34845 matches found
CVE-2024-56264
CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...
CVE-2021-41773-Apache-2.4.49-
CVE-2021-41773-Apache-2.4.49- 渗透测试 1.1. Path Traversal 读取 /etc/passwd 文件 !/bin/bash Script: exploitpathtraversal.sh 目标：从 Apache 2.4.49 读取 /etc/passwd 文件 TARGETIP="128.0.0.100" URL="http://$TARGETIP/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" echo "+ 在 Apache 2.4.49 上利用路径遍历漏洞..." curl -s "$URL" ...
WSL_Payload_Builder
WSL Payload Builder Aviso legal Esta herramienta está pensada para la investigación legítima de seguridad y las pruebas de penetración. Los usuarios son responsables de asegurarse de contar con la autorización adecuada antes de probar sistemas que no poseen o para los que no tienen permiso...
CVE-2025-32463
Reference: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Executing the PoC on Ubuntu 24.04.2 LTS server with Sudo v1.9.15p5, using an unprivileged user with no Sudo rules defined, results in a root shell outside of the chrooted environment. lowpriv@prod:/CVE-2025-3246...
CVE-2021-22205
CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. root@kitploit: -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id"...
CVE-2023-38646
CVE-2023-38646 - Metabase RCE Pre-Autenticación ⚠️ Solo con fines educativos y de investigación de seguridad autorizada Autores del Exploit Original Muy agradecido al autor original del PoC securezeron Guías Paso a Paso 1. Configura el Listener en tu máquina atacante: root@kitploit: nc -nlvp 4444...
wifi-hacker
Script de shell para atacar conexiones inalámbricas utilizando herramientas integradas de Kali. Soporta todos los tipos de seguridad WEP, WPS, WPA, WPA2 !Imagenhttps://assets.kitploit.com/production/public/readmes/placeholders/f0fc86cfe65f76d40e15aaec61704ec8220a56dc89d4be...
CVE-2025-5548
🚀 CVE-2025-5548 - Explotación de FreeFloat FTP Server 1.0 Análisis profesional de vulnerabilidades y explotación completa de desbordamiento de búfer remoto 🎯 Aspectos Destacados del Proyecto Caso de estudio completo del mundo real de CVE-2025-5548 desbordamiento de búfer remoto basado en pila en...
FEP3370-advanced-ethical-hacking
DynoRoot CVE-2018-1111 Final project for the course Advanced Ethical Hacking at KTH, Stockholm This project demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol DHCP. A rogue DHCP server can cra...
CVE-2020-16846-Saltstack-Salt-API
CVE-2020-16846-Saltstack-Salt-API Vulnerability Explained: An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection. The details about this vulnerability can be found here:...
CVE-2025-24801
CVE-2025-24801 PoC for GLPI RCE This repository contains a proof-of-concept script poc.py that exploits CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. It automates: Logging into GLPI Enabling .php uploads by updating document type settings Uploading a PHP reverse shell via the AJAX...
webmin_1.920
CVE-2019-15107 Webmin 1.920 Unauhenticated Remote Command Execution A python3 script for the CVE-2019-15107 Webmin 1.920 Unauhenticated Remote Command Execution that creates a reverse shell or a pseudo interactive shell using mkfifo for firewall evasionA python3 script for the CVE-2019-15107 Webm...
CVE-2025-32463
Heavily influenced/copied/based on the format of a similar repo by pr0v3rbs -- https://github.com/pr0v3rbs/CVE-2025-32463i\chwoot.git This is a C reimplementation for rapid, single-source delivery, execution, and cleanup. CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a...
cve-2020-5902-ioc-bigip-checker
CVE-2020-5902 Herramienta de Detección de IoC Este script está diseñado para ser ejecutado localmente en un F5 BIG-IP en Advanced Shell bash por un usuario con privilegios de root; no está diseñado para ser ejecutado en ningún otro entorno. Nota: El modo Appliance no permite el acceso a Advanced...
asf__karaf_CVE-2022-22932_4-3-5
Apache Karaf Apache Karaf 是一个模块化运行时，支持多种框架和编程模型（REST/API、Web、Spring Boot 等）。它提供可直接利用的即用功能，无需任何额外工作，并以可变或不可变应用程序的形式打包。 概述 热部署 ：Karaf 支持应用程序的热部署（在 deploy 目录中）。 动态配置 ：Karaf 使用集中位置（etc 目录）进行配置（不同格式，如 properties、json），并可接入现有配置后端。 日志系统 ：使用由 Log4J 支持的集中式日志后端，Karaf 支持多种不同的 API（JDK...
CVE-2019-7609
CVE-2019-7609 Nuevo CVE-2019-7609 que funciona con python 13 explotar CVE-2019-7609 kibana RCE de la manera correcta con scripts de python3 Referencia: https://github.com/LandGrey/CVE-2019-7609 captura uso root@kitploit: usage: python3 CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port...
ShellEvil
ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX Struts 2 DefaultActionMapper Interactive Shell Exploit for CVE-2013-225 S2-016 The Struts 2 DefaultActionMapper supports a method for short-circuit navigation state changes by prefixing parameters with "action:" or "redirect:", followed ...
mcafee_atd_CVE-2019-3663
McAfee ATD CVE-2019-3663 McAfee Advanced Threat Defense ATD 4.6.x and earlier - Hardcoded root password Security Bulletin: https://kc.mcafee.com/corporate/index?page=content&id=SB10304 Interesting shadow entries root@kitploit:...
mcpExec
mcpExec is a tool that takes advantage of the CVE-2026-23744 to gather a reverse shell using the URL of the vulnerable MCPJam Inspector installation. Installation root@kitploit: git clone https://github.com/daemoncibsec/mcpExec.git cd mcpExec python3 -m venv venv source venv/bin/activate pip...