1308479 matches found
CVE-2023-36874
CVE-2023-36874 CVE-2023-36874 Proof of Concept...
CVE-2024-41992-PoC
PoC For the CVE-2024-41992. CVE Write-Up FR : https://fj016.fr/blog/cve-2024-41992...
OpenSSL-1_0_1g_CVE-2015-1792
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...
commons-text-goat
Commons-Text Goat This is a webapp that is intentionally vulnerable to CVE-2022-42889. It uses an embedded Jetty server and Maven to start a servlet listening at port 8080 at URL \api. This endpoint accepts a URL parameter cmd. This is embedded between $ and and passed to the StringSubstitutor...
CVE-2022-1329-WordPress-Elementor-RCE
CVE-2022-1329-WordPress-Elementor-RCE This poc is based on the one of AkuCyberSec. 中文版本 Usage Use docker-compose to start the vuln environment: root@kitploit: docker-compose up -d Then you can access the WordPress Admin page with URL http://localhost:8000. Register the admin user, and add a...
Apache-Druid-CVE-2021-25646-Exploit
Apache Druid RCE Exploit CVE-2021-25646 Python exploit for Apache Druid Remote Code Execution via JavaScript code injection CVE-2021-25646. Description This script exploits an RCE vulnerability in Apache Druid versions 0.20.1 that allows arbitrary code execution through specially crafted sampler...
CVE-2023-23397
This repository does not have a README...
Checkmarx-CVE-2025-30066-Detection-Tool
Checkmarx-CVE-2025-30066-Detection-Tool These are tools for scanning your GitHub workflows and logs for potential malicious actions associated with CVE-2025-30066. It checks for a set of known risky GitHub Actions and a suspicious code snippet embedded in workflow files. As well for secrets that...
wpUsersScan
wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage root@kitploit: $ python wpUsersScan.py URL How to install Clone Clone the repository with: root@kitploit: $ git clone...
ban-exploitable-bitcoin-nodes
ban-exploitable-bitcoin-nodes Ban all denial-of-service vulnerability exploitable nodes from your node CVE-2018-17144 Requirements for the bash script ban.sh Command-line JSON processor jq. Install on Debian-based Linux root@kitploit: sudo apt-get install jq Download and use the script git clone...
WebKit-NavigationAPI-SOP-Bypass
WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — Same-Origin Policy bypass via cross-port interception CVE-2026-20643...
TOP
TOP all Top Top TopCodeql TOP All bugbounty pentesting CVE-2022- POC Exp Things Table of Contents 2026 year top total 30 2025 year top total 30 2024 year top total 30 2023 year top total 30 2022 year top total 30 2021 year top total 30 2020 year top total 30 2019 year top total 30 2018 year top...
ScannerCVE-2021-3156
ScannerCVE-2021-3156 Script to scan a list of hosts to check if they are vulnerable to CVE-2021-3156. If not vulnerable, the output is as follows: sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or configure an askpass helper sudoedit: a...
CVE-2022-22947-exp
CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability, wrote an exploit exp Later, based on an article by a senior, wrote an exp for memory horse injection, for reference only...
Log4j-PoC
Proof of Concept for Log4j CVE-2021-44228 Disclaimer This project is only for educational purposes. Introduction This is a proof of concept of the log4j rce adapted from HyCraftHD. Here are some links for the CVE-2021-44228: https://www.lunasec.io/docs/blog/log4j-zero-day...
CVE-2024-2997
CVE-2024-2997 Scanner Overview CVE-2024-2997 Scanner is an advanced vulnerability scanner designed to detect the command injection vulnerability in web applications. This tool helps security professionals identify potential security risks in their applications. Disclaimer This tool is for...
joomla-cve-2018-6396
Joomla-CVE-2018-6396 Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Date: 03/03/2018 Vendor Homepage: http://www.joomla-24.de/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/ Version: = 4.2.3 Tested on: KaLi...
CVE-2023-28231
CVE-2023-28231 DHCP Server Remote Code Execution impact: 2008 R2 SP1 до Server 2019...
wireshark-forensics-plugin
wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...