CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 is a critical remote code execution vulnerability in Microsoft Outlook versions including Microsoft 365 Apps, Outlook 2016/2019, Office LTSC 2021 before February 2024 patch. It allows an unauthenticated attacker to bypass Outlook’s Protected View by sending a specially crafted emai...

CVE-2020-9715

This repository does not have a README...

DIY_WhisperPair

DIY-WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit OFFICIAL IMPLEMENTATION NOW LIVE , thanks to the team at KU Leuven Thanks for the shoutout LEGAL NOTICE : This is a security research tool. ReadLEGAL.md before use. Unauthorized access to computer systems...

Grafana-cve-2025-4123

Grafana-cve-2025-4123 Result root@kitploit: FOFA app="Grafana" Shodan product:"Grafana Open Source" SSRF root@kitploit: http://localhost:3000/render/public/..%252f%255COpenRedirectURL%252f%253F%252f..%252f.. Open Redirect root@kitploit: /public/..%2F%5cwebsite.com%2F%3f%2F..%2F...

snmp-shell

SNMP Shell Shell Simulation over Net-SNMP with extend functionality Here is a preview : Description If your target has a Net-SNMP instance with the "extend" functionality, and you got a SNMP community string which gives you write access , you can use this tool to automate the process of sending...

NtWarden

NtWARden Windows Analysis and Research Toolkit Windows system inspection tool built on ImGui + DirectX 11. Covers processes, services, network, kernel internals, and more - locally or over the network via WinSysServer. ⚠️ Parts of this project were vibe coded with AI assistance so it might have...

Ivanti-CVE-2025-0282

Ivanti-CVE-2025-0282 Ivanti Remote code execution Thanks @Abdualhadi khalifa...

ironcurtain

IronCurtain A secure runtime for autonomous AI agents, where security policy is derived from a human-readable constitution. When someone writes "secure," you should immediately be skeptical.What do we mean by secure? !WARNING Research Prototype. IronCurtain is an early-stage research project...

ndff

ndff 面向 fluentd 的 nDPI ndff 是一个带有 nDPI 库的、面向 fluentd 的流收集器。 ndff 是基于 nDPI 中的示例 ndpiReader 实现的。 概述 nDPI 是一个用于深度包检测的开源 LGPLv3 库。 ndpiReader 是 nDPI 中的一个示例，具有以下功能。 从数据包（pcap 文件或设备）中检测协议 应用 BPF 过滤器过滤选定的流量 将数据包的内容以 JSON 格式导出到文件 等等…… 如果能在 fluentd 中分析 nDPI 的结果，将会非常有用。 因此，ndff 将数据包聚合成类似 NetFlow 的流，并以 JSON...

grails3-cve-2022-27772

grails3-cve-2022-27772 The Grails® framework 3.3 application provides custom implementation for TomcatEmbeddedServletContainerFactory which overrides createTempDirectory method implementation. The custom implementation is then used to create EmbeddedServletContainer bean from Application.groovy...

drmemory

Dr. Memory: the memory debugger About Dr. Memory Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory including outside of allocated heap units and heap underflow and overflow,...

CVE-2023-46604

Technical Summary of the Attack: CVE-2023-46604 The script exploits an insecure deserialization vulnerability in Apache ActiveMQ CVE-2023-46604 to achieve remote code execution on the target server. Description of the Exploitation Process root@kitploit: Vulnerability Target: The vulnerability...

CVE-2024-23897-Arbitrary-file-read

🤵🏻 CVE-2024-23897 Arbitrary-file-read 🤵🏻 Affected versions: Jenkins 2.441 and earlier. Jenkins LTS 2.426.2 and earlier. A Python script to automate the vulnerability CVE-2024-23897 🤖 🛠️ This Python code presents a scanner for a specific vulnerability CVE-2024-23897 in Jenkins servers. It starts by...

CVE-2026-63720-datamodel-code-generator

CVE-2026-63720: Code Injection in datamodel-code-generator via Unvalidated customBasePath Severity: High, CVSS 3.1 7.5 / CVSS 4.0 7.5 assigned by VulnCheck, the CNA Environmental ceiling network-service deployment: up to 9.8 Vector v4.0:...

cve-2023-27997

cve-2023-27997 cve-2023-27997...

CVE-2023-0386

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...

