CVE-2018-2628

CVE-2018-2628 CVE-2018-2628...

cve-2015-8103

CVE-2015-8103 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2015-8103 Image author: https://github.com/Medicean/VulApps/tree/master/j/jboss/1...

CVE-2023-23752

CVE-2023-23752 Bulk scanner + get config from CVE-2023-23752 Screenshot Installations clone this repository install the requirements root@kitploit: pip3 install -r requirements.txt...

WordPress_4.9.8_RCE_POC

Summary A simple PoC for WordPress RCE author priviledge, refer to CVE-2019-8942 and CVE-2019-8943. Affected Version WordPress = 4.9.8 verified WordPress = 5.0.0 Test Environment Docker Image docker pull avfisherdocker/wordpress:4.9.8 docker run -d -p 80:80 avfisherdocker/wordpress:4.9.8 Mysql &...

CVE-2026-41096-Attack-Surface

CVE-2026-41096 Real World Attack Surface Attack surface in the real-world environment of CVE-2026-41096 Links Detailed analytical article Author: Two Seven One Three...

ROOT-APP-NPM-CVE-2024-51479 CVE-2024-51479 in next - Patched by Root

Root has patched CVE-2024-51479 in the next package for Root:npm. Multiple fixed versions available...

CVE-2020-0041

CVE-2020-0041 This repository contains LPE code for exploiting CVE-2020-0041 implemented by bluefrostsecurity as released at https://github.com/bluefrostsecurity/CVE-2020-0041/tree/master/lpe . The exploitation approach for this part can be found at...

Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow

Privilege Escalation with Dirty COW CVE-2016-5195 Author: Samuel García Academy: 4Geeks Academy Date: 25/06/2025 Description Dirty COW is a critical Linux kernel vulnerability ≤ 4.8.3 that allows a local attacker to modify read-only files through a race condition, escalating privileges to root...

sudo-vulnerability-CVE-2019-14287

sudo-vulnerability-CVE-2019-14287 Sudo Vulnerability CVE-2019-14287...

CitrixADC-CVE-2020-8300

Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API EXAMPLE & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" If this proves useful to anyone I will develop further with the...

ipmitest

ipmitest Shell script for testing the IPMI cipher type zero authentication bypass vulnerability CVE-2013-4784 The IPMI is a standardized computer system interface used by system administrators for out-of-band management of computer systems and monitoring of their operation. It is a way to manage ...

chk_log4j

chklog4j - Tool to find jar files which are vulnerable to log4j CVE-2021-44228. Install 1. git clone https://github.com/gcmurphy/chklog4j 2. cd chklog4j && cargo install --path . Usage The tool only checks a single file so it is best combined with something like fd. root@kitploit: $ fd -a -e jar ...

cve-2020-1938

This repository does not have a README...

CVE-2024-1086_Ausarbeitung

This repository does not have a README...

CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git PoC Pull from Docker docker pull qweraqq/cve-2018-11235-git-submodule-rce Start Git Http Server docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce PoC git clone --recurse-submodules http://git.gitserver/malicious.git...

log4j-CVE-2021-44228

Apache Log4j Zero Day aka Log4Shell aka CVE-2021-44228 Introduction Reproducing the problem in k8s env Setting up k8s env with the vulnerability Possible Solutions KubeArmor Security Policy Not allowing any execs from the JVM/Java Default Deny based rules KubeArmor Visibility/Observability into t...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test This script is designed for detection of vulnerable servers CVE-2014-0224. in a wide range of configurations. It attempts to negotiate using each affected protocol version SSLv3, TLSv1, TLSv1.1, and TLSv1.2 advertising a comprehensive set of ciphers. Changes: v0.1 - Update...

CVE-2020-3952

This repository does not have a README...

cve-2020-0618

CVE-2020-0618 Honeypot Detects and logs attempts to exploit CVE-020-0618 SQL Reporting Services RCE Serves content and headers like SSRS would, in order to increase chance of indexing on search engines e.g. google, shodan etc. Based on the great work of MDSec and x1sec Installation Get the code...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...