cve-2021-44228-rce-poc

PoC de Ejecución Remota de Comandos CVE-2021-44228 Este repositorio permite a los investigadores de seguridad experimentar con la ejecución remota de código ofreciendo una implementación de un servidor de ataque que carga un exploit personalizado en una aplicación vulnerable que contiene log4j. ⚠️...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - JSP Upload Bypass / Remote Code Execution for Python3 I just made a few adjustments to the original script to be compatible with Python 3! If there's any problems or issues faced, feel free to shoot me an email...

cve-2018-11235-git-submodule-ce-and-docker-ngrok-configuration

CVE-2018-11235-Git-Submodule-CE + Configuración de Docker Ngrok CVE-2018-11235-Git PoC y tunelización con docker ngrok Construir Dockerfile root@kitploit: $ docker build -t cve-2018-11235 . Crear red personalizada para ngrok root@kitploit: $ docker network create myngroknet Iniciar Servidor Git...

cve-2022-24112

Apache APISIX 2.12.1 Remote Code Execution and Docker Lab Let's clone using gitclone this repository, then we can navigate to apisix-docker/examples. In this docker-compose.yml file, we already change into image: apache/apisix:2.12.0-alpine, because the vulnerability in this version, then let's...

mantis_rce

mantisrce Python script to obtain RCE on Mantis Bug Tracker prior to version 1.2.x Check CVE-2008-4687 for additional information...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner...

bluekeep

CVE-2019-0708 alias Bluekeep Escáner Un escáner simple para determinar la vulnerabilidad del sistema a CVE-2019-0708. Este es un puerto en Python del escáner del módulo original de metasploit por JaGoTu y zerosum0x0, disponible en Github aquí. Prueba de Concepto Prueba de concepto de RCE mediante...

Node.js-CVE-2017-5941

Demostración de Vulnerabilidad de Deserialización Insegura en NodeJS Node.js es un entorno de ejecución de código abierto utilizado para implementar funcionalidad de servidor en JavaScript. Un paquete de software específico dentro de Node.js contiene una función vulnerable que maneja la...

cve-2019-19781

CVE-2019-19781 이 저장소는 다른 연구자들이 자신의 코드를 먼저 공개했기 때문에 업로드되었습니다. 우리는 방어자들이 시스템을 패치할 충분한 시간을 확보할 수 있도록 이 내용을 더 오랫동안 숨겨두고 싶었습니다. 우리는 책임 있는 공개를 지지하지만, 이 경우에는 이미 비밀이 드러난 상황이었습니다. Exploits: CVE-2019-19781 Citrixmash CVE-2019-19781 취약점 익스플로잇 root@stronghold-nix:/home/relik/Desktop/git/cve-2019-19781 python...

nmap_draytek_rce

nmapdraytekrce Draytek 장치에서 CVE-2020-8515를 탐지하는 nmap 스크립트...

CVE-2017-9822

CVE-2017-9822 DotNetNuke often abbreviated as DNN is a CMS Content Management System platform and web application framework based on Microsoft's ASP.NET technology. Key Information Affected Product: DotNetNuke DNN Platform – a popular .NET CMS/portal. Disclosure Date: July 2017. Severity: Critica...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

ActiveMQ-RCE

ActiveMQ RCE 영향을 받는 버전 verison open -a calculator HTTP 서버를 엽니다. root@kitploit: python3 -m http.server Main.java 파일을 실행하세요 필요에 따라 주소를 변경하세요...

ds3-nrssr-rce

업데이트: 다크 소울 III 1.15.1 2022/08/25에 다크 소울 III의 새로운 게임 업데이트 1.15.1이 출시되었으며, 온라인 서비스가 복구되었습니다. 이 업데이트는 CVE-2022-24125 및 CVE-2022-24126을 수정했으며 , 게임 P2P 네트워킹에 존재하는 다양한 기타 잠재적 보안 취약점OOB 읽기/쓰기도 함께 수정되었습니다. 또한, 다른 플레이어의 세이브를 손상시킬 수 있는 알려진 모든 익스플로잇이 수정되었습니다. 온라인 멀티플레이에서 자주 마주칠 수 있는 많은 사소한 치트예: "저주 칼"도...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 Vulnerabilidad de ejecución remota de código que ocurre en el modo CGI de PHP registrada en la detección de eventos de inyección de argumentos PHP-CGI CVE-2024-4577 desde IP externa hacia servidor interno. Cuando PHP se ejecuta en modo CGI en un entorno...

CVE-2019-19781

This article is about CVE-2019-19781, a Remote Code Execution RCE vulnerability due to Directory Traversal in Citrix ADC and Gateway. This remote code execution vulnerability occurs because the validation of the smb.conf file under the /vpn path's ../vpns is not properly performed. Steals system...

CVE-2025-24893

CVE-2025-24893 XWiki Platform의 RCE 취약점을 위한 Bash POC 스크립트 사용 예시: netcat 리스너 설정: root@kitploit: $ nc -nvlp 그런 다음 스크립트 실행: root@kitploit: $ chmod +x cve.sh $ ./cve.sh 영향을 받는 버전: 5.4부터 15.10.11까지 16.0.0부터 16.4.1까지 면책 조항 이 도구는 교육 목적으로만 제공됩니다. 오용에 대해 어떠한 책임도 지지 않습니다...

cve-2023-34960

cve-2023-34960 chamilo soap api rce /webservices/additionalwebservices.php...

CVE-2018-7600.

IGLOO Corp, Won Chi Hyun Drupal RCE Analysis Report Drupal RCE CVE-2018-7600 Dont Forget to Put Your Adress into the Script ! Description: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack...

CVE-2022-27925-Revshell

Zimbra Exploit de Ejecución Remota de Código No Autenticado CVE-2022-27925 root@kitploit: / / / / / / / / / / / / / // / / / / / / // / / / // / //// // //.// ,/ CVE-2022-27925 usage: exp.py -h -t TARGET -m MASS -l LHOST -p LPORT options: -h, --help show this help message and exit -t TARGET,...