CVE-2024-23113

CVE-2024-23113 The script is designed to detect CVE-2024-23113, which is a format string vulnerability in the FortiGate FGFM service FortiGate to FortiManager protocol running on TCP port 541. The vulnerability occurs because an attacker can control a format string, which could lead to Remote Cod...

CVE-2022-20699

CVE-2022-20699 🎧 Brought to you by the Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack it is not well checked...

forbiddenpass

ACTUALIZACIÓN Gracias a Knowledge-Wisdom-Understanding MrPMillz por hacer el script más limpio y corregir los payloads de los encabezados. INSTALACIÓN root@kitploit: git clone https://github.com/gotr00t0day/forbiddenpass.git cd forbiddenpass pip3 install -r requirements.txt python3 forbiddenpass....

SharpLAPS

SharpLAPS El atributo ms-mcs-AdmPwd almacena la contraseña LAPS en texto claro. Este ejecutable está diseñado para ejecutarse dentro de una sesión de Cobalt Strike usando execute-assembly. Recuperará la contraseña LAPS del Active Directory. Requiere cualquiera de: Cuenta con ExtendedRight o Gener...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner es un escáner de red para el exploit Eternal Blue CVE-2017-0144 y Eternal Romance tubería con nombre CVE-2017-0145 . Capturas de pantalla Versión 2.2 Nuevas implementaciones Verificación de vulnerabilidad Eternal Romance escan -er Resultados divididos de la bas...

CVE-2025-24813

This repository does not have a README...

eternal_scanner

ETERNAL SCANNER 2.4 Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance named pipe CVE-2017-0145 . Screenshots 2.2 Version New Implementations Eternal Romance Vulnerability check escan -er Escan Database Splited Results escan -l Video...

iMonitor

中文 Introducción iMonitor Sistema de Análisis de Comportamiento en Puntos Finales es un software de monitoreo y análisis de comportamiento en puntos finales basado en iMonitorSDK. Proporciona monitoreo de comportamientos del sistema como procesos, archivos, registro y redes. Soporta extensiones y...

CVE-2026-33017-langflow-rce

CVE-2026-33017 — Ejecución remota de código RCE no autenticada en Langflow Resumen ID de CVE: CVE-2026-33017 Software afectado: Langflow Versiones vulnerables: = 1.9.0 Gravedad: Crítica Autor: r3nsi15 Fecha: 2026 Descripción Langflow expone un endpoint público de construcción de flujos...

Titanis

Introduction Titanis is a library of protocol implementations and command line utilities, written in C, for interacting with Windows environments. It uses .NET 8 and is cross-platform Windows and Linux. Some of the protocols implemented: SMB2 MS-SMB2 SMB 2.x and 3.x up to 3.1.1 Message security...

xnu

What is XNU? XNU kernel is part of the Darwin operating system for use in macOS and iOS operating systems. XNU is an acronym for X is Not Unix. XNU is a hybrid kernel combining the Mach kernel developed at Carnegie Mellon University with components from FreeBSD and a C++ API for writing drivers...

CVE-2023-4911

CVE-2023-4911 - Looney Tunables This is a atm very rough proof of concept for CVE-2023-4911. So far I've only verified it works on Ubuntu 22.10 kinetic. Current version of the exploit contains a fair amount of "magic" offsets. If you have suggestions on how to improve the heap shaping, feel free ...

exploits

exploits CVE-2021-22600: Linux kernel LPE exploit CVE-2021-3156: Linux local privilege escalation through heap overflow in sudo Demo CVE-2021-3156: One shot exploit for heap overflow vulnerability in sudo CVE-2020-6507: Out of bounds write in V8. Chrome versions = 83.0.4103.97. RCE CVE-2020-16040...

OverlayFS---CVE-2021-3493

OverlayFS---CVE-2021-3493...

cve-2015-2208

Dockerfile to simulate environment for CVE-2015-2208 The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter. Discovered by: @u0x Pichaya Morimoto, Xelenonz, pe3z, Pistachio References:...

neko

n.eko Welcome to Neko, a self-hosted virtual browser that runs in Docker and uses WebRTC technology. Neko is a powerful tool that allows you to run a fully-functional browser in a virtual environment , giving you the ability to access the internet securely and privately from anywhere. With Neko,...

neko

n.eko Bienvenido a Neko, un navegador virtual autogestionado que se ejecuta en Docker y utiliza tecnología WebRTC. Neko es una herramienta potente que te permite ejecutar un navegador completamente funcional en un entorno virtual , brindándote la capacidad de acceder a Internet de forma segura y...

