packages_apps_ManagedProvisioning_AOSP10_r33_CVE-2023-21275

This repository does not have a README...

Windows-ZTE-Loader

Windows-ZTE-Loader Windows ZTE Loader CVE-2014-2321 Requires ZMAP For Windows Or BigEar The application works by handling the output of a running scan via zmap or bigear, that output is piped into the zte application, see your operating systems documentation for piping output from a running progr...

CVE-2026-23744

CVE-2026-23744 MCPJam inspector Remote-Code-Execution: Proof Of Concept POC usage: root@kitploit: python3 cve-2026-23744.py --target https:// --att-ip --att-p...

opentsdb_key_cmd_injection

opentsdbkeycmdinjection Un exploit para OpenTSDB = 2.4.1 con inyección de comandos CVE-2023-36812/CVE-2023-25826 escrito en Fortran Acerca de Este es un exploit para una vulnerabilidad de inyección de comandos en OpenTSDB versiones 2.4.1 y anteriores CVE-2023-36812/CVE-2023-25826. El exploit está...

velociraptor

Velociraptor - Endpoint visibility and collection tool. Velociraptor is a tool for collecting host based state information using The Velociraptor Query Language VQL queries. To learn more about Velociraptor, read the documentation on: https://docs.velociraptor.app/ Quick start If you want to see...

cve-2018-17207

CVE-2018-17207 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-17207 Image author: https://github.com/cved-sources/cve-2018-17207...

Aninda-security-advisories

This repository does not have a README...

cve-2015-1427

CVE-2015-1427 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-1427 Image author: https://github.com/t0kx/exploit-CVE-2015-1427...

CVE-2017-9544

CVE-2017-9544 Exploit for SEH based buffer overflow in Easy Chat Server CVE-2017-9544 Based on: pwntools msfvenom / reversetcp payload ropper x64dbg Vulnerable app available at https://www.exploit-db.com/exploits/42155 Setup Set victim IP to 192.168.15.100 and start Easy Chat Server. Set attacker...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

Investigating a PAN-OS CVE-2024-3400 Command Injection Attempt Overview This project documents the investigation of a CVE-2024-3400 command injection attempt targeting a PAN-OS GlobalProtect service. The goal was to determine: whether this is a real attack whether command execution occurred wheth...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview...

CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE-

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE -orange WARNING – EDUCATIONAL USE ONLY This proof-of-concept is for authorized security testing and educational purposes only. Use only on systems you own or have explicit written permission to test. The author is not responsible for any...

CVE-2026-36213

CVE-2026-36213 CVE-2026-36213 | Local Privilege Escalation in MEmu Android Emulator 9.2.7.0 via Insecure Service Binary Permissions | Patched in 9.3.2 CVE-2026-36213 — MEmu Android Emulator 9.2.7.0 LPE Summary A Local Privilege Escalation LPE vulnerability in MEmu Android Emulator 9.2.7.0. The...

CVE-2022-1388

CVE-2022-1388 BIG-IP iControl REST vulnerability CVE-2022-1388 Usage This POC is Verified! root@kitploit: curl -i -s -k -X $'POST' \ -H $'Host: localhost' -H $'Connection: keep-alive, X-F5-Auth-Token' -H $'Authorization: Basic YWRtaW46' -H $'X-F5-Auth-Token: a' -H $'Content-Length: 39' ...

emby_ssrf

msfemby This tool will check a remote EMBY server to attempt to use an SSRF vulnerability to perform an http scan of the network internal to the EMBY server. This is based on the vulnerability CVE-2020-26948. Installation Clone the repo and put the rb files into the...

CVE-2018-1273

CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...

