1300131 matches found
rootOS
rootOS Tries to use various CVEs to gain sudo or root access. All exploits have an end goal of adding ALL ALL=ALL NOPASSWD: ALL to /etc/sudoers allowing any user to run sudo commands. Run root@kitploit: python root.py Exploits Name| CVE| Date| Links ---|---|---|--- ARDAgent| CVE-2008-2830|...
CVE-2017-5638-Mass-Exploit
This repository does not have a README...
Spring4Shell-CVE-2022-22965.py
Spring4Shell-CVE-2022-22965.py Script to check for Spring4Shell vulnerability Tested on https://github.com/lunasec-io/Spring4Shell-POC/blob/master/Dockerfile...
CVE-2023-21768
CVE-2023-21768 OS information root@kitploit: OS 名称: Microsoft Windows 11 专业版 OS 版本: 10.0.22621 暂缺 Build 22621 LPE...
PDFkit-CMD-Injection
PDFkit-CMD-Injection CVE-2022-25765 Detail Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. PoC Start a HTTP server root@kitploit: 1- python3 -m http.server 80 Start a netcat listener root@kitploit: 2- nc -lnvp 'Target Port' Ma...
CVE-2023-29489
This repository does not have a README...
extra_recipe
// ianbeer kernel arbitrary read/write exploit for CVE-2017-2370 for iOS 10.2 Only tested on iPod Touch 6G 14C92 - other devices/firmwares will not work out of the box! the bug machvoucherextractattrrecipetrap is a mach trap which can be called from any context. It's brand new code, added in iOS...
mac0352-ep4
mac0352-ep4 Apache HTTP Server 2.4.23 vulnerability study CVE-2016-8740...
jboss-autopwn
jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...
CVE-2020-6308-mass-exploiter
CVE-2020-6308-mass-exploiter Explotador/fuzzer masivo de CVE-2020-6308. uso: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...
external_tcpdump_CVE-2018-14469
tcpdump Para reportar un problema de seguridad, envíe un correo electrónico a [email protected]. Para reportar errores y otros problemas, contribuir con parches, solicitar una característica, proporcionar comentarios generales, etc., consulte el archivo CONTRIBUTING en la raíz del árbol fuen...
CVE-2025-24799-scanner
CVE-2025-24799-scanner Scanner for GLPI CVE-2025-24799 vulnerability...
CVE-2018-6574-POC
This repository does not have a README...
CVE-2023-1829
CVE-2023-1829 The exploitation is tested on Ubuntu22.04 official source code 5.15.0-25.25 Installing dependences for some netlink filter functions root@kitploit: sudo apt install libnftnl-dev libmnl-dev Building step: root@kitploit: make References...
CVE-2020-10759-poc
Resumen Explota CVE-2020-10759: omisión de verificación de firma PGP de fwupd. Consulte https://github.com/justinsteven/advisories/blob/master/2020fwupddanglings3bucketandCVE-2020-10759signatureverificationbypass.md para más detalles. Requisitos Nota: Debe instalar python3-gpg desde el proveedor ...
ZeroLogon-to-Shell
This is a combination of the zerologontester.py code and the tool evil-winrm to get a shell. I just added a "os.system" to use evil-winrm. Requirements: To get the Administrator NTLM HASH I recommend you to use secretsdump tool from impacket And, of course, you need to install evil-winrm This is...
libxml2-exploit
libxml2-exploit An example exploit for CVE-2017-7376 Install Download this repo and a vulnerable version of libxml2, e.g. v2.7.7: root@kitploit: git clone https://github.com/brahmstaedt/libxml2-exploit.git cd libxml2-exploit wget https://github.com/GNOME/libxml2/archive/v2.7.7.zip unzip v2.7.7.zi...
CVE-2013-0156
This repository does not have a README...
nullmap
nullmap A very simple driver manual mapper based on my older voidmap and CVE-2023-21768 POC by chompie and b33f. Because the underlying IoRing post-exploitation memory r/w primitive is not handling many consequent reads and writes very well, I've decided to overwrite CR4 to disable SMEP/SMAP to...