1300678 matches found
CVE-2015-6967-EXPLOIT
CVE-2015-6967-EXPLOIT Exploit PoC para CVE-2015-6967 Este script de Python explota una vulnerabilidad en Nibbleblog CVE-2015-6967 para subir una reverse shell a un objetivo vulnerable. El script solicita al usuario la URL objetivo, las credenciales de usuario y la IP/puerto de tu equipo, y luego...
CVE-2025-32429
CVE-2025-32429 – SQL Injection in PHP PDO Prepared Statements This repository contains a proof-of-concept exploit for CVE-2025-32429 , a vulnerability affecting PHP PDO prepared statements when emulation is enabled. 📄 References Original research by Assetnote:...
CVE-2021-44228
Log4Shell POC CVE-2021-44228 The scope of this repository is to provide all the components needed to exploit CVE-2021-44228, nicknamed Log4Shell, and to show how to exploit it. The ingredients needed to exploit this vulnerability are the following: 1. An LDAP Server that will redirect the...
CVE-2020-6308-mass-exploiter
CVE-2020-6308-mass-exploiter CVE-2020-6308 mass exploiter/fuzzer. usage: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...
Apache-Druid-CVE-2021-25646-Exploit
Apache Druid RCE Exploit CVE-2021-25646 Python exploit for Apache Druid Remote Code Execution via JavaScript code injection CVE-2021-25646. Description This script exploits an RCE vulnerability in Apache Druid versions 0.20.1 that allows arbitrary code execution through specially crafted sampler...
CrushFTP-CVE-2024-4040-illdeed
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This repository contains a stealthy Python proof-of-concept PoC exploit for CVE-2024-4040 , a critical vulnerability in CrushFTP v10 and below that allows an attacker to bypass authentication using a forged CrushAuth cookie and AWS-style...
CVE-2019-0708-PoC-Exploit
CVE-2019-0708-PoC-Exploit CVE-2019-0708 PoC Exploit HI Kevin Beaumont @GossiTheDog ! : Sorry, couldn't resist!...
CVE-2022-45460
Proof of Concept for CVE-2022-45460 Detailed write-up is available here...
cve-2026-61511
This repository does not have a README...
WingFTP-CVE-2025-47812-illdeed
CVE-2025-47812 - Wing FTP Server RCE Exploit This repository provides a proof-of-concept exploit for CVE-2025-47812 , a remote command execution RCE vulnerability in Wing FTP Server. An attacker can inject and execute arbitrary Lua-based system commands by abusing the username parameter during...
Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow
Privilege Escalation with Dirty COW CVE-2016-5195 Author: Samuel García Academy: 4Geeks Academy Date: 25/06/2025 Description Dirty COW is a critical Linux kernel vulnerability ≤ 4.8.3 that allows a local attacker to modify read-only files through a race condition, escalating privileges to root...
PutScanner
🔍 Escáner de Directorios PUT Una herramienta de pruebas de penetración que identifica directorios web escribibles mediante el método HTTP PUT, diseñada específicamente para detectar CVE-2025-24813 Subida Arbitraria de Archivos en Apache Tomcat. 📌 Características Manejo Inteligente de Protocolos :...
weaponized-0604
Weaponized CVE-2019-0604 Automated Exploit Tool to Maximize CVE-2019-0604. Requirement The requirements.txt file should list all Python libraries this tool used, and they'll be installed using root@kitploit: $ pip install -r requirements.txt Manual blind exploit without credential root@kitploit: ...
CVE-2020-0796-Scanner
SMBGhostscanner CVE-2020-0796 - SMBv3 的简易扫描器。 该扫描仪仅用于测试服务器是否存在漏洞。它不适用于研究或开发，因此使用固定载荷。 它通过协商请求检查 SMB 方言 3.1.1 和压缩能力。 SMBGhostscanner.exe 192.168.1.1...
Apache-Struts
Apache-Struts An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Nmap Recong nmap -p --script http-vuln-cve2017-5638 ' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id'...
CVE-2024-10914-Exploit
SilverX Exploit Tool 📌 Description SilverX Exploit Tool is a penetration testing script designed to detect and exploit vulnerabilities in web applications. It provides a shell-like interface for executing commands remotely on vulnerable systems. ⚠️ Disclaimer This tool is for educational and...
Ofbiz-RCE
📌 Apache OFBiz RCE Exploit CVE-2024-38856 This Python script allows exploiting a Remote Code Execution RCE vulnerability in Apache OFBiz versions 18.12.15 through unauthorized access to the endpoint /webtools/control/forgotPassword/ProgramExport. 🛠️ Description CVE : CVE-2024-38856 Type : Incorrec...
sshfinder
sshfinder Find every SSH service on your network, judge whether it meets your standard, and get told when that changes. sshfinder is a single Python file with no required dependencies. Point it at a CIDR range and it discovers SSH wherever it is actually listening — not just port 22 — confirms ea...
CVE-2025-24893-RCE-PoC
Infos This PoC first tests for the SSTI and if it works. It will go in loop and allows you to run commands remotly. The exec and shell command do the same currently. Installation root@kitploit: python3 -m pip install requirements.txt Usage Connecting root@kitploit: python3 poc.py Example With deb...