CVE-2021-29447-POC

CVE-2021-29447 Proof of Concept Proof of Concept for CVE-2021-29447 written in Python. Details about the CVE can be found at https://vulners.com/cve/CVE-2021-29447 Disclaimer This script is a PoC for authorized ethical security testing only. Usage root@kitploit: usage: python3 CVE-2021-29447.py -...

CVE-2015-3636

This repository does not have a README...

CVE-2020-5902-fofa-scan

CVE-2020-5902-fofa-scan Introduction F5 BIG-IP Remote Code Execution Vulnerability CVE-2020-5902, fofa scan script Prerequisites fofa member, fill in the value of fofaproarssession. Modify the keyword value on line 12 yourself. Modify the page number range on line 17 yourself. The methods and...

nextjs-CVE-2025-29927-hunter

About A simple Python tool that automates Shodan searches and filters target IPs/domains to identify assets potentially vulnerable to CVE-2025-29927 in Next.js deployments. Usage Extract both IPs and domains root@kitploit: python3 nextjs-CVE-2025-29927-hunter.py -t target.com Only extract domains...

CVE-2022-1040

CVE-2022-1040 may the poc with you 外面捡来的 root@kitploit: curl --insecure -H "X-Requested-With: XMLHttpRequest" -X POST 'https://x.x.x.x/userportal/Controller?mode=8700&operation=1&datagrid=179&json="🦞":"test"'...

CVE-2024-1086-checker

CVE-2024-1086-checker This is a simple checker script to detect the kernel configuration which is vulnerable to exploitation. A result of "kernel config not vulnerable" from this script only means that the vulnerability is not exploitable with currently known paths. How to Use root@kitploit: curl...

salt-rce-scanner-CVE-2020-11651-CVE-2020-11652

1 What is it? Scanning tool to test for SaltStack vulnerabilities CVE-2020-11651 & CVE-2020-11652. The vulnerabilities allow an attacker who can connect to the "request server" port to bypass all authentication and authorization controls and publish arbitrary control messages, read and write file...

exploit-CVE-2020-24815

exploit-CVE-2020-24815.py this is my first exploit for CVE-2020-24815 put the POST path after url !!!! Example: if the script not work change the cookie on script root@kitploit: $ - pip install -r requirements.txt fix probleme pdftotext not installed: root@kitploit: $ - sudo apt-get install...

CVE-2019-2725

CVE-2019-2725...

AVideo3xploit

AVideo3xploit.go RCE exploit for AVideo root@kitploit: root@kali: go get github.com/fatih/color root@kali: git clone https://github.com/ahussam/AVideo3xploit.git root@kali: cd AVideo3xploit root@kali:/AVideo3xploit go run AVideo3xploit.go http://target/avideo/ username password You should get a...

CVE-2020-16898-Bad-Neighbor

================================================================================= Simple policy to detect CVE-2020-16898: Bad Neighbor Following functionality are provided by the script :: 1 Script checks on heuristic described here:...

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 Docker Lab for CVE-2022-42889 You can either build the Docker image locally or pull the image from Docker Hub and run the container. Clone the repo root@kitploit: git clone https://github.com/devenes/text4shell-cve-2022-42889.git Build the Docker image locally...

CUPS-CVE-2024-47176

This repository does not have a README...

ZF3_CVE-2021-3007

ZF3CVE-2021-3007 ZendFrameworkCVE-2021-3007 PoC...

CVE-2024-24576.jl

CVE-2024-24576 PoC in Julia root@kitploit: λ julia main.jl Enter arguments: hello Output: Argument received: hello root@kitploit: λ julia main.jl Enter arguments: hello & whoami Output: Argument received: "hello & whoami" root@kitploit: λ julia main.jl Enter arguments: hello" & whoami Output:...

CVE-2023-36884

CVE-2023-36884 This is an emergency solution while Microsoft addresses the vulnerability. CVE-2023-36884 in images Reference Docx: a61b2eafcf39715031357df6b01e85e0d1ea2e8ee1dfec241b114e18f7a1163f pic.twitter.com/CxBYlWyvlB — Kimberly @StopMalvertisin July 12, 2023...

CVE-2021-41773-POC

CVE-2021-41773-nse By George Labrin @creadpag Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. Use NMAP. First Tab: root@kitploit: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: root@kitploit: sudo nmap -Pn...

CVE-2026-0770

This repository does not have a README...

kcfg-bypass

kcfg-bypass kcfg bypass example - CVE-2024-21338...

log4j2-CVE-2021-44228

Sample Log4j2 vulnerable application CVE-2021-44228 Versions Affected: all versions from 2.0-beta9 to 2.14.1 This application is based on Spring Boot web application vulnerable to CVE-2021-44228 It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1. Running the application Run it:...