Follina-CVE-2022-30190-Sample

Follina-CVE-2022-30190-Sample Educational exploit for CVE-2022-30190...

CVE-2025-7766

CVE-2025-7766 PoC Exploit PoC for exploiting XML External Entity vulnerability in CVE-2025-7766. Demonstrates file read /etc/passwd and out-of-band HTTP callbacks. Author : Byte Reaper CVE : CVE-2025-7766 Vulnerability : Remote Code Execution via XML External Entity XXE PoC for exploiting XXE in...

cve-2018-12895-hotfix

This repository does not have a README...

Zoho_CVE-2022-23779

ZohoCVE-2022-23779 Internal Hostname Disclosure Vulnerability Proof-of-Concept Exploit Step 1: curl -ILk https://IP:port/themes Step 2: Read the HTTP redirect response and anaylze the Location HTTP response header. PoC Follow us Vulnmachines Platform YouTube Twitter Facebook LinkedIn...

system_bt_AOSP10_r33_CVE-2020-0413

Fluoride Bluetooth stack Building and running on AOSP Just build AOSP - Fluoride is there by default. Building and running on Linux Instructions for Ubuntu, tested on 14.04 with Clang 3.5.0 and 16.10 with Clang 3.8.0 Download source root@kitploit: mkdir /fluoride cd /fluoride git clone...

Bug-Bounty-Arsenal-v.3

BugBounty Arsenal A free, full-stack security scanning platform for bug bounty hunters and security researchers — 50+ detectors, continuous monitoring, and CI/CD gating from a single dashboard. ▶ Live app:bugbounty-arsenal.net — free, no credit card. If this is useful, please ⭐ the repo — it...

CVE-2021-36934

CVE-2021-36934 HiveNightmare aka SeriousSAM...

Honeypot-Logs-CVE-2025-5777

Honeypot-Logs-CVE-2025-5777 CitrixBleed 2 NetScaler honeypot logs...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule THIS IS NOT AN ORIGINAL EXPLOIT. THIS IS AN AUDITED VERSION FOR A THM BOX Below are the links for the original, tryhackme box and my writeup for the box:...

Apache-Log4j-POC

Apache-Log4j-POC CVE-2021-44228 Proof of Concept of apache log4j LDAP lookup vulnerability You can read more about the vulnerability here: https://blog.cloudflare.com/inside-the-log4j2-vulnerability-cve-2021-44228/ How to run the provided ldap server that returns malicious object ? java -jar...

cve-2014-2734

This repository does not have a README...

text4shell-policy

Text4Shell Demo This demo shows how you can use Sigstore to validate your signed SBOMs against text4shell policies in Kubernetes or on the command line Option 1: Check if your remote OCI image is affected using cue with cosign 2.0 root@kitploit: cosign verify-attestation --policy...

CVE-2022-26726-POC2

This repository does not have a README...

CosmicRakp

CosmicRakp Table of Contents Introduction CVE-2013-4786 Installation Usage Credits License Introduction CosmicRakp is a powerful tool written in Go that allows red teamers and penetration testers to dump IPMI hashes. This project aims to be efficient, fast, and easy to use. CVE-2013-4786 This too...

Grafana-Final-Scanner

Grafana Final Scanner A command-line vulnerability scanner for Grafana. It fingerprints the installed Grafana version, runs a set of version-aware CVE checks, audits common configuration weaknesses, stores results in a local database, and can serve them through a small web dashboard. Legal This...

CVE-2025-7840

XSS Exploit for CVE-2025-7840 Author : Byte Reaper @ByteReaper0 Description Proof‑of‑concept exploit for CVE-2025-7840 , targeting a vulnerable web application endpoint that fails to sanitize user input on the Firstname parameter of a reservation form. By crafting a GET request to: root@kitploit:...

bluekeep_CVE-2019-0708_poc_to_exploit

Note: This project has been archived as actual exploits have been developed elsewhere with better success. https://blog.rapid7.com/2019/09/06/initial-metasploit-exploit-module-for-bluekeep-cve-2019-0708/ Badges bluekeepCVE-2019-0708poctoexploit Porting BlueKeep PoC from @Ekultek & @umarfarook882 ...

CVE-2021-28480_HoneyPoC3

ExchangeRCE-CVE-2021-28480 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ PoC for exploiting RCE in Exchange CVEs: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482 and CVE-2021-28483. Usage Achieves RCE on Exchange Servers To run, from a Linux host:...

CVE-2021-22986_Check

CVE-2021-22986Check CVE-2021-22986 Checker Script in Python3 How to Use: python3 checker.py -u http://url Output: root@kitploit: HOST IS NOT VULNERABLE: | | | / | | | | | | | | | | | | | | | | \ \ | ' | |/ | | | | | | | | | | | | | || |/ |/| ./||/||| | | || Vuln Checker ! Target: http://URL +...