1300276 matches found
CVE-2024-3094-Checker
CVE-2024-3094 Checker The CVE-2024-3094 Checker is a powerful Bash script designed for Linux systems. It identifies vulnerability to CVE-2024-3094, related to XZ/LZMA utilities. This script is essential for system administrators and security professionals to quickly assess and mitigate potential...
ARC-Browser-Address-Bar-Spoofing-PoC
ARC Browser Address Bar Spoofing - iOS/iPadOS CVE-2024-25733 ARC Browser Address Bar Spoofing PoC - iOS/iPadOS Exploit PoC Proof of Concept root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort ===...
CVE-2023-32243-proof-of-concept
This repository does not have a README...
cve-2017-9805.py
CVE-2017-9805.py 1. Better Exploit Code For CVE 2017 9805 apache struts 2. Should be mostly error proof Why Recode? Found that most of the exploit code online simply used string concatenation to insert user supplied commands and insert into an XML string. This isnt very reliable as XML requires...
PIGADVulnScanner
ADVulnScanner Detect common one-shot vulnerabilities in the domain, including: NoPac, ZeroLogon, CVE-2022-26923, PrintNightMare...
CVE-2019-0708-EXP-Windows
CVE-2019-0708-EXP-Windows-Version Descargo de responsabilidad El PoC del autor es únicamente con fines de investigación. Si el lector utiliza este PoC para llevar a cabo otras acciones, el autor no se hace responsable. Índice toc Introducción CVE-2019-0708-EXP en su versión para Windows se ejecut...
ProxyShell
ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...
Embedded-PDF
Conexión de puerta trasera incrustada mediante archivos PDF 😈 presentado por Introducción Este video de demostración muestra cómo podemos controlar el dispositivo de la víctima enviando un archivo PDF de apariencia inocente al objetivo, que en realidad contiene un payload incrustado. El exploit f...
flan
Flan Scan es un escáner de vulnerabilidades de red ligero. Con Flan Scan puedes encontrar fácilmente puertos abiertos en tu red, identificar servicios y sus versiones, y obtener una lista de CVE relevantes que afectan a tu red. Flan Scan es un envoltorio sobre Nmap y el script vulners que convier...
ColdFusionPwn
ColdFusionPwn Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12. Description The tool allows you to generate serialized AMF-payloads to exploit the missing input validation of allowed classes. For details see our blog post. Install Get the latest version of ysoserial. Get...
CVE-2022-22963
CVE-2022-22963 Ejecución remota de código explotando CVE-2022-22963 para atacar el servicio Spring Cloud. Descargo de responsabilidad: Esto es solo con fines educativos. El autor no es responsable del uso de este programa. Úsalo bajo tu propio riesgo. Uso root@kitploit: ./CVE-2022-22963 -h Usage:...
CVE-2025-32429
CVE-2025-32429 – SQL Injection in PHP PDO Prepared Statements This repository contains a proof-of-concept exploit for CVE-2025-32429 , a vulnerability affecting PHP PDO prepared statements when emulation is enabled. 📄 References Original research by Assetnote:...
CVE-2020-25223
CVE-2020-25223 A PoC script for testing CVE-2020-25223 against an affected Sophos UTM. Given an IP address, the script attempts to download a copy of the devices /etc/shadow file. Original research: https://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223...
CVE-2021-25162
CVE-2021-25162 CVE-2021-25162...
bouncy-castle-generative-test-poc
Generative testing bouncy castle vulnerability CVE-2020-28052 Running the tests Test the vulnerable versions defaults to 1.66 root@kitploit: $ clojure -M:test $ clojure -M:test:v1.65 Test the versions before the vuln and after the patch 1.67 root@kitploit: $ clojure -M:test:v1.64 $ clojure...
CVE-2023-22515
CVE-2023-22515 Confluence Data Center & Server Exploit de vulnerabilidad de escalada de privilegios Uso root@kitploit: python3 CVE-2023-22515.py url username password Descargo de responsabilidad Esta herramienta de detección está destinada únicamente para uso de pruebas de seguridad por parte de...
CVE-2019-15107
CVE-2019-15107 Something I wrote for CVE-2019-15107, a Webmin backdoor...
CVE-2018-7750
CVE-2018-7750 an RCE remote command execution approach of CVE-2018-7750 Exploit Title: Paramiko 2.4.1 - Remote Code Execution Date: 2018-11-06 Exploit Author: jm33-ng Vendor Homepage: https://www.paramiko.org Software Link: https://github.com/paramiko/paramiko/archive/2.4.0.tar.gz Version: 1.17.6...
CVE-2024-26581-Checker
CVE-2024-26581 Vulnerability Checker for BGN Internal Requirements Bash. Wget. Installation Make sure to download and place the tool in the /opt/ directory. Download the tool source code by running the command: sudo wget...