kube-alien

Kube-alien This tool launches attack on k8s cluster from within. That means you already need to have an access with permission to deploy pods in a cluster to run it. After running the kube-alien pod it tries to takeover cluster's nodes by adding your public key to node's /root/.ssh/authorizedkeys...

kube-alien

Kube-alien Esta herramienta lanza ataques a un clúster de k8s desde dentro. Esto significa que ya necesitas tener acceso con permisos para desplegar pods en un clúster para ejecutarlo. Después de ejecutar el pod kube-alien, intenta tomar el control de los nodos del clúster añadiendo tu clave...

EventHorizon

EventHorizon EventHorizon is a tool meant to arm security analysts and/or researchers with Event Tracing for Windows ETW telemetry that, coupled with sigma-like rules, allow for robust endpoint detection and response capabilities. That being said, EventHorizon is in no way a replacement for prope...

pyREtic

pyREtic 0.5.1 README Rich Smith - [email protected] pyREticの最新バージョンは以下で入手できます: https://github.com/MyNameIsMeerkat/pyREtic これは何ですか？ pyREtic は、Python言語プロジェクトにおける様々なリバースエンジニアリングタスクを支援する拡張可能なフレームワークです。 このツールは、リバースエンジニアがバイトコード .pyc からソースコード .py...

ctfr

CTFR Do you miss AXFR technique? This tool allows to get the subdomains from a HTTPS website in a few seconds. How it works? CTFR does not use neither dictionary attack nor brute-force, it just abuses of Certificate Transparency logs. For more information about CT logs, check...

Linux-Privilege-Escalation-CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via Writable Symlink in below Summary This is a simple exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below Linux system monitoring tool. The vulnerability affects versions prior to v0.9.0 and stems from incorrect permission...

CVE-2023-20198

CVE 2023-20198 Introduction The web UI component of Cisco IOS XE Software has a previously undiscovered vulnerability that, when exposed to the internet or untrusted networks, is already being actively exploited, according to Cisco. Due to this vulnerability, a remote, unauthenticated attacker is...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions root@kitploit: 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation root@kitploit: python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

SuperMicro-Password-Scanner

Supermicro IPMI/BMC Cleartext Password Scanner v20140622 by 1N3 https://crowdshield.com Usage: sh supermicroscan.sh proxy ABOUT: Supermicro’s implementation of IPMI/BMC allows remote, unauthenticated attackers to request the file PSBlock via port 49152. This plain text password file contains IPMI...

spring4shell-scan

spring4shell-scan A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities Features Support for lists of URLs. Fuzzing for more than 10 new Spring4Shell payloads previously seen tools uses only 1-2 variants. Fuzzing for HTTP GET and POST...

spring4shell-scan

spring4shell-scan Un escáner completamente automatizado, fiable y preciso para encontrar vulnerabilidades Spring4Shell y Spring Cloud RCE Características Soporte para listas de URLs. Fuzzing con más de 10 nuevos payloads de Spring4Shell las herramientas vistas anteriormente usan solo 1-2 variante...

CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter

CVE-2026-5050 – Blind LDAP Injection via Unescaped Filter Program Code Python with ldap3 simulation root@kitploit: ldapserversim.py - Simulated LDAP authentication server from flask import Flask, request, jsonify app = Flaskname Fake user database USERS = 'admin': 'password': 'secret', 'role':...

vulnerability-spoiler-alert

Vulnerability Spoiler Alert Know about security patches before the CVE drops. View Live Site | Subscribe via RSS A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings...

scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ - DNS / Subdomains / Ports / Directories enumeration Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install scilla Snap root@kitploit: sudo snap...

scilla

🏴‍☠️ 情報収集ツール 🏴‍☠️ - DNS / サブドメイン / ポート / ディレクトリの列挙 💙 を込めて edoardottt が制作 Twitter でシェア！ インストール • はじめに • 例 • 変更履歴 • コントリビューション • ライセンス インストール 📡 Homebrew root@kitploit: brew install scilla Snap root@kitploit: sudo snap install scilla Golang root@kitploit: go install -v...

Awesome-Fuzzing

Welcome to Awesome Fuzzing A curated list of fuzzing resources Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on for learning Fuzzing and initial phases of Exploit Development like root cause analysis. Contents Books Courses Free Paid Videos NYU...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...