Toolshell_CVE-2025-53770

ToolShell → CVE‑2025‑53770 Exploit PoC This package allows: 1. Upload webshell to SharePoint 2. Extract ValidationKey 3. Generate signed ViewState 4. RCE via reverse/bind shell 🔧 Setup root@kitploit: git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 Running Upload the webshell Fro...

CVE-2025-48384-POC

This repository does not have a README...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path root@kitploit...

CVE-2025-5777

WatchTowr と Nocerainfosec に素晴らしいPOCSを提供していただき感謝します。これは、私たちの環境で必要だったpowershellバージョンです。...

Vulnerable-Lab-NextJS-CVE-2025-29927

Next.js Docker Hello World A simple Hello World application using Next.js 12.2 and Docker. Prerequisites Docker Building and Running the Application 1. Build the Docker image: root@kitploit: docker build -t nextjs-docker-hello . 2. Run the container: root@kitploit: docker run -p 3000:3000...

Tomcat-CVE-2025-31650

CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39...

CVE-2025-64459-hunter

CVE-2025-64459-hunter Fast network scanner for CVE-2025-64459 Django SQL Injection vulnerability. Installation root@kitploit: pip install -r requirements.txt Usage root@kitploit: Scan single IP python cve202564459hunter.py -t 192.168.1.100 Scan CIDR range python cve202564459hunter.py -t...

repo

Malicious Repo for CVE-2025-65964...

CVE-2025-32463

CVE-2025-32463chwoot Reference: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot...

suricata-rule-CVE-2025-53770

suricata-rule-CVE-2025-53770 Detection rules for CVE-2025-53770 root@kitploit: alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...

CVE-2025-31722

This repository does not have a README...

Roundcube_CVE-2025-49113

RCE in Roundcube CVE-2025-49113 - My Obsidian note .md date time Status: Completed Lab: Easy Tags: RCE | PHP | LABTHM | EXPLOIT | CVE by KRPT Paulo G. Werneck - Linkedin - in.com/pgw-script Impact : remote command execution post-login CVSS 9.9 Affected versions : ≤ 1.5.10 / 1.6.10 Patched : 1.5.1...

CVE-2025-53770-scanner

CVE-2025-53770 Python script to check for CVE-2025-53770...

CVE-2025-53770_Raw-HTTP-Request-Generator

This repository does not have a README...

citrix_bleed_2

Citrix Bleed 2 PoC Scanner CVE-2025-5777 This script is a Proof-of-Concept PoC scanner for the hypothetical vulnerability "Citrix Bleed 2" CVE-2025-5777. It is designed to detect potential memory leaks from Citrix ADC devices by sending oversized requests and analyzing the responses for sensitive...

Apache Tika - XML External Entity Injection

Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1, and tika-parsers 1.13-1.28.5 contain an XML External Entity injection caused by processing crafted XFA files inside PDFs, letting attackers perform XXE attacks remotely, exploit requires crafted PDF input. id: CVE-2025-66516 info: nam...

Gladinet CentreStack & TrioFox - Local File Inclusion

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...

WSUS-CVE-2025-59287

WSUS-CVE-2025-59287...

POC-IngressNightmare-CVE-2025-1974

Shell.so Builder Alpine-based This project allows you to build a shell.so payload using Alpine Linux inside a Docker container. Instructions 1. Clone the repository : git clone cd 2. Build the payload : ./runbuild.sh The compiled shell.so will be generated in the project root directory. ⚠️...

cve-2025-29927-lab

This repository contains a deliberately vulnerable web application built using Next.js. It is designed to demonstrate and study the security issue known as CVE-2025-29927. The goal of this project is to help security researchers, students, and bug bounty hunters understand how the vulnerability...