CVE-2017-7494

CVE-2017-7494 CVE-2017-7494 C poc Use CVE-2017-7494 to get a reverse shell 1. First compile sambainit.c to generate libsamba.so 2. Modify the relevant addresses in isknownpipename.c, compile and execute...

CVE-2017-17562

CVE-2017-17562 RCE GoAhead web server 2.5 3.6.5 Standalone Python 3 reverse shell exploit for CVE-2017-17562, works on GoAhead web server versions 2.5 3.6.5. Blog article here. Written and tested on Python 3.7 based on POC and vulnerable environment here. Some code borrowed from the Metasploit...

FIX-CVE-2024-2961

Quick and dirty shell script to mitigate CVE-2024-2961 on Ubuntu and likely other platforms run the shell script and that should be it. You may also need to alter the path for gconv configs Matt...

nim-shell

Nim-Shell Shell inversa que puede evadir la detección de EDR y Windows Defender Por favor, no subas a VirusTotal INSTRUCCIONES DE INSTALACIÓN root@kitploit: $ apt install nim Compilación nim c -d:mingw --app:gui nimshell.nim Cambia la dirección IP y el número de puerto que deseas escuchar en el...

CVE-2022-4510-WalkingPath

CVE-2022-4510-Binwalk This script allows you to generate exploits for targeting CVE-2022-4510 Binwalk vulnerabilities. The exploits can be used for testing and demonstrations. The supported options include SSH, command execution, and reverse shell. Prerequisites Python 3.x Usage 1. Clone the...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...

CVE-2021-41773-Apache-2.4.49-

CVE-2021-41773-Apache-2.4.49- Penetration testing 1.1. Path Traversal Read /etc/passwd file !/bin/bash Script: exploitpathtraversal.sh Objective: Read /etc/passwd file from Apache 2.4.49 TARGETIP="128.0.0.100" URL="http://$TARGETIP/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd" echo "+ Exploiting...

WSL_Payload_Builder

WSL Payload Builder Aviso legal Esta herramienta está pensada para la investigación legítima de seguridad y las pruebas de penetración. Los usuarios son responsables de asegurarse de contar con la autorización adecuada antes de probar sistemas que no poseen o para los que no tienen permiso...

CVE-2025-32463

Reference: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Executing the PoC on Ubuntu 24.04.2 LTS server with Sudo v1.9.15p5, using an unprivileged user with no Sudo rules defined, results in a root shell outside of the chrooted environment. lowpriv@prod:/CVE-2025-3246...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE tool is only for sharing and communication. Do not use for unauthorized testing, otherwise the author is not responsible. root@kitploit: -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id"...

CVE-2023-38646

CVE-2023-38646 - Metabase Pre-Auth RCE ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author securezeron Step Guides 1. Set Up the Listener on your attacker machine: root@kitploit: nc -nlvp 4444 2. Then, run this command...

wifi-hacker

Script de shell para atacar conexiones inalámbricas utilizando herramientas integradas de Kali. Soporta todos los tipos de seguridad WEP, WPS, WPA, WPA2 !Imagenhttps://assets.kitploit.com/production/public/readmes/placeholders/f0fc86cfe65f76d40e15aaec61704ec8220a56dc89d4be...

CVE-2025-5548

🚀 CVE-2025-5548 - Explotación de FreeFloat FTP Server 1.0 Análisis profesional de vulnerabilidades y explotación completa de desbordamiento de búfer remoto 🎯 Aspectos Destacados del Proyecto Caso de estudio completo del mundo real de CVE-2025-5548 desbordamiento de búfer remoto basado en pila en...

FEP3370-advanced-ethical-hacking

DynoRoot CVE-2018-1111 Final project for the course Advanced Ethical Hacking at KTH, Stockholm This project demonstrates a known vulnerability of Fedora and RedHat machines related to an unsafe client-side implementation of the Dynamic Host Configuration Protocol DHCP. A rogue DHCP server can cra...

CVE-2020-16846-Saltstack-Salt-API

CVE-2020-16846-Saltstack-Salt-API Vulnerabilidad explicada: Se descubrió un problema en SaltStack Salt hasta la versión 3002. El envío de solicitudes web manipuladas a la API de Salt, con el cliente SSH habilitado, puede provocar una inyección de shell. Los detalles sobre esta vulnerabilidad se...

CVE-2025-24801

CVE-2025-24801 PoC for GLPI RCE This repository contains a proof-of-concept script poc.py that exploits CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. It automates: Logging into GLPI Enabling .php uploads by updating document type settings Uploading a PHP reverse shell via the AJAX...

webmin_1.920

CVE-2019-15107 Webmin 1.920 Unauhenticated Remote Command Execution A python3 script for the CVE-2019-15107 Webmin 1.920 Unauhenticated Remote Command Execution that creates a reverse shell or a pseudo interactive shell using mkfifo for firewall evasionA python3 script for the CVE-2019-15107 Webm...

CVE-2025-32463

Fuertemente influenciado/copiado/basado en el formato de un repositorio similar de pr0v3rbs -- https://github.com/pr0v3rbs/CVE-2025-32463i\chwoot.git Esta es una reimplementación en C para la entrega, ejecución y limpieza rápidas desde una única fuente. CVE-2025-32463 – sudo chroot "chwoot" PoC...

cve-2020-5902-ioc-bigip-checker

CVE-2020-5902 IoC Detection Tool This script is intended to be executed locally on an F5 BIG-IP in Advanced Shell bash by a user with root privileges; it is not intended to be run in any other setting. Note: Appliance Mode does not allow access to Advanced Shell, and therefore this tool cannot be...

asf__karaf_CVE-2022-22932_4-3-5

Apache Karaf Apache Karaf is a modulith runtime, supporting several frameworks and programming model REST/API, web, spring boot, .... It provides turnkey features that you can directly leverage without effort, packaged as mutable or immutable application. Overview Hot deployment : Karaf supports...