CVE-2007-2447-in-Python

CVE-2007-2447 - Python implementation Description Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 IP - Ip of the remote machine. PORT - Optional Port that smb is running on. PAYLOAD - Payload to be executed on the remote machine e.g. reverse shell. Examples: python3...

poc-cve-2025-55182

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ WARNING: This repository is for educational and security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Overview This repository contains a proof-of-concept demonstration of...

security-skills

Security Skills for Claude Code A plugin marketplace of Claude Code skills that automate security operations. Install individual skills to automate specific platforms, or combine several for end-to-end integration across your security stack. Available Skills...

evine

Evine Web Crawler CLI interactivo. Evine es un web crawler y web scraper simple, rápido e interactivo escrito en Golang. Evine es útil para una amplia gama de propósitos, como extracción de metadatos y datos, minería de datos, reconocimiento y pruebas. Si te gusta el proyecto, dale una estrella...

evine

Evine Interactive CLI Web Crawler. Evine is a simple, fast, and interactive web crawler and web scraper written in Golang. Evine is useful for a wide range of purposes such as metadata and data extraction, data mining, reconnaissance and testing. If you like the project, give it a star. It forces...

Scrummage

Scrummage VERSION 3.9 Improved dependency management migration to Poetry Stricter type checking of variables. Improved anonymity of the configuration file via encryption. Manual editing of configuration file is now difficult and it's advised to not edit the configuration file manually. Code quali...

zerobox

Zerobox Python SDK Python SDK for zerobox. Sandbox any command with file, network, and credential controls. root@kitploit: pip install zerobox Installing the wheel drops the zerobox CLI into your environment's bin/ and exposes a Python SDK. For CLI usage, secrets concepts, the full flag reference...

CVE-2024-5009

CVE-2024-5009 PoC for Progress WhatsUp Gold SetAdminPassword Privilege Escalation CVE-2024-5009 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ Usage root@kitploit: python3 CVE-2024-5009....

EvilSlackbot

EvilSlackbot A Slack Attack Framework for conducting Red Team and phishing exercises within Slack workspaces. Disclaimer This tool is intended for Security Professionals only. Do not use this tool against any Slack workspace without explicit permission to test. Use at your own risk. Background...

snoop

snoop A syscall tracer for Linux, built on eBPF. Like strace but with a live TUI, smart filters, and argument decoding you can actually read. root@kitploit: $ sudo snoop curl https://example.com 0.001 curl1234/1234 openatATFDCWD, "/etc/ssl/certs/ca-certificates.crt", ORDONLY = 4 0.002 curl1234/12...

paimei

PaiMei, is a reverse engineering framework consisting of multiple extensible components. The framework can essentially be thought of as a reverse engineer's swiss army knife and has already been proven effective for a wide range of both static and dynamic tasks such as fuzzer assistance, code...

bypass-403

Bypass-403 Un script simple creado para uso propio para evadir 403 También se puede usar para comparar respuestas en varias condiciones como se muestra en la siguiente captura Uso ./bypass-403.sh https://example.com admin ./bypass-403.sh website-here path-here Características Usa 24 bypasses...

apk-mitm

apk-mitm A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers...

CVE-2026-31431-Copy-Fail

This repository does not have a README...

METATRON

METATRON AI-powered penetration testing assistant using local LLM on linux Parrot OS 🔱 METATRON AI-Powered Penetration Testing Assistant 📌 What is Metatron? Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine — no cloud, no API keys, no subscriptions...

CL4R1T4S

CL4R1T4S AI SYSTEMS TRANSPARENCY AND OBSERVABILITY FOR ALL! Full extracted system prompts, guidelines, and tools from OpenAI, Google, Anthropic, xAI, Perplexity, Cursor, Windsurf, Devin, Manus, Replit, and more – virtually all major AI models + agents! 📌 Why This Exists root@kitploit: "In order t...

CVE-2025-29927-NextJS

📦 Next.js CVE-2025-29927 - Proof of Concept This repository contains a minimal Proof of Concept PoC for exploiting CVE-2025-29927, a high-severity vulnerability affecting specific versions of Next.js that allows unauthorized access to internal application files through crafted URLs. ⚠️ Disclaimer...

CVE-2020-29669

=============== Macally WIFISD2-2A82 Writeup for CVE-2020-29669 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== This is a writeup of exploiting the Macally WIFISD2-2A82 Travel Router Firmware version: 2.000.010. The Guest user is able to reset its own password...

