.com/software/confluence/downloads/atlassian-confluence-8.0.4-x64.exe 选择 Trial...