CVE-2019-1476

CVE-2019-1476 AppXSvc Arbitrary File Overwrite DoS I have independently reported this vulnerability to MSRC as part of my research inspired by CVE-2019-0841 originally reported by Nabeel Ahmed. This vulnerability allows a regular user to overwrite arbitrary files. However, the attacker's...

CVE-2023-21768

CVE-2023-21768 PoC...

CVE-2021-31956-POC

" CVE-2021-31956" WIP PoC code for CVE-2021-31956 in preparation for OSEE. Will improve it further after my OSEE exams and free time. A lot of hardcoded offsets need to be changed if it is different on the target system but if it is anything similar to 2020 - 2021 builds then no change should be...

CVE-2026-64600

CVE-2026-64600 – RefluXFS Detection & Mitigation Tool This repository provides a comprehensive C utility to detect , safely verify , and mitigate the RefluXFS vulnerability CVE‑2026‑64600 on Linux systems running the XFS filesystem. The tool checks for a vulnerable kernel, identifies...

Pi-hole-XSS-CVE-2025-53533

Cross-Site-Scripting XSS in Pi-hole-CVE-2025-53533 exploit PoC Proof-of-Concept exploit for unauthenticated reflected XSS in Pi-hole Web Interface v6.2.1. Patched in v6.3. Quick Start root@kitploit: git clone https://github.com/moezbouzayani9/Pi-hole-XSS-CVE-2025-53533.git cd...

frida-extract

FridaExtract FridaExtract is a Frida.re based RunPE extraction tool. RunPE type injection is a common technique used by malware to hide code within another process. It also happens to be the final stage in a lot of packers : NOTE: Frida now also supports extraction of injected PE files using the...

DSP

DockerSecurityPlayground Docker Security Playground is an application that allows you to: Create network and network security scenarios , in order to understand network protocols, rules, and security issues by installing DSP in your PC. Learn penetration testing techniques by simulating...

CVE-2020-0668.exe

CVE-2020-0668 Ref: https://github.com/RedCursorSecurityConsulting/CVE-2020-0668...

CVE-2024-22532

CVE-2024-22532 Description XnSoft XnView Classic 2.51.5 and NConvert 7.163 are vulnerable to Heap-based Buffer Overflow via a crafted .xwd file Vendor XnSoft Affected Products XnView Classic 2.51.5 NConvert 7.163 Impact Denial of Service Remote Code Execution PoC Denial of Service cmdline used...

CVE-2023-36003

CVE-2023-36003: Windows Defender Exploit Protection Bypass PoC This repository contains a Proof of Concept PoC for CVE-2023-36003 , a critical security feature bypass vulnerability affecting Windows Defender Exploit Protection. Overview CVE-2023-36003 is a vulnerability in Windows Defender that...

cve-2026-46858

This repository does not have a README...

vercel-april2026-incident-response

Vercel April 2026 Incident Response Guide Last updated: 20 April 2026 @ 12.07 PM AEST/Brisbane - v2 — incorporates Vercel CEO update of 20 April IMPORTANT: This is not legal or official advice. If you think you have been compromised please reach out to an incident response partner. This informati...

oneiromancer

oneiromancer "A large fraction of the flaws in software development are due to programmers not fully understanding all the possible states their code may execute in." -- John Carmack "Can it run Doom?" -- https://canitrundoom.org/...

shuffledns

massDNS wrapper to bruteforce and resolve the subdomains with wildcard handling support Feature • Install • Run • Wildcard • License • Discord shuffleDNS is a wrapper around massdns, written in go, that allows you to enumerate valid subdomains using active bruteforce, as well as resolve subdomain...

shuffledns

Wrapper de massDNS para realizar fuerza bruta y resolución de subdominios con soporte para manejo de comodines Características • Instalación • Ejecución • Comodín • Licencia • Discord shuffleDNS es un wrapper alrededor de massdns, escrito en Go, que permite enumerar subdominios válidos mediante...

CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API Arbitrary File Write Leads to Remote Code Execution RCE vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments...